On Azure AD–joined Windows 10/11 devices, users can sign in offline using the Primary Refresh Token (PRT) that’s cached locally. If you’ve already revoked their PRT from the cloud, they may still be able to unlock the device with a cached password—or, if they use Windows Hello for Business (WHfB), with a PIN or biometric. … [Read more…]
You may want to log all commands run by a user in a shell. Even just for yourself, this can be helpful in going back to figure out what you did wrong, or what command you ran 2 months ago to get something to work. Edit /etc/bashrc: and add this line: Run the following to … [Read more…]
This guide walks you through securely setting up SSH keys on your Ubuntu server using the Ed25519 algorithm, known for robust security and efficiency. Step 1: Generate an Ed25519 SSH Key on the Ubuntu Server On your Ubuntu server, generate an Ed25519 SSH key pair: Press Enter to confirm the default location (~/.ssh/id_ed25519). Ensure you … [Read more…]
As someone who’s been working with Wazuh for a while, I’ve come to rely on its powerful capabilities for monitoring and security. Initially, I had the Office 365 (O365) integration enabled in my Wazuh setup. However, I quickly realized that my needs went beyond what O365 integration could offer. Specifically, I wanted to track user … [Read more…]