Get Local Admins Get Local and Domains Users in Admins Find Local Admin Logins with Defender Advanced Hunting

Useful : Intune: Third-Party ADMX & OMA-URI – Step-by-Step (Part 3) (sifr.ca) This CSP contains ADMX-backed policies which require a special SyncML format to enable or disable. […]

C:\Program Files\Azure Advanced Threat Protection Sensor\2.213.17065.12431\Logs\Microsoft.Tri.Sensor-Errors.log C:\Program Files\Azure Advanced Threat Protection Sensor\2.213.17065.12431\Logs\Microsoft.Tri.Sensor.log I had to add the GroupManagedServiceAccount to the LogOnAsService to the Domain Controller 2023-08-30 23:32:58.0542 […]

https://blog.ciaops.com/2020/03/20/office-365-audit-retention-policy If you create the Policy with the below powershell You cannot edit it via the GUI The Gui has these two items listed but they do […]

Recently have a few computers sharing the Onedrive Desktop Backup and the Edge.lnk shortcut was locked and replicating 100’s of times crashing explorer and the PC I […]

Trying to do a Firmware Upgrade on a HP Aruba array shows the message image_upgrade_another_image_or_drt_upgrade_in_progress  run “show swarm image-sync” on SSH on the Master controller is showed […]

Fortigate uses some default Ports to show the Web Filter Block Override error to users : These ports are the next:     Port 8008 is used by […]

Detection Remediation