Random

Cloudflare-Access+EntraID.md

Lessons learned using Cloudflare Access SSO with Entra ID

Cloudflare-Worker-Tips.md

Lessons learned while exploring and implementing Workers

CoPilotGPO.png

Screenshot showing the location in the user group policy tree where Microsoft's CoPilot can be disabled.
For standalone hosts: reg add HKCU\Software\Policies\Microsoft\Windows\WindowsCopilot /v TurnOffWindowsCopilot /t REG_DWORD /d 1 /f

Duo-Admin-API-Starter.ps1

This script is a PowerShell starter example to connect your project to Duo's Admin API
I notice loads of people online struggling to get API authentication working. This minimal example successfully implements Admin API authentication in PowerShell with no dependencies.

FindUnquotedPaths.ps1

This script will connect to Active Directory, get a list of hosts based on the user configured search path, and check each host for unquoted service path vulnerabilities. Results are printed to the PowerShell console

MissingMetadata.ps1

This script will connect to a specified SharePoint Online site or subsite and generate a list of all items missing mandatory metadata

ThreatConnectAPI-Starter.ps1

This script is a PowerShell starter example to connect your project to ThreatConnect's API

ThreatConnect-QuickQuery.ps1

A very simple query console to fetch Indicators. Helpful for exploring data within ThreatConnect.
The following record types are supported:

1. IPs (malicious IP addresses)
2. Hosts (malicious hostnames)
3. URLs (malicious web URLs)
4. Email (malicious email addresses)
5. File (malicious file hashes)

Configuring modern/certificate-based app authentication for Office 365

• Follow this guide published by Microsoft

Hijacklibs catalog of hijack-able DLLs

• https://hijacklibs.net
• Scanning tools
• Possible mitigation strategy?

Windows 11 Debloat script

Appropriate for enterprise deployments; Great for removing all of the bundled games and useless apps, tracking and telemetry settings

• https://github.com/Raphire/Win11Debloat

Editing or clearing special Active Directory object attributes

If you ever encounter the following message when trying to edit an attribute in AD Users and Computers or ADSIEdit: "There is no editor registered to handle this attribute type."

• Use Set-ADComputer PowerShell, included with RSAT
• To clear a value (example clears the msDS-AllowedToActOnBehalfOfOtherIdentity attribute):
  • Set-ADComputer COMPUTERNAME -Clear msDS-AllowedToActOnBehalfOfOtherIdentity
• To set or add to a value, use -Add or -Replace instead of -Clear. More info

PowerShell Helpful Links

• Automatic Variables