Disable “Run” Command via GPO
Want an easy way to harden your workstations? Disable the Run box for standard users. It’s a classic, straightforward restriction that stops curious users and particular basic social…
Veeam VSS Failure on DCs with SentinelOne
If you are backing up Windows Domain Controllers with Veeam and hitting VSS snapshot failures, and you happen to be running SentinelOne (S1), you’ve run into a specific…
SQL Server: Daily Failed SQL Job Email Report
This guide sets up: Database Mail a Database Mail profile a stored procedure that emails failed SQL Agent jobs from the last 24 hours a SQL Agent job…
Wireguard Setup on Debian 13
Clean, minimal, self-hosted WireGuard setup with: Full tunnel support NAT for internet access Multi-user capability Per-user access control via firewall 0. Assumptions Public interface: eth0 VPN subnet: 10.10.10.0/24 Server is…
Block non-US Network Connections with GeoIP, UFW and ipset
I have nginx configured already to drop connections from non-US based IP addresses using the libnginx-mod-geoip module. Taking this a step further, I decided to block all non-US based IP…
Windows 11 OOBE Microsoft Account Bypass During Install
Method 1 I did it using SHIFT+F10 then using regedit.exe to delete the LaunchUserOOBE value in HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\OOBE registry key. But don't close regedit yet. Additionally to create my user and make it an administrator:…
Using Baresip as a Notification Option in Uptime Kuma
TODO
Dynamically Replacing Text in Static Files with Nginx Using Lua
I have my PowerShell tool, LanScan, that I serve from my server so it can be executed on a machine with irm techish.net/lanscan | iex. I have a…
Block “Sign in to … Using Google” with uBlock Origin Filter
You can use the following filter to block the "Sign in to ... Using Google" with uBlock: ||accounts.google.com/gsi/*$xhr,script,3p In Chrome, you are supposed to be able to do…
Block Countries in NGINX Using GeoIP
NGINX has a GeoIP module that can be leveraged to do various things based on GeoIP data for a remote host connecting to the NGINX server. If not…
List DNS records dnscmd
This command will list all “A” records (IPv4 address mappings) for the domain domain.tld on the local DNS server. Essentially, it’s retrieving the list of IP addresses associated…
Reclaim Unused Space in Hyper-V
Overview This guide explains how to reclaim unused disk space from a Hyper-V virtual machine (VM) after cleaning it up internally. The process involves zeroing out free space…
Blocking AI Scrapers in Apache/nginx
You can place the following into your .htaccess to have it return an HTTP 403 if the User Agent is matched. Apache The following command will generate a…
Deleting Files from the Linux Kernel
The NSA has been directed by an executive order from the President to remove internal and external content with the following 27 words. Anti-Racism Racism Allyship Bias DEI…
FTC Mobile Health Apps Tool
Privacy and security are important considerations for any app—and especially apps that collect and share consumers’ health information. As you design, market, and distribute your mobile health app,…