Auditing Windows Account Management
At the NSAA IT Conference and Workshop, put on by NASACT, I presented on Auditing Windows Account Management. I’m posting the slides to my presentation as reference. I would love any feedback from...
View ArticlePenetration Testing Ninjitsu
Core Technologies hosted a series of three webcasts called Penetration Testing Ninjitsu by Ed Skoudis (http://www.coresecurity.com/content/webcast-series-with-sans). I highly recommend listening to...
View ArticleAuditing Folder (and subfolder) Permissions using CACLS
CACLS.exe is a great builtin Windows utility that allows you to list the permissions on a file or folder. This command has been used in an audit to get the permissions of the folders on an agency file...
View ArticleAuditing Remote Services from the Command Line
During an audit I had to determine whether a particular remote control service was installed on the Domain workstations and servers. It was determined during the interview process that no remote...
View ArticleUpdated Configuration Tutorial
I have created an updated configuration document for my Motion Computing m1300 wireless tablet. This document details getting Ubuntu 8.04 LTS Hardy Heron up and running on the tablet. Included in the...
View ArticleNTBACKUP: more than DR/BCP (Updated)
An auditor’s interest in the Windows NTBACKUP Utility extends beyond examining their DR/BCP plan. Suppose you just got command prompt access to a server (example tutorial 1, 2, & 3) but the host...
View Article
More Pages to Explore .....