WNDOWS. PS. Check Services

To do a html report of services status, you could do:

get-service | ConvertTo-Html -Property Name,Status | foreach { 
if ($_ -like "*<td>Running</td>*") {$_ -replace "<tr>", "<tr bgcolor=green>"} 
else {$_ -replace "<tr>", "<tr bgcolor=red>"}} > c:get-service.html

The result:

For a normal consult:

If you want start one service down automaticaly

Get-Service BITS | %{ if ( $_.Status -eq "Stopped" ) {Start-Service BITS}}

More important info at: https://www.techedge.nl/2018/04/09/servers-and-service-status-indicator-via-powershell/

by GoN | Published: February 15, 2018 | Last Updated: April 10, 2018

NAGIOS. Scheduled Backup

There are 3 posibilites to do a Scheduler Backup from Nagios GUI.

This example is for to do a Local Backup

You need to give permission to nagios user

Check at Nagios XI

by GoN | Published: February 13, 2018 | Last Updated:

EASY IDS. Basic Snort rules example

EASY IDS is a system with a lot utilities, at this post I speak of Snort

Download de ISO

Install in one VM

For one test basic you need 2 network cards. One to gestion other to sniffer

Now you can view th IP address to connect with a browser

User: admin /Pwd: password  -> default

You need change some variables:

Create a simple rule. Chek all ping / icmp package a our new IDS

If you check the configuration with GUI

Run!

Now without attacks:

Check the rule

Now detected attack

Check the IDS status

by GoN | Published: February 8, 2018 | Last Updated: