[{"data":1,"prerenderedAt":720},["ShallowReactive",2],{"post-osconfig-windows-server-2025-security":3,"post-list":442},{"id":4,"title":5,"alsoIn":6,"body":7,"category":427,"date":428,"description":429,"draft":430,"extension":431,"image":432,"links":6,"meta":433,"navigation":434,"order":6,"path":435,"readingTime":420,"seo":436,"series":6,"stem":437,"strength":438,"tags":439,"unlisted":430,"updated":6,"__hash__":441},"posts\u002Fposts\u002Fosconfig-windows-server-2025-security.md","OSConfig - Security Settings for Windows Server 2025",null,{"type":8,"value":9,"toc":419},"minimark",[10,15,19,22,25,28,32,35,81,87,90,105,110,114,117,147,152,155,159,162,165,168,171,284,289,292,295,298,317,322,325,328,356,361,364,385,390,393,407,412,415],[11,12,14],"h2",{"id":13},"foreword","Foreword",[16,17,18],"p",{},"OSConfig is a new feature in Windows Server 2025 that enables the configuration of security settings recommended by Microsoft. These settings are largely aligned with those in the Security Baseline. Management can be performed through PowerShell, Windows Admin Center, or Azure Policy, and OSConfig can automatically address any deviations from the desired configurations.",[16,20,21],{},"Historically, Microsoft has provided its recommended security settings in the form of exported GPOs, which can be selectively or fully imported into an environment.",[16,23,24],{},"This security baseline includes templates for various roles and features, such as member servers, domain controllers, Defender Antivirus, and Credential Guard. However, despite the release of Windows Server 2025 over two months ago, it is not yet included in the Security Compliance Toolkit for the operating system.",[16,26,27],{},"While OSConfig in Windows Server 2025 follows a similar approach, it does not rely on group policies. Instead, it uses a PowerShell interface for local management, and a dedicated service monitors and corrects any discrepancies from the intended settings.",[11,29,31],{"id":30},"install-osconfig-module","Install OSConfig-Module",[16,33,34],{},"You can install the Powershell OSConfig-Module with the following command:",[36,37,42],"pre",{"className":38,"code":39,"language":40,"meta":41,"style":41},"language-powershell shiki shiki-themes gruvbox-dark-medium","Install-Module -Name Microsoft.OSConfig -Scope AllUsers ` -Repository PSGallery -Force\n","powershell","",[43,44,45],"code",{"__ignoreMap":41},[46,47,50,54,58,62,65,68,71,73,76,78],"span",{"class":48,"line":49},"line",1,[46,51,53],{"class":52},"s59W0","Install-Module",[46,55,57],{"class":56},"sM2RB"," -",[46,59,61],{"class":60},"sM0OT","Name Microsoft.OSConfig ",[46,63,64],{"class":56},"-",[46,66,67],{"class":60},"Scope AllUsers ",[46,69,70],{"class":56},"`",[46,72,57],{"class":56},[46,74,75],{"class":60},"Repository PSGallery ",[46,77,64],{"class":56},[46,79,80],{"class":60},"Force\n",[16,82,83],{},[84,85],"img",{"alt":41,"src":86},"\u002Fimages\u002Fposts\u002Fosconfig-windows-server-2025-security\u002Fattachments\u002F1.webp",[16,88,89],{},"The available commands of the Powershell module can be displayed with the following command:",[36,91,93],{"className":38,"code":92,"language":40,"meta":41,"style":41},"Get-Command -Module Microsoft.OSConfig\n",[43,94,95],{"__ignoreMap":41},[46,96,97,100,102],{"class":48,"line":49},[46,98,99],{"class":52},"Get-Command",[46,101,57],{"class":56},[46,103,104],{"class":60},"Module Microsoft.OSConfig\n",[16,106,107],{},[84,108],{"alt":41,"src":109},"\u002Fimages\u002Fposts\u002Fosconfig-windows-server-2025-security\u002Fattachments\u002F2.webp",[11,111,113],{"id":112},"list-templates","List Templates",[16,115,116],{},"To find out which templates are available for the security settings in OSConfig, enter the following command:",[36,118,120],{"className":38,"code":119,"language":40,"meta":41,"style":41},"Get-OSConfigMetadata | Format-Table Name, Description -Wrap\n",[43,121,122],{"__ignoreMap":41},[46,123,124,127,130,133,136,139,142,144],{"class":48,"line":49},[46,125,126],{"class":52},"Get-OSConfigMetadata",[46,128,129],{"class":56}," |",[46,131,132],{"class":52}," Format-Table",[46,134,135],{"class":60}," Name",[46,137,138],{"class":56},",",[46,140,141],{"class":60}," Description ",[46,143,64],{"class":56},[46,145,146],{"class":60},"Wrap\n",[16,148,149],{},[84,150],{"alt":41,"src":151},"\u002Fimages\u002Fposts\u002Fosconfig-windows-server-2025-security\u002Fattachments\u002F3.webp",[16,153,154],{},"Besides the templates for member servers and domain controllers featured in the Security Baseline, OSConfig also provides templates for AppControl, Secured Core, and workgroup servers. The primary target group for OSConfig is likely to be workgroup servers, as Active Directory domains are managed centrally through group policies.",[11,156,158],{"id":157},"enable-a-baseline","Enable a Baseline",[16,160,161],{},"While the GPOs from the security baseline can be customized before being applied to target computers, OSConfig generally operates in the opposite way.",[16,163,164],{},"With OSConfig, you enable a scenario that includes all settings and then selectively deselect the ones you don’t need. Although it’s possible to enable individual settings one by one, this approach is usually impractical due to the large number of settings involved.",[16,166,167],{},"Customization is often necessary because enforcing a strict security configuration can sometimes cause issues with applications or other systems within the network.",[16,169,170],{},"This command displays the settings included in a template along with the values assigned to them:",[36,172,174],{"className":38,"code":173,"language":40,"meta":41,"style":41},"Get-OSConfigDesiredConfiguration -Scenario Defender\\Antivirus | select name, Description, @{n=\"Reason\"; e={$_.Compliance.Reason}}, ` @{n=\"Status\"; e={$_.Compliance.Status}} | Format-List\n",[43,175,176],{"__ignoreMap":41},[46,177,178,181,183,186,189,192,194,197,199,203,207,211,214,217,221,223,226,229,231,234,238,241,244,246,249,251,253,255,257,259,262,264,266,268,270,272,274,277,279,281],{"class":48,"line":49},[46,179,180],{"class":52},"Get-OSConfigDesiredConfiguration",[46,182,57],{"class":56},[46,184,185],{"class":60},"Scenario Defender\\Antivirus ",[46,187,188],{"class":56},"|",[46,190,191],{"class":60}," select name",[46,193,138],{"class":56},[46,195,196],{"class":60}," Description",[46,198,138],{"class":56},[46,200,202],{"class":201},"sBQf5"," @",[46,204,206],{"class":205},"svnLg","{",[46,208,210],{"class":209},"sG605","n",[46,212,213],{"class":56},"=",[46,215,216],{"class":205},"\"",[46,218,220],{"class":219},"sTqo2","Reason",[46,222,216],{"class":205},[46,224,225],{"class":205},";",[46,227,228],{"class":209}," e",[46,230,213],{"class":56},[46,232,233],{"class":205},"{$",[46,235,237],{"class":236},"ssIPD","_",[46,239,240],{"class":209},".Compliance.Reason",[46,242,243],{"class":205},"}}",[46,245,138],{"class":56},[46,247,248],{"class":56}," `",[46,250,202],{"class":201},[46,252,206],{"class":205},[46,254,210],{"class":209},[46,256,213],{"class":56},[46,258,216],{"class":205},[46,260,261],{"class":219},"Status",[46,263,216],{"class":205},[46,265,225],{"class":205},[46,267,228],{"class":209},[46,269,213],{"class":56},[46,271,233],{"class":205},[46,273,237],{"class":236},[46,275,276],{"class":209},".Compliance.Status",[46,278,243],{"class":205},[46,280,129],{"class":56},[46,282,283],{"class":52}," Format-List\n",[16,285,286],{},[84,287],{"alt":41,"src":288},"\u002Fimages\u002Fposts\u002Fosconfig-windows-server-2025-security\u002Fattachments\u002F4.webp",[16,290,291],{},"As shown in the command output, Get-OSConfigDesiredConfiguration is primarily used to assess the status of the desired configuration and highlight any discrepancies.",[16,293,294],{},"In our example, the settings for Defender Antivirus are displayed, all marked as “NotCompliant” because the relevant baseline has not been activated yet.",[16,296,297],{},"To configure the settings, Set-OSConfigDesiredConfiguration is used, as shown in the example for Defender Antivirus:",[36,299,301],{"className":38,"code":300,"language":40,"meta":41,"style":41},"Set-OSConfigDesiredConfiguration -Scenario Defender\\Antivirus -Default\n",[43,302,303],{"__ignoreMap":41},[46,304,305,308,310,312,314],{"class":48,"line":49},[46,306,307],{"class":52},"Set-OSConfigDesiredConfiguration",[46,309,57],{"class":56},[46,311,185],{"class":60},[46,313,64],{"class":56},[46,315,316],{"class":60},"Default\n",[16,318,319],{},[84,320],{"alt":41,"src":321},"\u002Fimages\u002Fposts\u002Fosconfig-windows-server-2025-security\u002Fattachments\u002F5.webp",[16,323,324],{},"The “Default” parameter ensures that all settings from the template are applied. Alternatively, the “Setting” parameter can be used to configure individual settings. One of these two parameters must always be provided.",[16,326,327],{},"To change a specific setting, proceed as follows:",[36,329,331],{"className":38,"code":330,"language":40,"meta":41,"style":41},"Set-OSConfigDesiredConfiguration -Scenario Defender\\Antivirus ` -Setting SubmitSamplesConsent -Value 0\n",[43,332,333],{"__ignoreMap":41},[46,334,335,337,339,341,343,345,348,350,353],{"class":48,"line":49},[46,336,307],{"class":52},[46,338,57],{"class":56},[46,340,185],{"class":60},[46,342,70],{"class":56},[46,344,57],{"class":56},[46,346,347],{"class":60},"Setting SubmitSamplesConsent ",[46,349,64],{"class":56},[46,351,352],{"class":60},"Value ",[46,354,355],{"class":236},"0\n",[16,357,358],{},[84,359],{"alt":41,"src":360},"\u002Fimages\u002Fposts\u002Fosconfig-windows-server-2025-security\u002Fattachments\u002F6.webp",[16,362,363],{},"If you wish to not only change a setting but also remove it, you can use the following command:",[36,365,367],{"className":38,"code":366,"language":40,"meta":41,"style":41},"Remove-OSConfigDesiredConfiguration -Scenario Defender\\Antivirus ` -Setting SubmitSamplesConsent\n",[43,368,369],{"__ignoreMap":41},[46,370,371,374,376,378,380,382],{"class":48,"line":49},[46,372,373],{"class":52},"Remove-OSConfigDesiredConfiguration",[46,375,57],{"class":56},[46,377,185],{"class":60},[46,379,70],{"class":56},[46,381,57],{"class":56},[46,383,384],{"class":60},"Setting SubmitSamplesConsent\n",[16,386,387],{},[84,388],{"alt":41,"src":389},"\u002Fimages\u002Fposts\u002Fosconfig-windows-server-2025-security\u002Fattachments\u002F7.webp",[16,391,392],{},"You can also remove the complete baseline with the following command:",[36,394,396],{"className":38,"code":395,"language":40,"meta":41,"style":41},"Remove-OSConfigDesiredConfiguration -Scenario Defender\\Antivirus\n",[43,397,398],{"__ignoreMap":41},[46,399,400,402,404],{"class":48,"line":49},[46,401,373],{"class":52},[46,403,57],{"class":56},[46,405,406],{"class":60},"Scenario Defender\\Antivirus\n",[16,408,409],{},[84,410],{"alt":41,"src":411},"\u002Fimages\u002Fposts\u002Fosconfig-windows-server-2025-security\u002Fattachments\u002F8.webp",[16,413,414],{},"Applying or removing a baseline requires a server reboot for the changes to take effect. Adjusting some settings also requires a restart sometimes. Additionally, deleting a baseline does not ensure that the previous configuration will be restored.\nMake sure to always have Snapshots\u002FBackups before you test!",[416,417,418],"style",{},"html pre.shiki code .s59W0, html code.shiki .s59W0{--shiki-default:#FABD2F}html pre.shiki code .sM2RB, html code.shiki .sM2RB{--shiki-default:#8EC07C}html pre.shiki code .sM0OT, html code.shiki .sM0OT{--shiki-default:#EBDBB2}html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html pre.shiki code .sBQf5, html code.shiki .sBQf5{--shiki-default:#FB4934}html pre.shiki code .svnLg, html code.shiki .svnLg{--shiki-default:#A89984}html pre.shiki code .sG605, html code.shiki .sG605{--shiki-default:#FE8019}html pre.shiki code .sTqo2, html code.shiki .sTqo2{--shiki-default:#B8BB26}html pre.shiki code .ssIPD, html code.shiki .ssIPD{--shiki-default:#D3869B}",{"title":41,"searchDepth":420,"depth":420,"links":421},3,[422,424,425,426],{"id":13,"depth":423,"text":14},2,{"id":30,"depth":423,"text":31},{"id":112,"depth":423,"text":113},{"id":157,"depth":423,"text":158},"windows","2025-01-13","OSConfig applies Microsoft's recommended security settings on Windows Server 2025 without GPOs. Install the module, list templates, enable a baseline.",false,"md","\u002Fimages\u002Fposts\u002Fosconfig-windows-server-2025-security\u002Fcover.webp",{},true,"\u002Fposts\u002Fosconfig-windows-server-2025-security",{"title":5,"description":429},"posts\u002Fosconfig-windows-server-2025-security","2",[440],"osconfig","BSsmorRkQHSrnNzYSGRTVopfs_xWhYn7BpQXjrpgD9o",[443,456,467,478,486,493,502,510,516,524,530,540,547,555,562,568,575,580,582,590,602,609,617,623,630,636,642,649,655,661,667,673,680,686,692,700,707,714],{"path":444,"title":445,"description":446,"date":447,"category":448,"alsoIn":449,"series":6,"tags":450,"readingTime":455},"\u002Fposts\u002Fbarista","Barista: One Exe to Install Doppio and Ristretto","The 2FA series ends with two LSA components, an unsigned DLL in lsass and a dozen steps that have to happen in the right order. Barista is a wizard that does them one reboot at a time, from a single exe with every binary embedded and hash-checked.","2026-10-16","tools",[427],[427,451,452,453,454],"lsa","2fa","credential-provider","security",9,{"path":457,"title":458,"description":459,"date":460,"category":427,"alsoIn":461,"series":462,"tags":463,"readingTime":466},"\u002Fposts\u002Fwindows-2fa-gating-network-logons","Build Your Own 2FA for the Windows Logon, Part 3: Gating Network Logons","Part 2 refuses every network logon for an enrolled account, which makes the account safe and useless. Part 3 adds a gate you open once with a one-time code, so SMB, RPC and WinRM work again for a short window. In C++, with the full source.","2026-10-11",[448],"Doppio · 3-part series",[427,451,464,465,452,454],"ntlm","smb",35,{"path":468,"title":469,"description":470,"date":471,"category":448,"alsoIn":6,"series":6,"tags":472,"readingTime":477},"\u002Fposts\u002Fadhardenkit","ADHardenKit: Hardening AD Without Breaking It","LDAP signing, SMB signing, NTLM, Kerberos with AES only. Every hardening checklist has them. I wrote a tool that turns them on in an order that doesn't break the domain.","2026-10-07",[473,474,40,475,464,476],"active-directory","windows-server","hardening","kerberos",5,{"path":479,"title":480,"description":481,"date":482,"category":448,"alsoIn":6,"series":6,"tags":483,"readingTime":485},"\u002Fposts\u002Fntlm-analyzer","NTLM-Analyzer: Find Out Who Still Uses NTLM","Windows logs a lot of NTLM activity, but you have to piece it together yourself. I built a tool that shows which users and programs still use NTLMv1 or NTLMv2, and what already runs over Kerberos.","2026-10-03",[473,464,476,484,474],"auditing",6,{"path":487,"title":488,"description":489,"date":490,"category":427,"alsoIn":6,"series":462,"tags":491,"readingTime":492},"\u002Fposts\u002Fwindows-2fa-inside-lsa","Build Your Own 2FA for the Windows Logon, Part 2: Inside LSA","The credential provider from Part 1 only sees the logon screen. Part 2 goes into LSA to close the paths it can't reach, with an authentication package and an MSV1_0 sub-authentication filter in C++.","2026-10-01",[427,453,451,452,454],32,{"path":494,"title":495,"description":496,"date":497,"category":427,"alsoIn":498,"series":462,"tags":499,"readingTime":501},"\u002Fposts\u002Fwindows-2fa-credential-provider","Build Your Own 2FA for the Windows Logon","How a Credential Provider works and how to build a working TOTP 2FA for local Windows accounts in C++. With rate limiting, replay protection and logging.","2026-09-30",[448],[427,453,452,500,454],"totp",60,{"path":503,"title":504,"description":505,"date":506,"category":448,"alsoIn":6,"series":6,"tags":507,"readingTime":420},"\u002Fposts\u002Fadtierkit-active-directory-tiering","ADTierKit: Automatic AD-Tiering","I got tired of building tier models by hand, so I wrote a tool for it. One PowerShell script, one JSON file.","2026-08-06",[473,474,40,508,509],"tiering","laps",{"path":511,"title":512,"description":513,"date":506,"category":473,"alsoIn":6,"series":6,"tags":514,"readingTime":515},"\u002Fposts\u002Fldap-ldaps-and-active-directory","The thing with LDAP, LDAPS and Active Directory","Why LDAPS rarely fixes what security reports worry about, why you can't just block port 389, and what actually protects LDAP in Active Directory.",[],11,{"path":517,"title":518,"description":519,"date":520,"category":521,"alsoIn":6,"series":6,"tags":522,"readingTime":420},"\u002Fposts\u002Finstall-tor-exit-node","Install Tor Exit Node","How to run a Tor exit node on an anonymously rented VPS: paying with Monero, picking the provider and the country, and installing and configuring Tor.","2025-09-30","linux",[523],"tor",{"path":525,"title":526,"description":527,"date":528,"category":473,"alsoIn":6,"series":6,"tags":529,"readingTime":49},"\u002Fposts\u002Fconfigure-kerberos-armoring","Configure Kerberos Armoring","Kerberos Armoring (FAST) protects the Kerberos exchange against offline brute force, replay and tampering. How to enable it in your domain with a GPO.","2025-07-28",[476],{"path":531,"title":532,"description":533,"date":534,"category":535,"alsoIn":6,"series":6,"tags":536,"readingTime":539},"\u002Fposts\u002Fexchange-2019-install","Installation guide for Exchange SE and Exchange 2019","Install Exchange Server Subscription Edition (SE) or Exchange Server 2019 step by step and harden it, with WAF rules on the Sophos XG, SPF, DMARC, DKIM and more. The installation is the same for both versions.","2025-06-26","exchange",[535,537,538],"exchange-se","exchange-2019",47,{"path":541,"title":542,"description":543,"date":544,"category":473,"alsoIn":6,"series":6,"tags":545,"readingTime":455},"\u002Fposts\u002Fhow-ntlm-works-active-directory","How NTLM works in Active Directory","How NTLM proves that you know a password without sending it, what the domain controller does, the difference between NTLMv1 and NTLMv2, and why Microsoft is phasing it out.","2025-05-07",[464,473,546],"authentication",{"path":548,"title":549,"description":550,"date":551,"category":473,"alsoIn":6,"series":6,"tags":552,"readingTime":554},"\u002Fposts\u002Fadfs-installation","ADFS Installation","Basic installation guide for Active Directory Federation Services","2025-01-27",[553],"adfs",4,{"path":556,"title":557,"description":558,"date":559,"category":473,"alsoIn":6,"series":6,"tags":560,"readingTime":420},"\u002Fposts\u002Fexample-pass-the-hash-attack","Pass the Hash Attack Example","Example of a pass the hash attack","2025-01-22",[561],"pass-the-hash",{"path":563,"title":564,"description":565,"date":566,"category":473,"alsoIn":6,"series":6,"tags":567,"readingTime":485},"\u002Fposts\u002Fhow-kerberos-works-active-directory","How Kerberos works in Active Directory","How Kerberos works in Active Directory, step by step: the TGT, the service ticket and the request to the service, and why no password crosses the network.","2025-01-16",[476],{"path":569,"title":570,"description":571,"date":572,"category":427,"alsoIn":6,"series":6,"tags":573,"readingTime":420},"\u002Fposts\u002Fconfigure-credential-guard-computer-accounts","Configure Credential Guard for Computer Accounts","Windows Server 2025 can move computer account passwords into Credential Guard. How to enable it by GPO, and why turning it off means a new domain join.","2025-01-15",[574],"credential-guard",{"path":576,"title":577,"description":578,"date":428,"category":427,"alsoIn":6,"series":6,"tags":579,"readingTime":554},"\u002Fposts\u002Fconfigure-credential-guard-windows","Configure Credential Guard","How Credential Guard shields NTLM hashes and Kerberos tickets, how to enable it by GPO on older clients and servers, and how to check that it runs.",[574],{"path":435,"title":5,"description":429,"date":428,"category":427,"alsoIn":6,"series":6,"tags":581,"readingTime":420},[440],{"path":583,"title":584,"description":585,"date":586,"category":427,"alsoIn":6,"series":6,"tags":587,"readingTime":420},"\u002Fposts\u002Fsecure-iis-modsecurity","Secure IIS with Modsecurity","Installation guide to secure IIS with Modsecurity","2025-01-12",[588,589],"iis","modsecurity",{"path":591,"title":592,"description":593,"date":594,"category":473,"alsoIn":6,"series":6,"tags":595,"readingTime":601},"\u002Fposts\u002Fvcsa-certificate-windows-pki","Issue VCSA Certificate with Windows PKI","Replace the self-signed vCenter (VCSA) certificate with a SubCA certificate from your Windows PKI, using the VCSA Certificate Manager and WinSCP.","2025-01-09",[596,597,598,599,600],"ad-cs","pki","vmware","vcsa","vcenter",10,{"path":603,"title":604,"description":605,"date":606,"category":473,"alsoIn":6,"series":6,"tags":607,"readingTime":608},"\u002Fposts\u002Fwindows-pki-installation","Installation guide for a Windows PKI","Step-by-step guide for a two-tier Windows PKI with root CA, sub CA and a separate CRL server, plus certificate templates, OCSP and web enrollment.","2024-12-20",[596,597],36,{"path":610,"title":611,"description":612,"date":613,"category":614,"alsoIn":6,"series":6,"tags":615,"readingTime":601},"\u002Fposts\u002Fhack-the-box-administrator","Hack The Box: Administrator","Walkthrough for the \"Administrator\" Hack the Box Challenge","2024-11-19","hack-the-box",[616,427,473],"writeup",{"path":618,"title":619,"description":620,"date":621,"category":473,"alsoIn":6,"series":6,"tags":622,"readingTime":423},"\u002Fposts\u002Fsecure-active-directory-part-1","Secure Active Directory - Part 1","Part 1 of the guide to a secure Active Directory","2024-09-09",[],{"path":624,"title":625,"description":626,"date":627,"category":614,"alsoIn":6,"series":6,"tags":628,"readingTime":629},"\u002Fposts\u002Fhack-the-box-greenhorn","Hack The Box: Greenhorn","Walkthrough for the \"Greenhorn\" Hack the Box Challenge","2024-07-24",[616,521],12,{"path":631,"title":632,"description":633,"date":634,"category":614,"alsoIn":6,"series":6,"tags":635,"readingTime":455},"\u002Fposts\u002Fhack-the-box-runner","Hack The Box: Runner","Walkthrough for the \"Runner\" Hack the Box Challenge","2024-07-20",[616,521],{"path":637,"title":638,"description":639,"date":640,"category":614,"alsoIn":6,"series":6,"tags":641,"readingTime":49},"\u002Fposts\u002Fhack-the-box-ghost","Hack The Box: Ghost","Walkthrough for the \"Ghost\" Hack the Box Challenge","2024-07-18",[616,427,473],{"path":643,"title":644,"description":645,"date":646,"category":614,"alsoIn":6,"series":6,"tags":647,"readingTime":648},"\u002Fposts\u002Fhack-the-box-knife","Hack The Box: Knife","Walkthrough for the \"Knife\" Hack the Box Challenge","2024-07-15",[616,521],7,{"path":650,"title":651,"description":652,"date":653,"category":614,"alsoIn":6,"series":6,"tags":654,"readingTime":420},"\u002Fposts\u002Fhack-the-box-broker","Hack The Box: Broker","Walkthrough for the \"Broker\" Hack the Box Challenge","2024-07-10",[616,521],{"path":656,"title":657,"description":658,"date":659,"category":614,"alsoIn":6,"series":6,"tags":660,"readingTime":49},"\u002Fposts\u002Fhack-the-box-permx","Hack The Box: PermX","Walkthrough zur \"PermX\" Hack the Box Challenge","2024-07-08",[616,521],{"path":662,"title":663,"description":664,"date":665,"category":614,"alsoIn":6,"series":6,"tags":666,"readingTime":420},"\u002Fposts\u002Fhack-the-box-lame","Hack The Box: Lame","Walkthrough zur \"Lame\" Hack the Box Challenge","2024-07-06",[616,521],{"path":668,"title":669,"description":670,"date":671,"category":614,"alsoIn":6,"series":6,"tags":672,"readingTime":554},"\u002Fposts\u002Fhack-the-box-analytics","Hack The Box: Analytics","Walkthrough zur \"Analytics\" Hack the Box Challenge","2024-06-30",[616,521],{"path":674,"title":675,"description":676,"date":677,"category":614,"alsoIn":6,"series":6,"tags":678,"readingTime":477},"\u002Fposts\u002Fhack-the-box-sense","Hack The Box: Sense","Walkthrough zur \"Sense\" Hack the Box Challenge","2024-06-28",[616,679],"freebsd",{"path":681,"title":682,"description":683,"date":684,"category":614,"alsoIn":6,"series":6,"tags":685,"readingTime":515},"\u002Fposts\u002Fhack-the-box-mailing","Hack The Box: Mailing","Walkthrough zur \"Mailing\" Hack the Box Challenge","2024-06-26",[616,427],{"path":687,"title":688,"description":689,"date":690,"category":614,"alsoIn":6,"series":6,"tags":691,"readingTime":420},"\u002Fposts\u002Fhack-the-box-jerry","Hack The Box: Jerry","Walkthrough zur \"Jerry\" Hack the Box Challenge","2024-06-20",[616,427],{"path":693,"title":694,"description":695,"date":696,"category":521,"alsoIn":6,"series":6,"tags":697,"readingTime":49},"\u002Fposts\u002Flinux-ssh-telegram-notifications","Setting up notifications via Telegram for SSH login\u002Flogoff","Get a Telegram message every time someone logs in to or out of your Linux server over SSH, with a Telegram bot, a small script and PAM.","2024-06-01",[698,699],"ssh","monitoring",{"path":701,"title":702,"description":703,"date":704,"category":614,"alsoIn":6,"series":6,"tags":705,"readingTime":706},"\u002Fposts\u002Fhack-the-box-forest","Hack The Box: Forest","Walkthrough zur \"Forest\" Hack the Box Challenge","2024-05-20",[616,427,473],16,{"path":708,"title":709,"description":710,"date":711,"category":535,"alsoIn":6,"series":6,"tags":712,"readingTime":49},"\u002Fposts\u002Fpowershell-connect-to-exchange-online","Verbindung zu Exchange Online mit Powershell","Wie man sich mit PowerShell mit Exchange Online verbindet: das Modul ExchangeOnlineManagement installieren, aktuell halten und die Verbindung herstellen.","2023-10-23",[713,40],"m365",{"path":715,"title":716,"description":717,"date":718,"category":535,"alsoIn":6,"series":6,"tags":719,"readingTime":49},"\u002Fposts\u002Fexchange-october-2023-updates","Exchange Server","Neue Sicherheitsupdates (Oktober 2023)","2023-10-18",[],1792195054433]