Anything About IT

Learning, Building, Sharing

OMS Security and Audit Baseline Assessment

The Microsoft Operations and Management Suite, Security and Audit Solution includes a Baseline Assessment component. The Baseline configuration defini...

Posted by Alex Verboon on Monday, February 19, 2018

Collecting NetTcpConnection and Process information with PowerShell

if you need information on active TCP connections, you probably start with the [netstat](https://docs.microsoft.com/en-us/windows-server/administratio...

Posted by Alex Verboon on Thursday, February 8, 2018

Automating CIS-CAT Pro with PowerShell

CIS-CAT stands for Center for internet Security Configuration Assessment Tool. The CIS-CAT tool is used to perform configuration and vulnerability ass...

Posted by Alex Verboon on Tuesday, February 6, 2018

PowerShell Core logging configuration

After having browsed through the PowerShell code a bit, found some references as to how to configure PowerShell Core logging options through GPO or vi...

Posted by Alex Verboon on Tuesday, January 16, 2018

Enabling PowerShell logging for PowerShell Core 6 (Workaround)

By default, PowerShell Core does not log events to the Windows Event logs. From a security perspective this isn’t ideal, but that’s something I’ll tak...

Posted by Alex Verboon on Saturday, January 13, 2018

Retrieving Windows Defender ATP query API data with PowerShell

I am currently working on some automation around Windows Defender, so started to look at the Windows Defender Advanced Threat Protection query API. No...

Posted by Alex Verboon on Tuesday, January 9, 2018