Posts

Active directory: Workgroup vs Domain networks

Image
Definition Active Directory is a directory service developed by Microsoft for Windows domain networks. It comes as a range of processes and functions for most Windows Server operating systems (Windows Server 2022, Windows Server 2019, Windows Server 2016, Windows Server 2012 R2, Windows Server 2012) A directory is a hierarchical entity that retains information about items on a network. The techniques for storing directory data and making it available to network users and administrators are provided by a directory service, such as Active Directory Domain Services (AD DS). For example, AD DS maintains user account information including names, passwords, phone numbers, and so on, and allows authorized users on the network to access it.   AD stores the data of many items are known as AD objects and they are typically the shared resources like servers, computer accounts, network users, volumes, and printers. Security  The security in AD is handled using logon authentication and access contr

Azure Sentinel: Use Microsoft's SIEM to map global attacks

Image
 in this tutorial, we will display attacks from all over the globe on a world map using Microsoft cloud SIEM (Security Information and Event Management) this is a step-by-step guided lab so it will be a long tutorial. Project steps this project needs multiple stages to be completed, when you finish this guide you will be able to: create and configure a Virtual Machine using Azure configure a cloud network security group and create firewall rules create and configure a Logs Analytics Workspace collect data from Virtual Machines into Azure get familiar with PowerShell scripting and APIs use (KQL) Kusto Query Language (the Azure data exporter language)  Let's get started First of all, go ahead and create a free Azure account at  https://azure.microsoft.com/en-us/free/   When you're done with that go to your dashboard at  https://portal.azure.com/ Ps: Just a quick note before we begin, you will notice in Azure as in GCP or AWS that the search bar is your b

Subnetting

Image
Introduction the ability to create sub-networks and assign IP addresses inside your network needs the knowledge of some technical terms, here's a simple definition of them: Address:  The unique number ID assigned to one host or interface in a network. Subnet:  a portion of a network that shares a particular subnet address. Subnet mask: a 32-bit combination used to describe which portion of an address refers to the subnet and which part refers to the host. Interface:  a network connection. Broadcast address:  an IP address that is used to target all systems on a specific subnet network instead of single hosts. CIDR notation:  a compact representation of an IP address and its associated network mask. when you type ip address command on Linux or ipconfig  on Windows you get the addressing information.  Wlan0: presents the wireless interface. 192.168.1.9: presents the address. /24: presents the CIDR notation. 192.168.1.255:  presents the broadcast address. Understand IP Addresses An