Network Security

Historic blog. No longer active. See Also http://horizontal-logic.blogspot.com for more Powershell code. AS of 2/27/2014 all Scripts are PS 4.0.

Showing posts with label *NIX find. Show all posts

Showing posts with label *NIX find. Show all posts

Monday, June 14, 2010

the 'find' command for security...Part I

These are some meditations on using the *NIX 'find' command for security...

Posted by Ryan M. Ferris at 5:10 PM 0 comments

Labels: *NIX find

Older Posts Home

Subscribe to: Posts (Atom)

"Powershell Semantics" : The Book

Introduction

Donations Accepted. Thanks!!

Pageviews last month

Avoiding XPath

Part I
Part II
Part III
Part IV
Part V
Part VI

Better Event Queries

Less Thrashing;Better Queries (Part I)
Less Thrashing;Better Queries (Part II)
Less Thrashing;Better Queries (Part III)
Less Thrashing;Better Queries (Part IV)
Less Thrashing;Better Queries (Part V)

Parsing Windows Firewall Logs

Parsing Windows Firewall Logs

The Get-WinEvent Series: Querying the Event Log for Logons

Get-Winevent Part III: Querying the Event Log for Logons (Part A)
Get-Winevent Part III: Querying the Event Log for Logons (Part B)
Get-Winevent Part III: Querying the Event Log for Logons (Part C)
Get-Winevent Part III: Querying the Event Log for Logons (Part D)
Get-Winevent Part III: Querying the Event Log for Logons (Part E)

The Get-WinEvent Series: ETL and Providers

Get-WinEvent, EventLogs, ETL, Providers on Win7
Get-WinEvent, EventLogs, ETL, Providers on Win7 Part II
Get-WinEvent, EventLogs, ETL, Providers on Win7 Part III

Pages

Home
Security Links
Papers

Blog Archive

Ryan M. Ferris: Bellingham, WA, United States; Most of my blogs are on hold. I have blogged on politics at www.bellinghampoliticsandeconomics.com . I blog on Covid-19 at www.ncovd.org . I blog on hiking in WA at www.AlwaysHiking.org

View my complete profile

Small Business Threats

Visit this group

Popular Posts Last 30 Days

Get-Winevent Part III: Querying the Event Log for Logons (Part B)

This is a long post that I've edited from a answer I gave on Stack Overflow . Although the post is about how to audit logon informatio...
Muxing AccessControl and FileInfo objects

Most of us know the members (partially printed at bottom) of System.Security.AccessControl and System.IO.FileInfo. And most of us know t...
Powershell LSOF/Parsing Netstat Part II

Two 'lsof for Powershell' scripts covering v4 and v6 have been placed here: h http://rmfdevelopment.com/PowerShell_Scripts/PS_LSOF...
Evtsys Part I

Eventlog-to-syslog was a Purdue university project that has been taken up by Sherwin Faria for Google Code and recently updated. The pr...
Charting Procmon network output with .NET 4.0 and Powershell

Lots to work out in this post. Powershell v 3.0 CTP2 or Beta. Procmon is Mark Russinovich's flagship tool for diagnosing Windows acti...
Evtsys (actually auditpol and auditusr) Part II

# Powershell V3 CTP2 # Using auditpol on Vista, Win7 # Enables failure and sucess auditing for selected subcategories $auditpollist= ...
Thrashing memory with queries...(Part I)

These are some event log search queries. They all trash my memory in any Powershell session. I have written them down for some reason. Pro...
Avoiding XPath: Part VI

Updated some 1/11/2020 -RMF So this piece will begin a discussion about grokking Windows Security Event Logs inside rdata.table and Postgr...
PolyMorphic Multifunctional Spyware/Malware/Distribution Ware...

I have been writing scripts like those (far) below to parse my Firewall's syslogd output and wondering if there is some other, better wa...
Get-Winevent Part IV: Querying the Event Log for 'Filtering Platform Connection' Information (Part A)

The command: ' auditpol /set /subcategory:"Filtering Platform Connection" /success:enable /failure:enable ' enables t...

All Rights Reserved Ryan Matthew Ferris 2009-2025

.

All Rights Reserved Ryan M. Ferris 2013. Simple theme. Powered by Blogger.