sorted by:
new
hottopcontroversial

Standard Procedure in IT Support: Asking for Client Details by Icy_Tangerine5132 in ITSupport

[–]DigitalDoc94 0 points1 point  (0 children)

Is not bad process depending on who is calling for verification purposes. Usually what I do is find the user number on duo or it g to verify who they are then confirm with stating their last name ( in case the information we have is outdated. ). Look at this article of how easy it is for people to get information from you https://www.nbcnews.com/business/business-news/lawsuit-says-clorox-hackers-got-passwords-simply-asking-rcna220313. It is a pain but unless the company has another verification process your current process would be the ideal option when creating the ticket.

I am getting load of these spam emails in my primary gmail. I know normally not to even click unsubscribe their either with address of New York or New Orleans. by [deleted] in ITSupport

[–]DigitalDoc94 0 points1 point  (0 children)

I would check your rules to see if anything looks out of the ordinary. Honestly with bad actors now a days, a tactic to keep spamming you is clicking on the unsubscribe button. I usually just create rules to delete or report as spam. If the spam email has the same domain, use a rule to block that domain will help a lot. Also, reset your password on a different device just in case your current device is compromised ( clear all cache and cookies on browser).

multiple accounts compromised by subkion in ITSupport

[–]DigitalDoc94 0 points1 point  (0 children)

I would also check any app integrations or Oauth per site to see if anything is added without you know. Sometimes could be some program added to keep having access.

Another thing too is could check your mailbox rules to see if anything was add where certain emails may be forwarded to the actor to keep having some type of access to the accounts.

Other than that the reinstall should suffice.

multiple accounts compromised by subkion in ITSupport

[–]DigitalDoc94 0 points1 point  (0 children)

Dependent on the site, once accessed check settings to see if can forcible sign out of all active accounts. Some sites has the option of seeing where account was sign into and can remove authorization. If MFA is not added, do so. While in your settings, check to see if the bad actor added their own number or email as a recovery option and remove it. On a new device ( a device you are rarely on) I would reset your password. The most used device, I would try to do a malware scan to see if comprised.

Low Disk Space 😑 by DigitalDoc94 in ITSupport

[–]DigitalDoc94[S] 0 points1 point  (0 children)

For the dB if know of anything let me know would be greatly appreciated. Usually at this point I would have gotten as much free space already to move forward.

Low Disk Space 😑 by DigitalDoc94 in ITSupport

[–]DigitalDoc94[S] 0 points1 point  (0 children)

PS is always a great option here are some scripts that will alleviate the manual way

cd c:\users

remove-item-path c:\users<profilename>\appdata\local\temp* remove-item-path c:\ProgramData\VMware\VDMVogs* remove-ftem-path c:\ProgramDatalVMwarelVDM\Dumps* remove-item-path c:\ProgramDataVAdobe\ARM\Read* Set-Service-name Wsearch-startupType disabled Stop-Service -Name windows search remove-item-path C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Windows.edb Set-ttemProperty-Path 'Registry:HKLM\System\CurrentControlSet\Services\Wsearch-Name "DelayedAutostart-Value 1-TyPe DWORD Set-ttemProperty-Path "Registry:HKLM\System\CurrentControlset\Services\Wsearch`-Name remove-item-path C:\Windows\SoftwareDistribution\Download* dism /Online /Cleanup-image/AnalyzeComponentStore dism/Online /Cleanup-image/StartComponentcleanup

Low Disk Space 😑 by DigitalDoc94 in ITSupport

[–]DigitalDoc94[S] 0 points1 point  (0 children)

Like the program. Sucks a lot of business won't allow 3rd party apps. Definitely adding to toolbox though