New answers tagged

0 votes

How to check if an RSA public / private key pair match

This is a very old thread, but I found the answers a little bit overengineered. So I just created yet another oneliner :) [[ `ssh-keygen -yf /path/to/private_key_file` == `cat /path/to/public_key_file`...
  • 101
0 votes

How to find out & set policy in Window Server 2016. To search in security event viewer for users accidentally delete shared network folder?

This link has all the information you need to enable auditing: https://system32.eventsentry.com/security/event/5144 https://system32.eventsentry.com/security/auditing This site will also give you more ...
  • 1,554
0 votes

How to find out & set policy in Window Server 2016. To search in security event viewer for users accidentally delete shared network folder?

You first need to Enable File and Folder Access Auditing Policy Now you need to configure auditing in the properties of the share network folder you want to track Now, if the user deletes any file or ...
  • 417
0 votes

OSSEC disk space usage

Very old post, but as I find myself in same situation again, I will document my solution here this time. May help someone or at least my future self. First to answer OP, the main and only way to ...
  • 141
0 votes

ONLYOFFICE - JWS secret doesn't work (can connect without)

I have been trying to resolve the same issue - I have a docker container setup so based on the feedback - I was able to locate my token as per the screenshot provided and instead of modifying any file ...
  • 1
0 votes
Accepted

Consolidation of Drop-in Config File for Securing Apache httpd

Per Gerald Schneider's comment, I have used mod_rewrite to force HTTPS in the drop-in file. Here is the final configuration, note the bottom portion as the addition. I have opted to leave the ...
  • 196
1 vote

Implement CIS Microsoft Windows Server 2019 but found conflict?

Yes, they are in conflict. Many RDP implementations use Network Level Authentication (NLA). This requires the Access this computer from the network right. As you have learned, these types of templates ...
  • 34.3k
2 votes

Should I report hacking attempts?

We get hundreds of hacking attempts on our web servers every day. Perhaps that is because we have had a web presence with about 40 sites for over 20 years. The hacking is bad enough for us to have ...
0 votes

Apache way to automatic login on a folder

Yes, Apache httpd allows you apply logic and ordering when combining different authorization/authentication criteria. https://httpd.apache.org/docs/2.4/mod/mod_authz_core.html#logic https://httpd....
  • 148
1 vote

Uninstalled Program(s) still appear in WMI Object “WIN32_InstalledStoreProgram”?

Here the solution that worked for us. There were bunch of Sev 4 and 5 vulnerabilities associated with outdated Windows Store Apps. Security Scan complained that we had an old version of Windows Store ...
1 vote
Accepted

How to get list of azure container images which are affected after security scans?

You can't get the results directly from the CLI unfortunately. All the scan data is stored in Log Analytics (via Azure Security Centre/Defender) so you would need to query it through that using the ...
  • 38.2k
1 vote

Ansible security best practices for monitoring

A configuration management suite like Ansible is a good match for updating and maintaining the configuration on a server, but it's not a good match for monitoring a server. Configuration management ...
0 votes

Does it make sense to conceal Wireguard port?

As port scanning won't work on wireguard anyway (it's just a UDP lister) and all invalid packets are dropped, port knocking would a ultra-paranoid on-top thing here. I'd not recommend to use port ...
  • 4,423
0 votes

Unable to login to Outlook after adding log on to on MacBook

So the issue is solved after you set the option as let users log on from all computers. Ahh. I've never seen this setting before. Did you set it in EAC? Would you mind to share a screenshot of the ...
  • 359
0 votes

Unable to login to Outlook after adding log on to on MacBook

I think the account profile maybe corrupted. Try recreating the profile in control panel. I found a similar thread for your reference. https://answers.microsoft.com/en-us/msoffice/forum/all/cant-log-...
  • 359
0 votes

Every day specific new port blocked request spam at firewall log

iptables -A port-scan -p tcp --tcp-flags SYN,ACK,FIN,RST RST -m limit --limit 1/s -j RETURN iptables -A port-scan -j DROP a rule to block furtive port scanning. A furtive port scan is a scan that ...
  • 417
0 votes
Accepted

Azure Security Alert - Login from an unusual data center

In hindsight this makes a lot of sense but this can occur (not saying it only occurs) when you have Azure resources accessing the database that are located in a different location. So database lives ...
0 votes

How to view all ssl certificates in a bundle?

awk -v cmd='openssl x509 -noout -text' \ '/BEGIN/{close(cmd)}; {print | cmd}' \ < bundle.pem | less Or to list only subjects and issuers: awk -v cmd='openssl x509 -noout -subject -issuer' \ '...
  • 1,845
0 votes

NFS read-only export security considerations

The read-only export is fully controlled by server independent from client sending a write request or faking the uids (assume, that server implementation is not badly broken). Thus, a malicious ...
  • 4,318

Top 50 recent answers are included