Blue Team

This PowerShell script pulls a domain’s MX, SPF, DMARC, DKIM, and TXT records, hands them to an LLM (in this example, OpenAI’s API) along with a prompt asking for security recommendations, and writes the result out as an HTML report. It’s a quick first pass for spotting missing or misconfigured... [Read More]

Introduction 4D5A/windows_hardening is a personal fork of 0x6d69636b/windows_hardening by Michael Schneider 0x6d69636b. 0x6d69636b/windows_hardening is a repository used for development and the production repository is HardeningKitty by scipag. The PowerShell module in the scipag/HardeningKitty repository is digitally signed by scipag.1 [Read More]

Introduction Many Network Administrators and Systems Administrators frequently respond to questions about why an email wasn’t received by someone in their organization. The questions are often asked with a tone of “why did you block my email?” or “something is obviously wrong, because I should have received that email” and... [Read More]

Introduction When I first started scripting with PowerShell, I came across the Get-PSDrive cmdlet. https://learn.microsoft.com/en-us/powershell/module/microsoft.powershell.management/get-psdrive?view=powershell-7.3 Immediately one of the things that stood out to me was that with PowerShell, it was possible to access storage devices, the registry, and certificate stores similar to the process of accessing storage devices with... [Read More]

Introduction I reviewed the configuration of my domain controller and as part of my review, I used a security audit program to review the security configuration of my domain. It found several users which it stated had elevated privileges. I reviewed their Active Directory group membership but they only appeared... [Read More]