Finding WWN of LUNs on Windows Server 2008 R2

A quick post, for my reference You have a physical server with a HBA & LUNs presented from a SAN. What's the WWN of a specific LUN? PS> (Get-WMIObject -Namespace root\wmi -Class mpio_disk_info).DriveInfo | Select-Object Name, SerialNumber The "SerialNumber" is…

Audit AD GPO changes

Assuming you've already got AD object auditing turned on, the following XML XPath filter can filter the Security log of a DC to only return the events related to AD GPO changes <QueryList> <Query Id="0" Path="Security"> <Select…

Creating a local version of the Pwned Passwords list

Recently, web security chap Troy Hunt released 306 million freely downloadable Pwned passwords [%5Bhttps://www.troyhunt.com/introducing-306-million-freely-downloadable-pwned-passwords/] and created a website to search them [https://haveibeenpwned.com/Passwords]. I think this is a very useful resource and one which appears to me to…

Getting Qualys asset scan information via PowerShell

We use Qualys Vulnerability Management [https://www.qualys.com/suite/vulnerability-management/] at work to scan our assets for vulnerabilities. I needed to identify which assets hadn't been scanned in a long time. This could be done through the web interface by going to Assets->Asset Search…