@acjuelich This command might be an option (I stole with pride from @roger_zander 's Client Center): (quser) | ? { !$_.contains('USERNAME') } | % { logoff $_.substring(43,2).Trim() }
Introducing the new Microsoft Intune Suite: Today, Microsoft Intune is introducing the Microsoft Intune Suite which unifies mission-critical advanced endpoint management and security solutions into one simple bundle. The new Microsoft… https://t.co/0uPR6cNMGD #MEM#MSIntune
Dumping LSASS is such a 2020 move, let me introduce a new CrackMapExec module called Masky developed by @_ZakSec 🎉
If you have admin privilege, the module will impersonate all users connected -> ask a certificate (ADCS) -> retrieve the NT hash using PKINIT 🚀
Crazy module 🪂
If you use your Xbox controller on a Windows 11 PC, check out this early preview of a new feature called controller bar. This is a new view of Xbox Game Bar that provides easy, controller-friendly access to recently played games and game launchers. More details below!
[BLOG ALERT📣] #Windows Hello for Business Hybrid Cloud-Trust is here!
Going #passwordless with #Windows Hello for Business has never been easier by using Cloud-Trust!📈
📣Start updating / implementing your deployment today!👇🏻
https://t.co/eXi3tWrRC9
#mvpbuzz#security#AzureAD
Configuring NDES for #MSIntune is often dreaded by many as it seems to be a daunting task, but IMHO, it's pretty simple if you can visualize all the components and structure actions in steps. Sharing snip of a slide that I am preparing for an upcoming workshop. #MEMPowered
Roadmap update for drivers & firmware in #WUFB - In May 2022, management reporting in Update Compliance will join the private preview, and all will public preview in July 2022. It will be publicly available in #MSIntune later this year. https://t.co/Y9fDIN5J59
#ThreatHunting: Check the following 🔑:
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\WinLogon\SpecialAccounts\UserList" /v user
💡 If you got a hit, the user is "hidden" 🥷 from the login screen, and you might have a backdoor account on this system. 🔍
#CyberSecurity
@manelrodero In my case I use the awesome module runasuser from @KelvinTegelaar.
You can find an example in my systray tool About my device.
A service is executed in SYSTEM and display a tray app in user context:
https://t.co/z6rUu1ILYs