Jonas Werme

The Windows Recycle Bin looks simple but its inner workings reveal a structured, per-user, per-drive system with hidden directories, metadata files, and Explorer’s custom views. In this session, I use Sysinternals Process Monitor to uncover exactly how deleted files are stored, tracked, and restored. https://lnkd.in/eCnrYdkk

163

6 kommentarer

🚨 Critical Sudo flaw lets any local user get root access on Linux. No sudo rules required. Default configs are vulnerable. It’s been hiding in plain sight—since 2013. Fixes just dropped. Patch now. Full details → https://lnkd.in/gyvQaUAB

285

10 kommentarer

♨️ Why Full IPV6 Adoption 𝙒𝙤𝙣'𝙩 𝙃𝙖𝙥𝙥𝙚𝙣 Short answer is because there is nothing more permanent than a temporary working solution. 🧭 SNI: 𝐒𝐍𝐈 (𝐒𝐞𝐫𝐯𝐞𝐫 𝐍𝐚𝐦𝐞 𝐈𝐧𝐝𝐢𝐜𝐚𝐭𝐢𝐨𝐧) is like adding an apartment number to a street address when mailing a package. Without it, the server (like an apartment building) can't identify which website (apartment) a user wants to access, especially when multiple websites share one IP address. This can cause the server to present the wrong SSL certificate during the HTTPS handshake, disrupting the secure connection. SNI ensures the correct SSL certificate is shown by indicating the specific website the client is connecting to early in the process. 🧭CIDR: An IP address assignment technique called 𝐂𝐥𝐚𝐬𝐬𝐥𝐞𝐬𝐬 𝐈𝐧𝐭𝐞𝐫-𝐃𝐨𝐦𝐚𝐢𝐧 𝐑𝐨𝐮𝐭𝐢𝐧𝐠 (𝐂𝐈𝐃𝐑) increases the effectiveness of internet traffic routing. How it works? CIDR uses variable-length subnet masking (VLSM) to split the address space into subnets of different sizes. This allows for the creation of subnetworks with different host counts and reduces wasted address space Benefits? CIDR enables routers to efficiently classify IP addresses into subnets, which allows data to be transmitted to its destination without unnecessary paths. CIDR also allows for the flexible creation of supernets, which are collections of subnets that share similar network prefixes #IP #SECURITY #CCNA #CCIE #NETWORKING

129

🗣️ Use Entra ID security groups for assigning the security roles for users instead of giving the permissions directly 🗣️ Last Thursday I participated PowerUp! Meetup (Finland) where Tatu Seppälä were having a session about Streamlining Power Platform environment access and security role management with Entra ID 🤩 Main point was to manage access and security roles with a proven and repeatable strategy to simplify access control using native Microsoft features 😍 Key Takeaways were  👉 Use Entra ID groups to manage Dataverse security roles 👉 Control access to Power Platform environments via Entra ID 👉 Automatically clean up stale user role assignments 👉 Enable self-service access and role management for environment owners (no admin rights needed) 👉 Implement just-in-time role activation (e.g., System Administrator) with optional business justification and usage monitoring Read more in my latest blog post - click the link below my name 👊 #microsoft #powerplatform #environmentmanagement #entraid #securitygroups #securityroles

29

6 kommentarer

🔧 𝐁𝐞𝐡𝐢𝐧𝐝 𝐭𝐡𝐞 𝐓𝐞𝐥𝐞𝐦𝐞𝐭𝐫𝐲: 𝐖𝐡𝐲 𝐓𝐡𝐞𝐬𝐞 𝐂𝐚𝐭𝐞𝐠𝐨𝐫𝐢𝐞𝐬? Over the past year, I’ve received a lot of questions about how we decide which telemetry categories and subcategories are included in the EDR Telemetry Project. Until now, that context wasn’t public. But with the new site in place, I’ve taken the time to publish a full breakdown of the reasoning behind each category. This has been on my to-do list for a while, and I’m glad to finally share it. What’s new: ✅ Clear explanations of why each category matters ✅ What data is collected ✅ Why it’s important for detection ✅ Examples tied to real-world techniques Yes, there’s objectivity in what good telemetry looks like. But there are also judgment calls, and I want to be transparent about both. Now it’s all in one place, easy to explore, compare, and reference. 🧩 If you’re working in detection engineering, threat hunting, or just trying to understand what EDRs should be collecting, this update is for you. Check it out here: 🔗 https://lnkd.in/gvhmmnrZ

98

4 kommentarer