Posh-Sysmon Module for Creating Sysmon Configuration Files

Sysmon configuration can be complex in addition to hard to maintain by hand. For this purpose I created a module called Posh-Sysmon some time ago to aid in the creation and maintenance of configuration files. The module was initially written after the release of version 2.0 and has been maintained and expanded as new version have been released all the way to the current one at the time of this blog post being written with version 6.0. 

The module is written for PowerShell v3.0 and above and can be installed from the PowerShell Gallery if running version 5.0 or 5.1 using the cmdlet 

Read More

Home Lab - Networking

In this post I will cover the basic set up of the basic building block network which is a simple flat network behind a router acting as Firewall, NAT, DHCP and VPN for the network.

The first action is to create a Virtual Switch that will be connectivity for all the virtual machines in this flat network. Almost all virtual solutions support having a virtual switch under one name or another. Since I choose for my home lab ESXi the commands shown will be for this platform but in general terms can be done the same with Hyper-V or XenServer. 

The main reason why I'm showing all the steps via command line is so that they can be automated later in a script if this is a process that will be repeated several times.

Read More

Home Lab - Design

Why

When building a home lab one must start with a purpose for it before starting to build it. In the book "Talent Is Overrated: What Really Separates World-Class Performers from Everybody Else" one learns that deliberate practice and a focus on not only on how much, but the quality and factors placed in it makes a huge difference in the level of skill one can obtain and maintain from training. The main goals of the lab built in this series are:

  • Modular so it can grow as needed.
  • Must mirror real world scenarios.
  • Automate and document for fast rebuilds.

These main goals should help in helping to adapt and practice as the lab will be rebuilt as trial versions of Windows expire or as needs arise.

Read More

Review of Viktor Frankl "Man's Search for Meaning"

 first read this book on my first year of college back in 1995. It is a book that I have re-read every other year.

Now this book is one that most relate to psychology but it is has a lot to teach outside of those that practice its science.

During the Holocaust, Frankl spent three years in 4 different concentrations camp, the majority of this time in Auschwitz and Dachau. Now the book does not focus on his experience in the camps or is it a story of his survival during such a terrible time in his life. The book focuses on what he learned about himself and others, lessons that helped him survived and later became the foundation of logotherapy, it is derived from the Greek word logos that translates to “meaning”.

Read More

My Take on Application Whitelisting

One of the recent thoughts that I have notices in the last year in discussions with friends in the industry is that whitelisting is of no use do to:

* "It is hard to do"
* "Bypasses exist so why do it"
* "It does not scale"


Those are the 3 most common ones I have heard with my discussions over drinks, chat rooms and lobbycon sessions with friends. I would like to try to address why for me they are not valid and share my thought process and to the why.

Read More