Introduction to Credential Guard Credential Guard is a virtualization-based security (VBS) feature introduced in Windows 10 and Windows Server 2016 that protects derived credential material — specifically NTLM password hashes and Kerberos Ticket Granting Tickets (TGTs) — from extraction by malicious code running in the operating system. On Windows Server 2022, Credential Guard is enhanced […]
🟠 High ⏱ 5–30 min Last verified: 20 November 2022 Affected versions: Windows Server 2012 R2 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution — Primary Fix Solution — Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related […]
How to Set Up OCSP Responder on Windows Server 2012 R2 The Online Certificate Status Protocol (OCSP) is the modern alternative to Certificate Revocation Lists (CRLs) for checking whether a digital certificate has been revoked. While CRLs are downloaded in their entirety and can grow to megabytes in size for large PKIs, OCSP allows clients […]
How to Set Up Windows Deployment Services (WDS) on Windows Server 2022 Windows Deployment Services (WDS) is a server role in Windows Server 2022 that enables network-based (PXE) deployment of Windows operating systems. Instead of manually booting from USB drives or DVDs, WDS allows machines to boot over the network, load a Windows PE environment, […]
🟡 Medium ⏱ 5–30 min Last verified: 19 November 2022 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & Cross-Refs References & Further […]
🟠 High ⏱ 5–30 min Last verified: 19 November 2022 Affected versions: Ubuntu 22.04 LTS Ubuntu 22.04 Ubuntu 22.04.4 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention […]
How to Configure Windows Server 2016 Server Core Server Core is an installation option for Windows Server 2016 that removes the graphical shell — the desktop, Start menu, taskbar, and most graphical management tools — leaving only a command prompt and PowerShell. The result is a significantly reduced attack surface, lower memory consumption, fewer required […]
Introduction to Hyper-V Virtual Networking Virtual networking is one of the most complex and important aspects of a Hyper-V deployment on Windows Server 2022. The Hyper-V Virtual Switch is a Layer 2 software switch that runs in the hypervisor and provides connectivity between virtual machines and between VMs and the physical network. Beyond basic connectivity, […]
🟠 High ⏱ 5–30 min Last verified: 18 November 2022 Affected versions: Windows Server 2022 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution — Primary Fix Solution — Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors […]
Introduction This guide explains how to Configure MAC Framework on FreeBSD 12 on FreeBSD 12. FreeBSD uses the pkg(8) binary package manager, rc.conf(5) for service startup configuration, and pf(4) as its primary packet filter. There is no SELinux or AppArmor — instead, FreeBSD provides the MAC (Mandatory Access Control) framework and Capsicum for fine-grained privilege […]
