Technology – 梦想照进现实

扩展分区空间

1. 查看新硬盘首先，确认新硬盘是否被系统识别： lsblk或者：fdisk -l 如果看到新硬盘 /dev/sdb，说明系统已经识别到新的存储设备。 2. 创建 LVM 物理卷（PV）将新硬盘 /dev/sdb 格式化为 LVM 物理卷：pvcreate /dev/sdb 可以使用以下命令检查物理卷是否创建成功：pvdisplay 3. 扩展现有的卷组（VG）假设现有的卷组名为 VolGroup（你可以用 vgdisplay 查看），使用以下命令将新的物理卷 /dev/sdb 添加到 VolGroup： vgextend VolGroup /dev/sdb然后检查是否扩展成功：vgdisplay 4. 扩展逻辑卷（LV）首先，查找逻辑卷路径：lvdisplay 假设逻辑卷路径是 /dev/mapper/VolGroup-lv_root，扩展它：lvextend

How to hide users from GAL if they are AD Connect synchronized

Since the Exchange Online attribute msExchHideFromAddressLists is an AD on-premises parameter, we have two possible ways hiding user in BME from GAL. Modify the AD Connect for your teant with a custom rule, by using a extensionAttribute

10 Open Source SIEM Tools

There is no all-in-one perfect open source SIEM system. This is also not a list of open source SIEMs, because there is no one complete open source SIEM. Existing solutions either lack core SIEM capabilities,

Open source software to build SIEM

SIEM是企业安全运营中心的核心引擎，用于收集、分析和存储安全事件信息并为安全运营的各个流程提供决策信息。SIEM极为复杂，因此绝大多数企业都选择购买价格不菲的商业产品/服务。但是，高企的价位和运营成本使SIEM成为大型企业才能享用的网络安全“奢侈品”，对于很多安全预算有限的中小型企业，部署SIEM会挤占大量研发、营销和人才预算。云安全公司SOCFortress认为，网络安全是一种权利，而不应该是特权。该公司推荐了一整套开源工具来帮助企业搭建功能不输商业产品的开源SIEM（甚至SOC）方案，整理如下：构成SIEM堆栈的关键要素我们首先需要了解SIEM堆栈的关键构成。如果没有合适的工具，安全团队将很难检测、评估、分类和响应安全事件。随着网络的增长和采集日志量的增加，这一点尤其重要。以下是必须整合到SIEM堆栈中的关键功能模块。 1. 日志采集 2. 日志分析 3. 后端存储 4. 可视化 5. 智力充实 6. 案例管理 7. 自动化 8. 调查与应对 9. 监测

The solution to the lack of permission to delete/modify the registry in Windows

在注册表的某些关键项（譬如：System、Root），连Administrator都没有权限进行修改，因为只有“system”有权限。【方法一】使用 psexec.exe，以 system 身份打开 regedit.exe，这样便可以直接修改，命令： psexec.exe -i -d -s regedit.exe

Backup Drivers Easily Using Windows Powershell

快捷备份以及恢复系统驱动程序

Setting an Active Directory User Account to Expire at a Specific Time of Day with PowerShell

Notice that in Active Directory Users and Computers (ADUC) when setting the expiration of a user account, there’s only a way to have the account expire at the end of a specific day:

Message submission rate for this client has exceeded

In my case Application was using Port 25 and using the app custom connector on load balanced Exchange 2016 servers and message rate limit was set to unlimited. Get-ReceiveConnector SERVERNAME\* | FT Name,bindings,MessageRateLimit

Deny Interactive Logon for Service Accounts

Challenge Description Denying interactive logons for service account is a recognise industry best-practise which envisions to increase security within a Wintel environment.Security auditors trawling your environment for security flaws will most certainly identify the ability

Setting an Active Directory User Account to Expire at a Specific Time of Day with PowerShell

Notice that in Active Directory Users and Computers (ADUC) when setting the expiration of a user account, there’s only a way to have the account expire at the end of a specific day: The same

Latest

梦想照进现实

Category: Technology

扩展分区空间

How to hide users from GAL if they are AD Connect synchronized

10 Open Source SIEM Tools

Open source software to build SIEM

The solution to the lack of permission to delete/modify the registry in Windows

Backup Drivers Easily Using Windows Powershell

Setting an Active Directory User Account to Expire at a Specific Time of Day with PowerShell

Message submission rate for this client has exceeded

Deny Interactive Logon for Service Accounts

Setting an Active Directory User Account to Expire at a Specific Time of Day with PowerShell