u/Snysadmin
-
0points
-
0points
MS defender flagging signicat as phish (self.sysadmin) [Microsoft]
Snysadmin
Snysadmin
Only green here with safari and edge on 27.0
Snysadmin
Thats not a good idea. RC4 is not considered secure.
https://learn.microsoft.com/en-us/windows-server/security/kerberos/detect-remediate-rc4-kerberos
Snysadmin
Heh, nice.
Snysadmin
Yeah this is the way. It might still haunt you years later with issues. Ask me how i know :( Stop changing your last name people.
Snysadmin
Try this one
"C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeC2RClient.exe" /update user
Snysadmin
One of the best parts of AI scripts absolutely! Its a shame start-transcipt is lacking at best.
Snysadmin
You can add any user to the protected users group
Snysadmin
Legend
Snysadmin
What is the vulnurable version? And what is the patched version? Does the update generate those keys?
Snysadmin
Try starting with set-location HKCU: (i think)
Snysadmin
Yeah man, from intune on the device page next to the wipe/retire/etc bar you can find "rotate bitlocker keys". It might hide under the ...
Snysadmin
Cloud time maybe
Snysadmin
Seems like it was a bug
Some users may be blocked from opening URLs in Exchange Online messages and Microsoft Teams ID: MO1148487
Issue type: Incident
Status
Service Degradation
Impacted services
Microsoft 365 suite, Exchange Online, Microsoft Teams, Microsoft Defender XDR
Details
Title: Some users may be blocked from opening URLs in Exchange Online messages and Microsoft Teams
User impact: Users may be blocked from opening URLs in Exchange Online messages and Microsoft Teams.
More info: Additionally, admins may receive alerts titled "A potentially malicious URL click was detected involving one user", however the URLs have been confirmed as safe.
Some email messages may have also been incorrectly quarantined.
Current status: Our investigation has identified that an anti-spam service incorrectly flagged URLs contained within other URLs as potentially malicious, resulting in impact. We've identified over 6,000 URLs that are affected and are working to unblock them before replaying messages to recover any messages or URLs that were incorrectly flagged.
Scope of impact: Any user receiving email messages containing specific URLs may be affected.
Root cause: An anti-spam service incorrectly flagged URLs contained within other URLs as potentially malicious, resulting in impact.
Next update by: Friday, September 5, 2025, at 10:00 PM UTC
Snysadmin
Agreed.
Snysadmin
Could i ask why youre moving away from dot1x and going back to PSK? Seems less safe?
Snysadmin
I do, after testing each one and finding that its always the last one you test :D
Snysadmin
Snysadmin
Caffeine
You can use native powershell for the same.
$wsh = New-Object -ComObject WScript.Shell
while (1) {
$wsh.SendKeys('+{F15}')
Start-Sleep -seconds 59
}
Snysadmin
We have a forced expiry of some time for all "everyone" shares.
Snysadmin
Both of these guys are correct.
Snysadmin
Agreed. We have a couple of differently aggressive move to archive rules depending on usecase.
Snysadmin
Cant you just loop it?
$Users = Get-item -path C:\users\
$users |foreach-object {remove item $_}
something like that?
But just use grouppolicy lol.
Time to go home amirite?