Apr 11How to detect if device is a Windows365 Cloud PCIt is pretty straightforward to detect if the managed device is a Cloud PC in Intune, setting up dynamic groups to filter policies depending on whether it is a cloud PC: https://learn.microsoft.com/en-us/windows-365/enterprise/create-dynamic-device-group-all-cloudpcs However, if your security product e.g NAC does not integrate with Intune, then there is a need to fiddle with registry keys. Below are the registry key and value you can use to filter for cloud PCsCloud Pc1 min readCloud Pc1 min read
Mar 29, 2022Elastic Adventures (Part 1)Over the course of my work, I had the privilege to work with folks from Govtech’s StackOps team. ElasticStack is certainly not new but it has certainly improved over the years. This series is to document down my trials with Elastic, starting from design considerations all thru to production use. …4 min read4 min read
Jul 30, 2021Things to be aware when fixing PetitPotam — NTLM relay attacksThings to be aware before you go off on a mission to disable NTLM! A few days ago, a researcher released a source code on Github which targets NTLM relay attacks using Active Directory Certificate Services and MS-RPC (Github: https://github.com/topotam/PetitPotam) Beyond the ADCS settings found in KB5005413, Microsoft mentioned 2…3 min read3 min read
Jul 21, 2021Breaking CAPTCHA or why you should be using reCAPTCHA V3CAPTCHA (Completely Automated Public Turing test to tell Computers and Humans Apart) was created in the early 2000s to determine that the actions being taken on a browser is by a real user and not by spammers aka bots. Implementing Captcha Initial versions of captcha transforms texts and adds in various transformations…4 min read4 min read
Jun 14, 2021Removing a dead disk from a Windows Server Storage PoolWindows storage spaces works well with disk that behaves and are running perfectly fine. However there will be times where a disk fails and you are not able to remove it easily via the GUI. With individual disks, that is fine, however things gets a bit tricky when you have…3 min read3 min read
Dec 31, 2020Hitting refresh, a river meets an estuaryBut every man is more than just himself; he also represents the unique, the very special and always significant and remarkable point at which the world’s phenomena intersect, only once in this way and never again. - Hermann Hesse, Demian A dear friend recently recommended Demian to me. It is…4 min read4 min read
Jun 22, 2020Adventures with pfSense: Act 2— Improving your network securitypfSense comes with several packages which enables you to further secure your network beyond the built-in firewall and captive portal. Popular tools such as pfBlocker, Snort, Suricata, SquidGuard, ArpWatch can be utilized and configured in order to strengthen your home, office or data center network security posture. I’ve experimented with…7 min read7 min read
May 3, 2020Adventures with pfSense: Act 1— Setting up Internet and MIO TVHaving had my fair share of pain with branded routers (plus current WFH arrangements), plus having a mesh wifi with ethernet backhaul deployed, I felt it may be time to relook at setting up a proper FW/IPS/IDS using something that has withstood the test of time. First order of the…4 min read4 min read
Feb 15, 2020Turnkey solution design for large scale Microsoft Forms automation and Data collationBackground Now that both Jenzus Hsu and myself have demonstrated how you can leverage modern technologies to automate large scale creation of Microsoft Forms. Its time to revisit the solution architecture, design and costs considerations for such a turnkey solution. I’ll recommend that you spend some time to read the following…Power Automate6 min readPower Automate6 min read
Feb 12, 2020Automating Microsoft Forms creationHow this got started Jenzus Hsu got me piqued with his post on using powerapps to generate a single form for contact tracing (link). In the event that PowerApps is not possible for whatever reasons, or simply other use cases where Microsoft Forms is a better and easier use case. How can Contoso Campus…Selenium5 min readSelenium5 min read
