InfoSecMonkey: No fluff. Just the config that works.

Category Archives: Windows

Outlook CVE-2026-124194: Patch the Zero-Day That Leaks NTLM Hashes
11 November, 2026

Outlook CVE-2026-124194: Patch the Zero-Day That Leaks NTLM Hashes

Outlook CVE-2026-124194 leaks NTLMv2 hashes from one opened .msg file. Check fixed builds, force the Office update, and block SMB egress on FortiGate.

Read More
Windows Server Audit Policy: Advanced Auditing, Command Lines, SACLs and Log Sizing
11 November, 2026

Windows Server Audit Policy: Advanced Auditing, Command Lines, SACLs and Log Sizing

Build a Windows Server audit policy that logs what investigators need: advanced subcategories, 4688 command lines, file SACLs and log sizing.

Read More
Chrome CVE-2026-11660: New Tab Page Sandbox Escape, Verify and Enforce the Patch
10 November, 2026

Chrome CVE-2026-11660: New Tab Page Sandbox Escape, Verify and Enforce the Patch

Chrome CVE-2026-11660 is a New Tab Page sandbox escape. Verify fixed Chrome and Edge builds and force relaunch on Windows, macOS and Linux.

Read More
Microsoft Paint CVE-2026-83844: The RCE Fix Windows Update Will Never Install
6 November, 2026

Microsoft Paint CVE-2026-83844: The RCE Fix Windows Update Will Never Install

Paint CVE-2026-83844 is fixed only through the Microsoft Store. Check your Paint build, unblock Store updates and push 11.2609.401.0 fleetwide.

Read More
Managing Windows Firewall from the Command Line: netsh, PowerShell and 7 Hidden Features
3 November, 2026

Managing Windows Firewall from the Command Line: netsh, PowerShell and 7 Hidden Features

Master the Windows firewall command line with netsh and PowerShell, plus 7 hidden features like FQDN rules, drop forensics and auto-revert.

Read More
What Is That Process Touching? Finding the Files a Running Process Uses on Linux, macOS, and Windows
14 October, 2026

What Is That Process Touching? Finding the Files a Running Process Uses on Linux, macOS, and Windows

Find files used by process on Linux, macOS, and Windows. Use lsof, vmmap, and Sysinternals to enumerate open handles, mapped files, and sockets for...

Read More
Windows Event Types for Forensic Investigations
13 October, 2026

Windows Event Types for Forensic Investigations

Map critical Windows event IDs for forensics. Configure audit policies, parse Security logs, and deploy Sysmon to capture attacker activity and build timelines.

Read More
Sublime Text Quick Tip: Removing Empty Lines in Sublime Text: Regex, Selections, and a One-Key Plugin
29 September, 2026

Sublime Text Quick Tip: Removing Empty Lines in Sublime Text: Regex, Selections, and a One-Key Plugin

Remove empty lines in Sublime Text using regex patterns or a custom plugin. Clean config dumps and logs with precise find and replace commands.

Read More
Autoruns vs. Process Explorer vs. Process Monitor: When to Use Each, When Not To, and Whether They Are Still Alive
29 September, 2026

Autoruns vs. Process Explorer vs. Process Monitor: When to Use Each, When Not To, and Whether They Are Still Alive

Learn when to use Autoruns, Process Explorer, or Process Monitor for Windows IR. Pick the right Sysinternals tool for persistence, live triage, or logging.

Read More
Windows 11 Keyboard Shortcuts: The Practitioner’s Cheat Sheet
22 September, 2026

Windows 11 Keyboard Shortcuts: The Practitioner’s Cheat Sheet

Master Windows 11 keyboard shortcuts for desktop, snap layouts, and File Explorer. Copy the exact key combinations to speed up your workflow.

Read More
FortiGate IPsec Remote Access VPN with Computer Certificate Pinning
31 March, 2026

FortiGate IPsec Remote Access VPN with Computer Certificate Pinning

Configure FortiGate IPsec certificate pinning to restrict VPN access to authorized devices. Includes FortiAuthenticator CA setup and macOS client steps.

Read More
Re-Arming your Windows Server after the 180 day expiration
30 August, 2022

Re-Arming your Windows Server after the 180 day expiration

Re-arm your Windows Server license after the 180-day expiration using the slmgr.vbs -rearm command. Extend your lab evaluation period up to five times.

Read More
Making a Bootable Windows 10 USB on macOS X Catalina
1 January, 2020

Making a Bootable Windows 10 USB on macOS X Catalina

Learn how to create a bootable Windows 10 USB on macOS Catalina using the dd command. Step-by-step CLI instructions to write the ISO to...

Read More
Installing Tor on Ubuntu 19.04 and Windows 10
19 September, 2019

Installing Tor on Ubuntu 19.04 and Windows 10

Install Tor on Ubuntu 19.04 and Windows 10 using apt-get and the official installer. Get step-by-step commands to launch the Tor Browser and verify...

Read More
Fortigate DHCP and Microsoft Dynamic DNS
22 May, 2019

Fortigate DHCP and Microsoft Dynamic DNS

Configure Fortigate DHCP to update Microsoft DNS records. Set Windows Server dynamic updates, client TCP/IPv4 properties, and GPO settings for automatic registration.

Read More
iperf for Network Geeks
20 April, 2019

iperf for Network Geeks

Run iperf3 network throughput testing to validate WAN and LAN performance. Learn server and client mode configs, port differences, and troubleshooting tips.

Read More
Using OpenSSL for your SSL Decryption and distributing the cert via GPO
7 April, 2019

Using OpenSSL for your SSL Decryption and distributing the cert via GPO

Generate an SSL decryption certificate with OpenSSL for FortiGate. Import the cert into FortiGate and distribute it to endpoints via GPO for deep inspection.

Read More
Wired Captive Portal with Fortigate
31 August, 2018

Wired Captive Portal with Fortigate

Configure Fortigate captive portal with FSSO to bypass auth for AD members. Step by step guide for Fortinet firewall policy and user group setup.

Read More