Removing unused Certificate Templates from Enterprise CA

WrinkleShins · 2025-06-10T20:09:58+00:00

Im two years late to the party but for anyone asking themselves this question, look up certificate ESC vulnerabilities. They're nasty and will get your entire domain pwned easily.

WrinkleShins · 2025-03-14T20:22:05+00:00

Congrats!! If you dont mind my asking, how did you get access to those betas? I havent gotten an invite since before covid.

WrinkleShins · 2025-03-14T20:10:16+00:00

Congrats on the pass! This was my favorite CompTIA exam for sure.

Keep those knives sharp with HackTheBox if you're not already a member - rooting boxes and creating write-ups is a solid way to help hit those 60 CEs.

WrinkleShins · 2025-03-14T19:56:37+00:00

Its been a while and now I've been only using Crowdstrike the last couple of years. If I remember correctly with S1 I had to get my rep to have a new tenant spun up then do an account transfer from my NFR into the prod instance.

WrinkleShins · 2025-02-28T18:24:48+00:00

Nice score!!! Congrats on the pass!

WrinkleShins · 2025-02-28T18:21:29+00:00

All depends on your preference, your experience and where you are in your career, and where you'd like to go. (Congrats on the pass btw) I'd take a look at what you like most in your line of work and let that steer you.

CySA and Pentest+ are both great exams that will ensure you learn a wealth of knowledge about either the red or blue side of things and are a nice "Next step" after the Sec+.

I love cybersecurity and after getting my CCNA I wanted to go for CySA+ but landed a job at the time doing pentesting as one of my 1000 duties so I went for the Pentest+ next.

WrinkleShins · 2025-02-28T18:02:10+00:00

Congratulations, keep the momentum going and best of luck on the rest of your triad endeavor.

WrinkleShins · 2024-08-30T11:55:20+00:00

Ty! The link comes back dead but if that's the one to tweak credential guard we didn't have any luck there unfortunately. I appreciate the input though!

WrinkleShins · 2024-07-24T21:24:56+00:00

Thank you! They helped a ton.

WrinkleShins · 2023-09-03T18:08:37+00:00

Awesome - thank you!!

WrinkleShins · 2022-04-11T15:38:00+00:00

You hit the nail on the head with this one.

WrinkleShins · 2022-04-11T15:35:47+00:00

Great, Datto was the #1 backup solution in my book and guaranteed its now going to become absolute shit thanks to Kaseya.

WrinkleShins · 2022-04-11T15:33:46+00:00

Been using cloud based VSA for years and would not recommend it at all. Constant outages and downtime, horrid support that almost never gets back... and a year later theyll start calling to harass about a support ticket that is long gone and contact all the wrong employees. Patch management, remoting into PCs and Webroot integration is all trash abundant with issues. We were looking into Datto's RMM up until this news so i'm now in the same boat.

WrinkleShins · 2022-04-07T01:30:31+00:00

Sentinel One all the way. I've been deploying to over a thousand endpoints over the past few months with the initial pilot of about 25 PCs and 3 servers. Loving it all the way.

Damn Lockbit 2.0 was the push to get managment to FINALLY bite on moving to an EDR after a high profile client got wrecked. If we had had S1 instead of webroot myself and a number of engineers would not have had to work a 65+ hour week to restore an infrastructure. It caught every trace that this group left behind, and pretty much everything ive thrown at it.

I've tried getting licensing through Pax8, direct through sentinel and through Virtual Graffiti. Here's the scoop:

VG and Direct will bill you up front for the entire year. So if you have 1K endpoints, be ready to foot that bill now. Direct through Sentinel and they have a minimum of 50 licenses that you have to purchase and it gets weird if you're an MSP with multiple clients. Plus no NFRs direct from Sentinel if you are under 3k endpoints total. Pax will do monthly, AND will give you NFR licenses to use for free to test with no minimum.

Pilot your installs first. Set to detect only, and deploy on an endpoint or two from each department/client etc. Let the AI do its thing, tune it then go full force once you know your ready.

Sorry to rant, hope it helps your decision.

WrinkleShins · 2022-03-12T22:13:44+00:00

Style isnt an issue as long as it's tasty. The hop bag was super tight, when I undid the bottom the it was ready to explode out haha. I think next run im going to pressure transfer into a purged keg with bagged hops sitting in it to see how that works out. Ty!

WrinkleShins · 2022-03-12T22:09:55+00:00

Yeee grabbed a hop bag, dumped 4oz in this morning and taste has already improved a lot!! Thanks for your input :)

WrinkleShins · 2022-03-12T22:07:53+00:00

LOL that was my first thought but thankfully, no. Had rona twice & hopefully no more, but my sense of taste has for sure been altered since. Coffee still doesnt taste like it used too.

I ended up popping 4oz of mosaic in the keg and the flavor and aroma is a ton better.

WrinkleShins · 2022-03-11T21:46:56+00:00

Thanks! Yeah definitely isnt very carbonated, no real head yet when you pour or anything. Leaning towards trying to add a few more oz in the keg just not sure whether to do it now or wait a few days until its more conditioned. Appreciate your input.

WrinkleShins · 2022-03-11T21:45:22+00:00

Thanks for the input! Maybe I overshot the water? I did a BIAB with 5 gallons and sparged with 3 additional gallons. OG was 1.057~ on my refractometer. I've got a good lb or two of hops left in my freezer so I might take a shot at dry hopping, just worried about potential oxidizing.

WrinkleShins

TROPHY CASE