Patch ManagementWindowsWindows UpdateWUA+3 more
What "Applicable" Really Means on Windows
Which updates does this machine need? It looks like a lookup. On Windows, every source you would trust gets it wrong in a different way.
Adam Curtis
Blog
Insights & Updates
Best practices for patch management, endpoint security, and keeping your fleet secure.
All PostsSecurityGroup PolicyNetworkingWindowsComplianceBest PracticesEndpoint ManagementPatch ManagementSIEMWSUS AlternativeActive DirectoryAppLockerAutomationAzure ADBenchmarkingCISDockerIncident ResponseIntune AlternativeIPSecIPv6LinuxLLMNRLoggingmacOSMalwaremDNSMFAMicrosoft 365MITMMITRE ATT&CKMSPMulticastName ResolutionNBNSNetBIOSNISTNTLMPassword PolicyProxySmall EnterpriseSMBSysmonTridentStack ControlVulnerability ManagementWazuhWindows FirewallWindows UpdateWPADWUAZero Trust
TridentStack ControlPatch ManagementEndpoint ManagementWindows+6 more
What TridentStack Control Is, and Why We Built It
TridentStack Control is patch management, vulnerability detection, compliance scoring, and policy management for Windows, macOS, and Linux fleets. Here is the long version of what it does, what it does not do, what it costs, and why we built it.
Adam Curtis
SecurityDockerWazuhSIEM+1 more
Secure Wazuh Deployment with Docker Automation
Security monitoring and incident response capabilities are critical for modern enterprises. Learn how to automate secure Wazuh deployments using Docker while implementing enhanced password management and security controls.
Adam Curtis
SecurityNISTActive DirectoryPassword Policy+1 more
Build a NIST 800-63B Compliant Password Policy in 1 Hour
A comprehensive guide to implementing password security standards aligned with NIST 800-63B recommendations in your Active Directory environment.
Remi Springer
SecurityMicrosoft 365Incident ResponseAzure AD+1 more
Controls for Protecting Microsoft 365: A First Person Incident Response Recount
A real Azure Active Directory compromise examined through the lens of incident response - analyzing what security controls failed, how the attack unfolded, and what remediation steps proved effective.
Remi Springer
SecurityNetworkingWPADProxy+1 more
Cleaning Up Risky Traffic, A Mini Series: WPAD
Web Proxy Auto-Discovery (WPAD) automatically configures browser proxy settings, but when misconfigured, becomes a vector for attackers to intercept network traffic through malicious proxy servers.
Remi Springer
SecurityNetworkingSMBNTLM+1 more
Cleaning Up Risky Traffic, A Mini Series: SMB Signing
SMB Signing implements digital signatures within SMB packets to verify message integrity during transit, providing effective defense against NTLM Relay attacks.
Remi Springer
SecurityNetworkingNBNSNetBIOS+1 more
Cleaning Up Risky Traffic, A Mini Series: NBNS
NetBIOS Name Service (NBNS) is an old protocol designed for early Microsoft Windows versions. Learn how attackers exploit it and how to protect your network.
Remi Springer
SecurityNetworkingLLMNRName Resolution+1 more
Cleaning Up Risky Traffic, A Mini Series: LLMNR
Link-Local Multicast Name Resolution (LLMNR) is a hostname resolution protocol that presents significant security risks in corporate environments when DNS isn't available.
Remi Springer
SecurityWindows FirewallIPSecZero Trust+1 more
Domain Isolation with Windows Firewall (ZTNA for free!)
Learn how to implement Domain Isolation using Windows Defender Firewall's native IPSec capabilities as a cost-free alternative to Zero Trust Network Access solutions.
Rich Johnson
Page 1 of 2Next