James Brundage | MVP
@mrpowershell.com did:plc:hlchta7bwmobyum375ltycg5
Jack of all Trades, Master of PowerShell. Prolific Programmer Microsoft MVP in Azure / PowerShell https://mrpowershell.com/ https://github.com/StartAutomating https://github.com/PowerShellWeb NB, Neurodivergent, Nerdy, Newsjunkie. Ask me anything.
Bei Bluesky seit
- Follower
- 1.848
- Folgt
- 529
- Posts
- 5.195
- Tage in Ranglisten
- 0
Zusammenfassung
James Brundage | MVP (@mrpowershell.com) ist seit 8 August 2023 auf Bluesky. Das Konto hat 1.848 Follower, folgt 529 Konten und hat 5.195 Posts veröffentlicht.
Ranglisten-Platzierungen
Die besten Tage, an denen Posts dieses Kontos in Debyas Tagesliste kamen.
Dieses Konto war noch in keiner Tagesrangliste.
Zuletzt gelikte Posts
Öffentliche Likes aus dem Bluesky-Netzwerk.
Well since this recent event got me interested in Powershell, can you suggest any resources for a Linux person (who mostly does Perl for scripting?)
Post anzeigenWell I actually did those things to recover candidates, but stopped when I found the keys from the 4104 events (which we now known they dont work because of the bug). I dont recommend anything to anyone because all of this is very deep into FAFO territory, I just work on backups
Post anzeigenCould this be done after the fact though using whatever logs were maintained by the compromised system? This is an interesting feature of powershell , which I was glad to find it runs on Linux too 🤣
Post anzeigenAbsolutely share the thoughts. Thinking of auditing the pagefile but to be honest this is a longshot. Still one never knows, but I definitely dont want to try to reconstruct from the filesystem
Post anzeigenIt was a AES256 , so the data are unrecoverable. We didn't pay the ransom and the hospital was effectively up and running in less than 24hrs. People with BYOD device compromises like me are sorta evaluating options. I was hopeful I could recover the key that was used (I did) but is useless
Post anzeigen
Blockierte Konten
Blockierungen sind auf Bluesky öffentlich.