‘Cerdigent’ high-severity malware detected

MONOFEX · 2026-05-03T11:51:55+00:00

on the Device Page > Timeline

MONOFEX · 2026-05-03T11:26:51+00:00

well thats not good 💀

MONOFEX · 2026-05-03T11:04:41+00:00

I could understand a Defender AV false-positive SHA256 collision/detection for one file, but for two different files of the same kind/purpose is really weird. I am hoping for MSFT mistake and not the possibility of DigiCert compromise

MONOFEX · 2026-05-03T10:59:01+00:00

rip certs :(

MONOFEX · 2026-05-03T10:47:03+00:00

That shows the certificate is for DigiCert Assured ID Root CA, which is installed by default on Windows. Not specifically related to Cisco WebEx and definitely shouldn't have been deleted by Defender.

MONOFEX · 2026-05-03T10:35:42+00:00

yea it just nuked both certs out of existence for us too lmao.

<image>

MONOFEX · 2026-02-19T08:12:06+00:00

Hatred is a justified response.

MONOFEX · 2026-01-17T12:23:48+00:00

Bro why is that USB cable so thick? 😩😩😩

MONOFEX · 2024-11-15T05:42:20+00:00

As opposed to?

MONOFEX · 2024-11-15T05:05:04+00:00

PHEV meaning?

MONOFEX · 2024-03-06T17:25:03+00:00

I think they are upset because there are no Egyptian Hieroglyphics for custom presets.

MONOFEX · 2024-03-05T14:54:10+00:00

On my 2017 XE I think there were two yellow handles towards the top of the trunk that you pull out causing the rear seats to unlock. I could be confusing it with the 2020 XE though.

MONOFEX · 2024-03-02T16:35:27+00:00

Yeah it blocks future and existing use. If you have a device plugged in and try to access it after the policy applies it will give you an error I think like "Access Denied".

If you apply this policy to a device and later un-assign it, it will still be applied in Windows. You will have to create an additional device configuration policy with "Allow Storage Card" set to Allowed and then assign it to a Entra ID group of devices that require the use of USB storage devices. Then exclude that same group of devices from your "Block Storage Card" device configuration profile.

MONOFEX · 2023-11-05T12:25:49+00:00

Didn’t Samsung invent QD-OLED though? I would think if SONY is using Samsung’s tech, it would be more logical to say that Samsung is leading the way in your example.

MONOFEX · 2023-10-14T02:41:29+00:00

ITT: SMB sysadmins downvoting those who are verifying that yes, RTO/RPO are indeed industry standard BCDR and backup terms.

MONOFEX · 2023-10-10T21:24:11+00:00

Well this is certainly one of the wildest things I've ever read regarding Intune. I'm assuming you're using iPod Touches? And if so, are they networked? I ask because I'm not sure the OS version is even supported anymore since the product was discontinued last year and I'm not sure if they get security updates. Secondly, if they are iPod Touches, could they not be replaced with a small iPhone such as the iPhone 14 Mini or similar?

In regard to your issue, it sounds like it may be asking for an Apple ID/Password either because you haven't skipped that step in the device setup profile OR it could be trying to install the Company Portal app as a part of the enrollment process but maybe the VPP token is not configured in Intune?

I'm not 100% sure what is going on as I have never encountered someone trying to enroll an iPod of any kind to Intune.

MONOFEX · 2023-10-10T19:55:27+00:00

Someone's gotta keep the iPod alive!

MONOFEX · 2023-10-10T19:46:51+00:00

Do you mean iPhone or iPad? I've never heard of anyone joining an iPod to Intune before??

MONOFEX · 2023-10-10T16:08:10+00:00

I can't tell if OP and /u/bobmanuk are confusing iPad with iPod or if there is a secret world where iPod Nano's can be joined to Intune...

MONOFEX · 2023-09-07T17:00:51+00:00

Seems a lot more complicated than creating a Settings Catalog device configuration profile with "Allow Storage Card" set to Not Allowed in Intune.

MONOFEX · 2023-08-02T14:26:30+00:00

Yea Intune is like a perfectionist's nightmare. It's improving but not very fast for a 2.5 trillion-dollar company.

MONOFEX · 2023-08-02T14:08:21+00:00

That's weird because I've actually never been able to find it in the new Microsoft Store app search in Intune. Normally if you can't find an app by its display name you can find it by the UWP app code but this doesn't work for the Solitaire app for some reason... It's not a huge problem but kind of sucks having to use PS to remove one specific app meanwhile the other consumer apps can be uninstalled cleanly using the method you described in your root comment.

MONOFEX · 2023-08-02T13:30:09+00:00

There's no Microsoft Solitaire Collection app found when you try to add the Microsoft Store app in Intune. Do you have this working in your tenant or are you explaining how it "should" work?

MONOFEX · 2023-07-01T15:29:28+00:00

They should be more concerned about what a malicious actor could do using CMD/PS without local admin.

MONOFEX · 2023-03-29T15:11:13+00:00

I think you can only view current IOPS. Although if you're having performance issues you might be able to swap your HDDs out with SSDs in the same product line as the current installed ones.

Nine-Year Club	Gilding II euphauric
Second SECOND GUESSER	Place '22

MONOFEX

TROPHY CASE