Search results

  1. Michael Schmitz

    Microsoft Teams - the Latest Victim

    Layer8 Problem. If the user opens Mails as part of social Engnieering. Teams is not the Problem (There are settings for the Admin to protect the company), the User is. Teams is just another Vector. Not getting political, but yes, china and russia are at war with western countries to attack in...
  2. Michael Schmitz

    Antivirus Software - Purpose

    Technically : No. Because that AV is an old term. EDR or better XDR Solutions praise, they protect against Ramsonware. Companies may call their Product still AV and offer Ransomware Protection, but that is marketing. But then again, if the Ransomare comes in as Virus or Worm, the AV my detect...
  3. Michael Schmitz

    Basic Cybersecurity Hygiene

    Some GPO? You have a domain at home? For a single computer there is only the local Securtiy Configuration, which is like 1 GPO for all Users or this Computer with different Settings applied. But only one GPO.
  4. Michael Schmitz

    Basic Cybersecurity Hygiene

    Conditional Access. But that has to be enforced by the Application Vendor. Nothing i can enforce for myself. Nor so easy in a Company Enviroment. Use a Password Management Solution.
  5. Michael Schmitz

    Web Browser Launch - starts multiple instances

    You did not know, that Microsoft replaced their Edge Engine years ago (Jan, 15th 2020) with Chromium? Something that does come up in A+ to tell, or in Security courses, when talking about Browser Attacks..
  6. Michael Schmitz

    Zero Touch Provisioning

    Sorry. Zero Touch has nothing to do with SD-WAN. (If you make a quit, tell it, otherwise i appreciate that you give an explanation). Zero Touch was mostly used in larger Companies for deploying OS and Apps. Today Microsoft replaces it with Autopilot, which is not 100% Zero Touch, but works from...
  7. Michael Schmitz

    Encrypting Hard Drives

    What CompTIA Courses to you teach? If you ever watched a TTT for A+ or trained it, you should know that. IT is part of Windows Versions overview and differences.. I use Bitlocker, but no Bios protected HDD Encryption. SSDs encrypt usually by default without much inverention from the User. they...
  8. Michael Schmitz

    Microsoft Patch Tuesday

    What is the Problem? they have lots of Products. Ever looked, what ORacle releases every 3 months or so: Starting in April 2022, Critical Patch Updates are released on the third Tuesday of January, April, July, and Octobe in 2023 there was on Patchday from Oracle with 327 Patches.. Adobe in...
  9. Michael Schmitz

    Anonymizer

    SYO-701 is the actual Version used. 601 is EOL. Tor is a form of Proxy Chaining. Public VPN companies know, where you are surfing to. since they control the VPN Endpoint. (and the Entry Point). Espacially free VPN Offers. Agency try to install TOR Entry and Exit Nodes, so they may find out who...
  10. Michael Schmitz

    Cybersecurity Layers

    I would add more layers. SIEM is missing MAM is missing. SASE is missing. This is more or less a Buzzword Bingo Card. Why Application Whitelisting, when not also Blocklisting (to not forget, CompTIA changed some names). Source of this Graphic? Would not use it, without knowing where is coming...
  11. Michael Schmitz

    Cyber Security Tools

    No. Not at all. i would call it more or less useless, sorry. No gouping for the tools Kali Linux has most of this tools installed. and some fall more under the Term Pentesting. Had students, that would laught at me, when i show that graphic in Sec+ or CYSA/Pentest+. Also, what is the source of...
  12. Michael Schmitz

    Forensics Tools

    i would not really list Wireshark as a Malware analysis tool.. Data Recovery: getdataback i think that list is not good. to many topics / Programs missing. It shows a few Names, and thats it. For cloud :Often for one Provider to use.. Source of this Graphic? Would not use it, without...
  13. Michael Schmitz

    Common Attack Vectors

    Really go in that list? Man in the Cloud Man in the Disk (still no nonoffensive exclusive name for these). SMSishing Whaling, Qishing (Manipulating QR Codes, not new, but more and more common) Just go to the Exam Objectives for Sec+.
  14. Michael Schmitz

    Private Cloud Coverage

    Ala Carte menu: When you get the Bill on the end of the month. That goes to far to cover in a general cloud course. Private Cloud: just teach Server+ ;-) That is the Hardware Part mosly.. :-)
  15. Michael Schmitz

    Microsoft Sharepoint

    Microsoft Onedrive or better: Microsoft Office 365 to upload data in the Cloud, since that is stored there on Microsoft Sharepoint online. Look here
  16. Michael Schmitz

    Need Guidance for CompTIA CTT+ (TK0-201 & TK0-202/203) Preparation

    Did you not check the comptia.rg Website for it? Did you not read older postings about this before asking your Questions? You may find Books at amazon.com for covering the content, but as posted before, you will not get the certification anymore. If you need something like that, you may need to...
  17. Michael Schmitz

    Another Task Manager Mystery

    Except that Microsoft UWP is legacy stuff since 2021. https://www.thurrott.com/dev/258377/microsoft-officially-deprecates-uwp
  18. Michael Schmitz

    Write Blocker

    No. and for demo, they are to expensive. What i tell in the Courses about this: Also the Problem is with non-removal Flash Storage: No more useful. (All the Apple Stuff, Microsoft Surface and so on) Also most Blockers are for IDE, maybe SATA Protocol. but not many for M.2 SSD. (Just found one...
  19. Michael Schmitz

    What is STIX/TAXII ?

    SY0-701 is the actual version. but still it is mentioned in Sec+ still.
  20. Michael Schmitz

    Recommended time to teach Network+

    I have done the content in 3 Days, but the often till 6 or 7 in the evening. Do they wanna do the labs? When they plan to take the exam? How much to they already know? If Course is for one company, they may have more desire to learn more about one topic, then others, or do not take the exam at...