Duo RDP Installation Guide

by Vince
in Blog
Hits: 1271

Prior to Remote Desktop, we used PCAnywhere to remotely connect to computers but it was a pay product and typically reserved for just the one server or just the one computer.  Then Remote Desktop came along and changed everything.  We were able to connect to almost any computer -- anywhere, as long as we had a static IP address and we opened port 3389 to the Internet.  Obviously, this was prior to the proliferation of the Virtual Private Network (VPN) and opening a port directly on the Internet was how it was done.  

But we can't have nice things. 

People started poking at our public facing resources and we were forced to move them to another port .  That worked for a brief time but then our resources were once again found.  When firewalls became sophisticated enough, we eventually moved them behind the firewall with rules to allow for specific access.  Then VPN's came along which changed everything.  And that seemed to hold us for a while.  Eventually, the attack model changed and bad actors stopped coming through the front door.  

Read more

PowerShell Directory Listing CSV Export

by Vince
in Blog
Hits: 1625

Kind of an interesting request that took a little bit of manipulation to get what I wanted.  Essentially, we're calling for a directory listing and we want to export that listing into a CSV file.  But we want to remove the directory path in order to get just the filenames.  In addition, instead of explicitly calling the username, I'm using the system variable.  This way, the working folder can be moved and reused on another profile or machine.  I'm also using the system date in the filename to keep the filename unique.  I'm using a .txt file because I'm lazy and I couldn't figure out how to do it in one line.  

Read more

Extortion Spam

by Vince
in Blog
Hits: 960

"This account has been hacked! Change your password right now!"

That's a pretty scary subject and it's one of the latest tactics used in spam emails which attempt to extort money from the recipient.  We've seen variations of this message which include the password but this one in particular does not.  

The message further states:

"You may not know me and you are probably wondering why you are getting this e mail, right?  I’m a hacker who cracked your email and devices a few months ago."

"Do not try to contact me or find me, it is impossible, since I sent you an email from YOUR hacked account."

Read more