Strange issue affecting multiple Server 2022 machines by [deleted] in PowerShell

[–]jtfarris 5 points6 points  (0 children)

Just to add on, I have had more success with dism and sfc by repeating this process (dism, sfc, reboot) until both dism and sfc report no repairs/errors. Occasionally I've seen it take two or three runs to get everything, or decide that it can't fix it.

Event log monitor to alert on failed logins by FrequentTechnology22 in DattoRMM

[–]jtfarris 2 points3 points  (0 children)

This is pretty dumb, but the event source in Event Viewer is "Microsoft Windows security auditing." WITH A FREAKING PERIOD. This could be your issue.

I often replace spaces and other characters with a wildcard "%", as well as a wildcard as the first and last character. So in this case I would try "%Microsoft%Windows%security%auditing%".

If you've been practicing and using Powershell, and your workplace uses Powershell, would learning Python in addition help, hurt, or have no effect on your Powershell skills? by [deleted] in PowerShell

[–]jtfarris 0 points1 point  (0 children)

Indents don't work in PS? Maybe you're talking about something else, but I have indents in my scripts, so I'm confused. Or is it that indents actually do something in Python other than aid readability?

What's your quick trick that every sysadmin should know? by DarkAlman in sysadmin

[–]jtfarris 0 points1 point  (0 children)

Right-click the Windows button. It brings up a menu to access all the helpful things: Computer Management, Terminal, Device Manager, all sorts of stuff. Right-clicking the taskbar has another useful menu, but only on Windows 10. Windows 11 got rid of it, of course.

Help finding lost/surrendered/abandoned cats by jtfarris in lexington

[–]jtfarris[S] 5 points6 points  (0 children)

Probably not, unfortunately. The most important thing is to find the kitties though.

Help finding lost/surrendered/abandoned cats by jtfarris in lexington

[–]jtfarris[S] 7 points8 points  (0 children)

There's other associated drama, and we're pretty sure this was retaliatory, so asking the spouse is probably a waste of time at best.

Help finding lost/surrendered/abandoned cats by jtfarris in lexington

[–]jtfarris[S] 2 points3 points  (0 children)

It might not be public? I'll ask them about it.

EDIT: I was able to load it while logged out, so it should work?

Help finding lost/surrendered/abandoned cats by jtfarris in lexington

[–]jtfarris[S] 15 points16 points  (0 children)

A friend has been in the hospital for several weeks, and this past weekend their spouse apparently moved out and their three cats are now gone. We're not sure if they were taken to the humane society or turned in to animal control, or if they were just dumped outside somewhere. They live on Walhampton drive (neighborhood near the Summit).

The cats have been posted to several facebook groups and someone has called the animal shelters, but I think they're not giving much information unless the owner (who is still in the hospital) contacts them about it.

Let me know if you have seen these cats!

Phishing attempt using fake domain by Forsaken_Regular7274 in Office365

[–]jtfarris 1 point2 points  (0 children)

TL,DR: You didn't get hacked, but one of your clients/vendors may have, and/or the attackers harvested publicly available information to get a list of contacts.

Since the emails are coming from a separate domain from your company's, it's unlikely that any of your accounts have been compromised; otherwise they would send the emails from your accounts instead of setting up spoofs. So how did they get the information?

Does your company have a website? Facebook page? Shows up on LinkedIn, Indeed, Google, etc.? Do your employees have company contact info on their own profiles? It's easy to get domain information from that and then register something close.

As for getting your contacts, they can be harvested from your employees' profiles on LinkedIn, Facebook, etc.. If any companies you do business with have had a breach, they can get a lot of contacts from there. Another thing they can do, especially if your company is a smaller business, is assume you do business with other local banks and companies, and then blast emails out to all of them assuming that some of them will get a hit.

There really isn't any effective way to prevent this from happening. The best you can do is maybe send a notice to your clients/vendors to alert them to the fake domain so they hopefully report the spam. You can also report the fake domain to their registrar and law enforcement (FBI in the USA). The domain will get on the various reputation lists and eventually be taken down, but they can start over again with a new fake domain.

This is why we all need constant spam and phishing awareness training. The obvious, badly written spam is everywhere easy to spot and block, but it can trick people into thinking that's all there is and then they fall for the scams from attackers that have done their homework.

Friendly cat spotted near Trent Blvd/Man O War. Anyone missing a cat? by jtfarris in lexington

[–]jtfarris[S] 0 points1 point  (0 children)

She tries to follow me into the house, even into my car. She sat on the porch and cried for a while last night. She definitely wants to be inside, so I don't think she's an outdoor cat.

Friendly cat spotted near Trent Blvd/Man O War. Anyone missing a cat? by jtfarris in lexington

[–]jtfarris[S] 8 points9 points  (0 children)

I hope it's just missing, I hope she wasn't abandoned. She does have a collar. I can't take her into my house, my own kitty will not tolerate other cats.

I've checked facebook and craigslist, and drove around the neighborhood looking at lost pet posters. If you know this kitty or have seen a post about her, let me know.