Find services running inside svchost.exe via cmd.exe tasklist /svc | findstr “svchost.exe”
Continue readingMicrosoft-Windows-Hyper-V-VMMS/Admin, Event-ID 15268
Log Name Microsoft-Windows-Hyper-V-VMMS/Admin Source Hyper-V-VMMS Event-ID 15268 Level Error User SYSTEM Task Category None Message Failed to get the disk information. Check if an *.iso-File is mounted on a virtual dvd drive (with powershell) If so, unmount them and check if the error persists.
Continue readingELK-Stack (Elasticsearch Kibana Logstash) – Reporting Max size reached – expand
Add the following line to kibana.yml and restart the kibana-service The size must be set in bytes for example (1GB):
Continue readingJoin Debian / Ubuntu to Active Directory Domain
To domain-join an debian / ubuntu – server you first need to install realmd and its dependencies Join the server to your Active Directory-Domain If you need to, replace “administrator” with another authorized user. If the above command fails:check if your user has the required permissionscheck the passwordtry the following:
Continue readingEnable LDAP-Diagnose (Domain Controller / Active Directory)
Set registry value Set registry value via powershell Check LDAP-Events Open Event-Viewer and browse to “Applications and Services Logs” –> “Directory Service”. There you can find the LDAP-Events. You can filter for Event-ID “2889” to only get the necessary entries. Check LDAP-Events with powershell Disable LDAP-Diagnose with powershell
Continue readingKali Linux: metasploit – initial setup – database setup
Before running metasploit framework on kali you should first setup the msfdb (database) Start postgresql-service Set up database (msfdb) If you want to make postgresql automatically run on system startup enable it by executing the following command Start metasploit
Continue readingReconfigure timezone in Debian Linux / Kali Linux
Kali Linux – Virtualbox – 2 network adapters (NAT & Host-Only) – dhcp
To make two network adapters in Kali Linux work with dhcp use the following configuration: Edit /etc/network/interfaces Your config should look like this Save your file by pressing [strg] + [x] and then press [y] and [Enter] Reboot It is possible that your interfaces are named different (maybe eth1 and
Continue readingPihole Blocklists
Below you can find my favorite blocklists to update the pihole gravity database
Continue readingELK-Stack (Elasticsearch Kibana Logstash) – Index not writable (read-only)
Error: [INFO ][logstash.outputs.elasticsearch] retrying failed action with response code: 403 ({“type”=>”cluster_block_exception”, “reason”=>”blocked by: [FORBIDDEN/12/index read-only / allow delete (api)];”}) Log-Message Resolution 1. Cleanup your disk or expand it 2. Set Indices to “read_only_allow_delete”: “false” You can do this over Kibana –> Dev Tools Or via curl
Continue reading