Amount | Ingredient |
---|---|
1/2 cup | Baking cocoa powder |
1/2 cup | Dutch cocoa powder (alkali-processed) |
3 tbsp | Cornstarch |
1/4 cup | Maltodextrin |
1/4 cup | Dry milk powder |
1/2 cup | Erythritol (or substitute xylitol, sorbitol) |
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Here is the list of keywords monitored for the BlueSky feed https://bsky.app/profile/did:plc:naoxihcpn44esoyun7xj56kc/feed/winsec | |
created using blueskyfeedcreator.com. Because of the limitation of only being able to do a straight keyword match, this list is | |
tuned for fewer false matches over more comprehensive matches. | |
Please make any suggestions in the comments. | |
#LOLBAS | |
#LOLBIN | |
#WindowsForensics | |
#WindowsHardening | |
#WindowsSecurity |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
You are a bot that determines whether a number is randomly generated by a | |
computer or if a human tried typing a random number. | |
Humans have a hard time typing random numbers because they sometimes switch | |
between left hand and right hand on the keyboard. The alternating between hands | |
is a good indicator that a number was generated by a human, but the absence of | |
that does not indicate it was generated by a computer. Another flaw is that | |
humans too often type numbers that are close to each other on the top row of an | |
English keyboard (taking into consideration alternating hands). Sometimes, in | |
an attempt to be more random, the human will alternate between these techniques |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
javascript:location.href='http://www.reddit.com/r/AzureSecurity/submit?url='+encodeURIComponent(location.href)+'&title='+encodeURIComponent(document.title) |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
c:\netsh | |
netsh>rpc | |
netsh rpc>filter | |
netsh rpc filter add rule layer=um actiontype=block | |
netsh rpc filter add condition field=if_uuid matchtype=equal data=12345678-1234-abcd-ef00-0123456789ab | |
netsh rpc filter>add filter | |
netsh rpc filter>quit |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
1. More interactivity | |
a. Better prompts for blocking new outbound connections | |
b. Rules-based alerting | |
2. Advanced rules | |
a. Access to stuff like this: https://docs.microsoft.com/en-us/windows/win32/fwp/filtering-conditions-available-at-each-filtering-layer | |
b. Regex or at least wildcard rules | |
c. Rules based on executable signer | |
d. Rules based on executable parameters (for java, python, etc.) | |
e. Rules based on time of day/day of week | |
3. Custom, switchable local profiles |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Get-WinEvent -FilterHashTable @{LogName='Microsoft-Windows-Windows Firewall With Advanced Security/Firewall';ID='2004';StartTime=(Get-Date).AddDays(-1);} | | |
select-object TimeCreated, | |
@{Name='Name'; Expression={$_.Properties[1].Value}}, | |
@{Name='Application'; Expression={$_.Properties[4].Value}}, | |
@{Name='Path'; Expression={$_.Properties[8].Value}}, | |
@{Name='Created By'; Expression={$_.Properties[22].Value}}, | |
@{Name='Direction'; Expression={$_.Properties[5].Value}}, | |
@{Name='Action'; Expression={$_.Properties[7].Value}}, | |
@{Name='Protocol'; Expression={$_.Properties[6].Value}}, | |
@{Name='Local Port'; Expression={$_.Properties[11].Value}}, |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
'----------------------------------------------------------------------------- | |
' Auto save because Microsoft forces you to use OneDrive for autosave now | |
' Instructions: | |
' 1. Show the Developer ribbon | |
' 2. Go into Visual Basic | |
' 3. Add a new module in Normal | |
' 4. Paste this code there | |
Const MINUTES_INTERVAL = 5 'Set the desired interval, in minutes |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
<filters numItems="4"> | |
<item> | |
<filterKey>{bbae6a9c-e041-4941-afc9-0c93a84b84e0}</filterKey> | |
<displayData> | |
<name>Port Scanning Prevention Filter</name> | |
<description>This filter prevents port scanning. This many times means there are no listeners. If debugging ensure your scenario has one.</description> | |
</displayData> | |
<flags/> | |
<providerKey>{decc16ca-3f33-4346-be1e-8fb4ae0f3d62}</providerKey> | |
<providerData> |
NewerOlder