This is a small example I put together on how to quickly loop through each user SID in HKEY_USERS and find the value that shows what the wallpaper is set to for each user. This little script is a decent reference to use for finding (And with a little modification, setting) registry value(s) in the… Read More: Using Powershell to read registry HKEY_USERS »
A simple method I like to use when I want to quickly run a powershell script to download a file from a webserver. I use this when endpoints are not on an internal network so a network share is not always available, but since I am usually remotely calling the powershell script, Internet access is… Read More: Download files from website via Powershell »
An email was forwarded to me that came from a security MSP trying to stir up business with someone at the company I work at. Their quasi-scareware email was funny, but a horrible way for us to take seriously. Only thing missing was a sentence asking for bitcoin. I remember several years ago, companies were… Read More: Scareware is not dead »
Not a good week for NCR Aloha POS hosted solutions. They have been dealing with a BlackCat ransomware attack as reported by articles at: BleepingComputer – NCR suffers Aloha POS outage after BlackCat ransomware attack. DataBreaches.net – A short-lived BlackCat listing suggests NCR’s customers’ networks were accessed Securityweek.com – Payments Giant NCR Hit by Ransomware… Read More: Aloha! »