Menu / Category

Windows

house blend · 8 items

Barista: One Exe to Install Doppio and RistrettoOct 16, 2026The 2FA series ends with two LSA components, an unsigned DLL in lsass and a dozen steps that have to happen in the right order. Barista is a wizard that does them one reboot at a time, from a single exe with every binary embedded and hash-checked.9 min · Cappuccino#windows#lsa#2fa#credential-provider Build Your Own 2FA for the Windows Logon, Part 3: Gating Network LogonsOct 11, 2026Part 2 refuses every network logon for an enrolled account, which makes the account safe and useless. Part 3 adds a gate you open once with a one-time code, so SMB, RPC and WinRM work again for a short window. In C++, with the full source.35 min · French Press#windows#lsa#ntlm#smb Build Your Own 2FA for the Windows Logon, Part 2: Inside LSAOct 1, 2026The credential provider from Part 1 only sees the logon screen. Part 2 goes into LSA to close the paths it can't reach, with an authentication package and an MSV1_0 sub-authentication filter in C++.32 min · French Press#windows#credential-provider#lsa#2fa Build Your Own 2FA for the Windows LogonSep 30, 2026How a Credential Provider works and how to build a working TOTP 2FA for local Windows accounts in C++. With rate limiting, replay protection and logging.60 min · French Press#windows#credential-provider#2fa#totp Configure Credential Guard for Computer AccountsJan 15, 2025Windows Server 2025 can move computer account passwords into Credential Guard. How to enable it by GPO, and why turning it off means a new domain join.3 min · Espresso#credential-guard Configure Credential GuardJan 13, 2025How Credential Guard shields NTLM hashes and Kerberos tickets, how to enable it by GPO on older clients and servers, and how to check that it runs.4 min · Espresso#credential-guard OSConfig - Security Settings for Windows Server 2025Jan 13, 2025OSConfig applies Microsoft's recommended security settings on Windows Server 2025 without GPOs. Install the module, list templates, enable a baseline.3 min · Espresso#osconfig Secure IIS with ModsecurityJan 12, 2025Installation guide to secure IIS with Modsecurity3 min · Espresso#iis#modsecurity