A Domain Controller is not a Domain Computer – Online memory of an Active Directory PFE — Read on blogs.technet.microsoft.com/389thoughts/2018/12/10/a-domain-controller-is-not-a-domain-computer/
Category: windows
Windows Commands
Another Forensics Blog: When Windows Lies
Another Forensics Blog: When Windows Lies — Read on az4n6.blogspot.com/2017/02/when-windows-lies.html
Basic Active Directory Security
A large majority of breaches happen because of compromised credentials (https://blog.centrify.com/cause-of-data-breaches/) and so it stands to reason that a compromise of privileged credentials would be the worst case scenario. If someone gets hold of Domain Admin credentials the game is essentially over. Because of this when I'm talking to customers about improving their security posture … Continue reading Basic Active Directory Security
Get Windows boot time – Powershell
To get the last Windows boot time using PowerShell V3 or later. Get-CimInstance Win32_OperatingSystem | select lastbootuptime,csname This will show you the lastbootuptime and computer name
File Server Migration with Robocopy
I'm in the process of migrating data from an aging file server to a new shiny one. On the old server the NTFS permissions are all over the place so I really wanted to copy the data to the new server without the existing NTFS permissions and then apply new ACLs on the new server. … Continue reading File Server Migration with Robocopy
Get the install date of Windows
To find the date when Windows was installed; Open a cmd window systeminfo | find /i "install date" PS C:Windowssystem32> systeminfo | find /i "install date" Original Install Date: 16/10/2015, 14:09:01
