Tutorial Tags & Topics

Welcome to the ConfigCorner Tag Hub. Click any topic or technology below to instantly filter guides across Linux, Windows, Networking, and Cybersecurity.

---

Active Filter: #all (165 tutorials)

✕ Clear Filter

🏷️ Popular Topics & Technologies

Click any tag to filter guides

# all 165 # windows 60 # linux 55 # networking 38 # security 32 # troubleshooting 30 # sysadmin 29 # powershell 27 # cybersecurity 23 # active-directory 21 # automation 14 # soc 13 # basics 12 # firewall 11 # senior-sysadmin 11 # storage 11 # incident-response 10 # monitoring 10 # dns 9 # hardening 9 # python 9 # docker 8 # identity 7 # logging 7 # systemd 7 # vpn 7 # backup 6 # command-line 6 # containers 6 # performance 6 # blue-team 5 # cisco 5 # disaster-recovery 5 # group-policy 5 # microsoft-entra 5 # pfsense 5 # recovery 5 # devops 4 # dhcp 4 # forensics 4 # intune 4 # rhel 4 # services 4 # ssh 4 # windows-server 4 # administration 3 # bash 3 # caddy 3 # endpoint-management 3 # ios-xe 3 # packet-analysis 3 # permissions 3 # scripting 3 # sha256 3 # shell 3 # siem 3 # sysmon 3 # vlan 3 # wireguard 3 # wireshark 3 # wsl2 3 # ad-cs 2 # api 2 # audit 2 # authentication 2 # change-management 2 # cisco-meraki 2 # conditional-access 2 # detection 2 # dfsr 2 # docker-compose 2 # domain-controller 2 # entra-id 2 # failover 2 # file-server 2 # filesystem 2 # find 2 # governance 2 # gpo 2 # inventory 2 # journalctl 2 # journald 2 # kerberos 2 # laps 2 # least-privilege 2 # logs 2 # memory 2 # microsoft-defender 2 # mount 2 # nfs 2 # nmap 2 # patch-management 2 # pki 2 # processes 2 # replication 2 # reverse-proxy 2 # segmentation 2 # smb 2 # ssl 2 # sudo 2 # switching 2 # sysstat 2 # sysvol 2 # tcp 2 # virtualization 2 # wazuh 2 # zfs 2 # 802.1x 1 # access-control 1 # access-reviews 1 # account-triage 1 # acl 1 # aide 1 # alert-triage 1 # aliases 1 # ansible 1 # apparmor 1 # application-security 1 # archives 1 # asset-inventory 1 # auditd 1 # autoruns 1 # autovpn 1 # avml 1 # azure 1 # azure-arc 1 # backups 1 # bitlocker 1 # boot 1 # btrfs 1 # capacity 1 # case-management 1 # ceph 1 # certificates 1 # cgroup-v2 1 # chmod 1 # chown 1 # chrony 1 # cli 1 # cloud-sync 1 # compliance 1 # compression 1 # configuration 1 # cpu 1 # crash-analysis 1 # cron 1 # crowdsec 1 # debian 1 # deployment 1 # detection-engineering 1 # device-compliance 1 # dfir 1 # dfs 1 # disk 1 # disk-space 1 # dracut 1 # dynamic-dns 1 # edr 1 # email-security 1 # encryption 1 # endpoint-detection 1 # event-forwarding 1 # event-logs 1 # event-viewer 1 # ext4 1 # failover-clustering 1 # feature-updates 1 # fido2 1 # file-integrity-monitoring 1 # file-processing 1 # files 1 # fim 1 # flock 1 # forest-recovery 1 # fortigate 1 # gateway 1 # gmsa 1 # go 1 # grep 1 # groups 1 # grub 1 # guest-access 1 # guest-network 1 # high-availability 1 # hotpatch 1 # hybrid-identity 1 # identity-access 1 # ikev2 1 # image-security 1 # inodes 1 # investigation 1 # ip 1 # ipam 1 # ipsec 1 # iscsi 1 # itil 1 # jellyfin 1 # jobs 1 # kdump 1 # kernel 1 # kql 1 # layer-2 1 # lime 1 # lvm 1 # memory-analysis 1 # mfa 1 # microsoft-graph 1 # microsoft-sentinel 1 # migration 1 # mmc 1 # mtu 1 # multi-wan 1 # multichannel 1 # multipath 1 # netlogon 1 # netmiko 1 # network-monitoring 1 # nftables 1 # nginx 1 # ntfs 1 # ntp 1 # oom 1 # openssh 1 # operations 1 # owasp-zap 1 # package-management 1 # perfmon 1 # persistence 1 # phishing 1 # pihole 1 # pim 1 # pipes 1 # pmtud 1 # privacy 1 # privileged-access 1 # process-triage 1 # protocols 1 # proxmox 1 # psi 1 # quorum 1 # radius 1 # ransomware 1 # recycle-bin 1 # redirection 1 # refs 1 # relay 1 # remote-access 1 # remote-administration 1 # requests 1 # rest 1 # restore 1 # routing 1 # san 1 # sandboxing 1 # sar 1 # security-keys 1 # selinux 1 # server 1 # service-accounts 1 # setgid 1 # setuid 1 # sigma 1 # sign-in-logs 1 # sites-and-services 1 # spn 1 # sssd 1 # storage-replica 1 # storage-spaces 1 # subprocess 1 # systemd-resolved 1 # tailscale 1 # tar 1 # tcpdump 1 # threat-defense 1 # threat-hunting 1 # time 1 # time-service 1 # tls 1 # truenas 1 # ubuntu 1 # ufw 1 # umask 1 # update-rings 1 # users 1 # volumes 1 # w32tm 1 # wef 1 # win32-app 1 # windows-server-2025 1 # windows-update 1 # winpmem 1 # winrm 1 # ws2025 1 # xdr 1 # xfs 1 # zeek 1 # zero-trust 1

---

Guide

Terms of Use & Legal Disclaimer

Technical liability disclaimer, educational use policy, and execution risks for ConfigCorner tutorials.

🐍 Automation

Automation & Python Playbook Hub

Python system snapshots, read-only REST API polling, certificate and log alerts, network inventory reports, and Ansible patch orchestration.

🛡️ Cybersecurity

Cybersecurity & Threat Defense Hub

SOC alert triage, endpoint investigations, incident response, application security testing, and identity audits.

🐧 Linux

Linux Engineering & Administration Hub

Production configurations, systemd architectures, container orchestration, and server hardening.

🌐 Networking

Networking & Infrastructure Hub

Network tutorials for switching, routing, pfSense firewalls, VPNs, DNS, reverse proxies, container networks, and troubleshooting.

🪟 Windows

Windows & PowerShell Administration Hub

Enterprise administration, automation scripts, WSL2 tuning, and baseline hardening.

🐍 Automation

Roll Out Linux Patches with Ansible

Use a canary host, serial batches, package-cache refresh, reboot handling, and post-patch checks for a controlled Debian-family rollout.

#automation #ansible #linux #patch-management #sysadmin

🐍 Automation

Build a DNS, DHCP, and IPAM Drift Report with Python

Compare read-only DNS, DHCP, and IPAM CSV exports to report cross-source mismatches and duplicate address assignments.

#python #automation #dns #dhcp #ipam #networking

Guide

Enterprise IT Runbooks & SOPs

Standard Operating Procedures (SOPs), Troubleshooting Guides (TSGs), and Architectural Standards for Enterprise Systems, Networking, and Security Operations.

🐍 Automation

Create and Verify File Integrity Manifests with Python

Build a dependency-free Python command-line tool that records SHA-256 file hashes and checks a directory for changed, missing, or unexpected files.

#python #automation #security #sha256 #cli #sysadmin

🐍 Automation

Collect Read-Only Network Device Inventory with Python and Netmiko

Use Netmiko and SSH to record device prompts and selected show-command output from authorized network equipment.

#python #automation #netmiko #networking #inventory #ssh

🐍 Automation

Real-Time Nginx Log Parser and Discord Alerting with Python

Follow a rotating Nginx access log, count HTTP 401/403 responses by client address in a rolling window, and send optional Discord alerts.

#python #automation #security #logging #devops #sysadmin

🐍 Automation

Build a Resilient REST API Poller with Python

Use Requests sessions, explicit timeouts, bounded retries, and cursor pagination for dependable read-only API automation.

#python #automation #api #requests #monitoring #rest

🐍 Automation

Run System Commands Safely from Python

Automate trusted command-line tools with argument lists, timeouts, captured output, and clear error handling.

#python #automation #subprocess #sysadmin #security

🐍 Automation

Automated SSL/TLS Certificate Expiry Monitor with Python

Inspect HTTPS certificate expiry, separately report TLS trust validation, and send Discord alerts with an asynchronous Python monitor.

#python #automation #security #ssl #networking #sysadmin #monitoring

🐍 Automation

Cross-Platform System Health Snapshots with Python

Collect CPU, memory, and disk metrics with psutil, print a JSON health snapshot, and optionally append scheduled snapshots to a JSON Lines file.

#python #automation #devops #sysadmin #linux #windows #monitoring

🛡️ Cybersecurity

Audit Active Directory Privileged Group Membership

Use the Active Directory PowerShell module to export forest-wide direct membership of high-impact groups for a reviewable, read-only access audit.

#cybersecurity #windows #active-directory #identity #least-privilege

🛡️ Cybersecurity

Review AD CS Certificate Template Enrollment Exposure

Inventory enterprise CAs and published certificate templates, then review CA and template permissions, subject-name controls, and authentication-capable EKUs.

#cybersecurity #active-directory #ad-cs #pki #certificates #blue-team

🛡️ Cybersecurity

Grant Least-Privilege Linux Access with Sudoers

Create a dedicated operations group and a validated sudoers rule that lets operators inspect one service without granting broad root access.

#cybersecurity #linux #sudo #identity-access #least-privilege #hardening

🛡️ Cybersecurity

SOC Alert Triage: Validate, Scope, and Document an Alert

Use a repeatable, tool-independent SOC workflow to validate an alert, scope related activity, assess confidence and impact, and hand off clear case notes.

#cybersecurity #soc #alert-triage #incident-response #blue-team #case-management

🛡️ Cybersecurity

Investigate an Endpoint Alert in Microsoft Defender

Work from a Defender incident to its device timeline, validate alert evidence and related activity, scope affected assets, and follow an approved containment or escalation plan.

#cybersecurity #soc #microsoft-defender #endpoint-detection #incident-response #xdr

🛡️ Cybersecurity

Investigate Microsoft Entra ID Sign-In Alerts

Review identity, application, authentication method, device, IP, and Conditional Access context for a sign-in alert and document a cautious disposition.

#cybersecurity #soc #microsoft-entra #identity #sign-in-logs #conditional-access

🛡️ Cybersecurity

Triage Linux SSH and Sudo Activity

Review bounded Linux journal records for SSH authentication and sudo activity, correlate users and source hosts, and document findings without changing the system.

#cybersecurity #soc #linux #ssh #sudo #journald #authentication

🛡️ Cybersecurity

KQL for First-Line Security Investigations in Microsoft Sentinel

Use time-bounded KQL to inspect Entra sign-ins, validate schema and ingestion, find related activity, and summarize events without treating a query result as a verdict.

#cybersecurity #soc #microsoft-sentinel #kql #siem #investigation

🛡️ Cybersecurity

SOC Phishing Email Triage

Preserve a suspected phishing message, inspect trusted header and authentication evidence, assess links and attachment metadata safely, search for related recipients, and document disposition.

#cybersecurity #soc #phishing #email-security #incident-response #microsoft-defender

🛡️ Cybersecurity

Trace a Suspicious Process with Sysmon

Investigate Sysmon process-creation events by building a parent-child timeline, reviewing command lines and hashes, and correlating optional network and DNS telemetry.

#cybersecurity #soc #windows #sysmon #process-triage #detection

🛡️ Cybersecurity

Build a Small SOC Lab with Wazuh

Deploy a contained Wazuh all-in-one lab, enroll a Linux endpoint, generate benign file-integrity events, review alerts, and add a narrowly scoped local rule.

#cybersecurity #soc #wazuh #siem #linux #file-integrity-monitoring

🛡️ Cybersecurity

Investigate Windows Sign-In and Account Activity

Review Windows Security events for successful and failed logons, account lockouts, and privileged logons with bounded PowerShell queries and careful event correlation.

#cybersecurity #soc #windows #event-logs #authentication #account-triage

🛡️ Cybersecurity

Triage DNS and Outbound Connections with Zeek Logs

Use Zeek dns.log and conn.log to review a suspicious domain or unexpected outbound connection, pivot by connection UID, and preserve the limits of network metadata.

#cybersecurity #soc #zeek #dns #network-monitoring #incident-response

🛡️ Cybersecurity

Run an Authorized Nmap Asset Discovery

Build a small, documented Nmap inventory workflow for approved networks using conservative discovery, limited service checks, and reviewable output files.

#cybersecurity #networking #nmap #asset-inventory #blue-team

🛡️ Cybersecurity

Deploy Sysmon for Windows Endpoint Telemetry

Install Microsoft Sysinternals Sysmon, confirm its event channel is producing data, and establish a safe starting point for centralized endpoint monitoring.

#cybersecurity #windows #sysmon #logging #detection

🛡️ Cybersecurity

Validate Network Segmentation with Nmap

Use conservative TCP connect scans from approved test zones to compare reachable ports with a firewall segmentation matrix.

#cybersecurity #nmap #networking #firewall #segmentation

🛡️ Cybersecurity

Run an OWASP ZAP Passive Baseline in an Isolated Lab

Launch a deliberately vulnerable training application and OWASP ZAP on a private Docker network, produce a passive baseline report, and remove the lab.

#cybersecurity #application-security #owasp-zap #docker #blue-team

🛡️ Cybersecurity

Write a Sigma Detection for Suspicious PowerShell

Create and validate a process-creation Sigma rule for encoded or hidden PowerShell launches, then tune it against approved administrative activity.

#cybersecurity #sigma #detection-engineering #powershell #sysmon #blue-team

🛡️ Cybersecurity

Use FIDO2 Security Keys for SSH Authentication

Configure OpenSSH security-key authentication with required touch and user verification, preserve a tested backup key, and harden a Linux SSH server without locking out administrators.

#cybersecurity #ssh #fido2 #security-keys #linux #hardening

🛡️ Cybersecurity

Use CrowdSec for Linux Host Firewall Remediation

Install CrowdSec on Debian or Ubuntu, collect and parse SSH authentication logs, apply IP-level decisions with a firewall bouncer, and verify the services safely.

#crowdsec #linux #firewall #security #threat-defense #logging

🐧 Linux

Create and Extract Linux Archives with tar

Create a compressed tar archive, list its contents, restore it to a fresh directory, and verify the recovered files.

#linux #basics #tar #archives #compression #backup

🐧 Linux

Linux Filesystems and Mounts for Beginners

Understand Linux directory paths, disks, filesystems, mount points, and the safe commands used to inspect storage.

#linux #basics #filesystem #mount #storage #command-line

🐧 Linux

Linux Package Management (APT, DNF & Pacman)

Master software package installation, repositories, and maintenance across Debian/Ubuntu, RHEL, and Arch systems.

#linux #sysadmin #package-management #ubuntu #debian

🐧 Linux

Linux Processes and Jobs: A Beginner's Guide

Learn how to list Linux processes, understand PIDs and signals, and manage safe background jobs from the shell.

#linux #basics #processes #jobs #shell #troubleshooting

🐧 Linux

Search and Inspect Files on Linux

Use less, grep, find, file, and stat to read files and search a practice log without changing system data.

#linux #basics #files #grep #find #logs #command-line

🐧 Linux

Navigate the Linux Shell and Work with Files

Learn how to inspect directories, move through paths, and create, copy, rename, and read files safely.

#linux #basics #shell #filesystem #command-line

🐧 Linux

Use Linux Pipes and Redirection in the Shell

Combine Linux commands, filter their output, and save standard output and errors to files.

#linux #basics #shell #pipes #redirection #command-line

🐧 Linux

Systemd for Beginners: Services, Timers, and Journal Logs

Learn to inspect, start, enable, restart, and remove a safe example systemd service, then follow its journal logs.

#linux #basics #systemd #services #journalctl

🐧 Linux

Linux File Permissions: chmod, chown, umask, SUID, and SGID

Learn Linux users and groups, chmod, chown, umask, SUID and SGID bits, and safe web-server file permissions.

#linux #basics #users #groups #permissions #chmod #chown #umask #setuid #setgid #security

🐧 Linux

Getting Started with Docker Engine

Understand Docker architecture and run your first containerized services on Linux.

#docker #containers #linux #devops

🐧 Linux

Docker Compose 101: Run a Two-Container Website

Build a small Caddy and NGINX Compose stack with a local HTML page, safe port mapping, read-only bind mounts, named volumes, and a health check.

#linux #docker #docker-compose #containers #nginx #caddy

🐧 Linux

Docker Compose Operations: Secrets, Limits, Logs, and Updates

Run and maintain a local PostgreSQL Compose stack with health checks, file-backed secrets, resource limits, log rotation, and controlled image updates.

#docker #docker-compose #containers #devops #linux

🐧 Linux

Back Up and Restore a Docker Named Volume

Quiesce a container, archive a named volume, verify it, and restore it into a separate volume.

#docker #containers #volumes #backup #recovery

🐧 Linux

Trace Linux Service Latency with cgroup v2

Correlate service latency with cgroup CPU throttling, memory and I/O pressure, parent limits, and measured application performance.

#linux #performance #cgroup-v2 #systemd #psi #monitoring

🐧 Linux

Configure and Verify Linux Time with chrony

Install chrony, use approved time sources, inspect synchronization health, and diagnose common clock issues.

#linux #chrony #ntp #monitoring #time

🐧 Linux

Build a Small Docker Image with Multi-Stage Builds

Compile a small Go program in a builder stage, copy only its binary into a minimal runtime image, and run it as a non-root user.

#docker #containers #linux #image-security #go

🐧 Linux

Configure Persistent systemd Journal Storage and Retention

Keep Linux systemd journal logs across reboots and set disk and age limits with a drop-in configuration.

#linux #systemd #journald #logging #monitoring #sysadmin

🐧 Linux

Monitor Linux CPU, Memory, Disk, and Process Activity

Use sysstat tools to sample Linux resource usage, locate busy processes, and build a useful performance baseline.

#linux #monitoring #sysstat #performance #cpu #memory #disk

🐧 Linux

Review Historical Linux Performance with sar

Enable sysstat collection and use sar to inspect historical CPU, memory, and disk activity after a performance issue.

#linux #monitoring #sysstat #sar #performance #capacity

🐧 Linux

Build a Bash Command-Line Tool with Options and Validation

Create a reusable Bash utility with command-line options, input checks, clear errors, and meaningful exit statuses.

#linux #bash #scripting #automation #command-line

🐧 Linux

Prevent Overlapping Bash Jobs with flock

Use a stable lock file and a nonblocking flock in Bash to keep scheduled or manually launched jobs from running at the same time.

#linux #bash #scripting #flock #automation

🐧 Linux

Process Files Safely in a Bash Loop

Use quoted paths and null-delimited find results to handle batches of Linux files, including names with spaces.

#linux #bash #scripting #find #file-processing #automation

🐧 Linux

Systemd Timers vs Cron: Modern Linux Task Automation

Ditch traditional cron. Learn how to build resilient, logged, and dependency-aware background tasks using systemd services and timers.

#systemd #automation #linux #sysadmin #cron

🐧 Linux

Linux Auditd & File Integrity Monitoring with AIDE

Detect unauthorized modifications to binaries, system configurations, and sensitive directories with AIDE and the Linux Audit framework.

#linux #security #auditd #aide #hardening #sysadmin

🐧 Linux

Troubleshoot SELinux and AppArmor Denials Safely

Trace a failed Linux service action to SELinux or AppArmor, inspect the relevant event, and make a narrow policy correction without disabling protection.

#linux #selinux #apparmor #security #troubleshooting

🐧 Linux

Build a Safe nftables Host Firewall Baseline

Inspect the active ruleset, stage a minimal host-filter policy, syntax-check it, and apply changes with an access-preserving plan.

#linux #nftables #firewall #security #networking

🐧 Linux

SSH Hardening & Key-Based Authentication

Secure remote SSH access with ed25519 cryptographic keys and disable password logins.

#ssh #security #hardening #linux

🐧 Linux

UFW Firewall Setup & Hardening

Configure and harden the Uncomplicated Firewall on Ubuntu and Debian systems.

#firewall #ufw #security #linux #networking

🐧 Linux

Integrate RHEL 9 with Active Directory Using SSSD

Join a RHEL 9 pilot to Active Directory, validate identity and authentication, restrict access, and plan rollback.

#linux #rhel #active-directory #sssd #kerberos #security

🐧 Linux

Harden Linux Services with systemd Sandboxing

Test systemd service isolation, apply filesystem and privilege restrictions to a canary, and roll back safely if the service needs more access.

#linux #systemd #security #hardening #sandboxing

🐧 Linux

Expand an LVM Volume and Filesystem Online

Add a verified empty block device to an LVM volume group, extend a logical volume, and grow an ext4 or XFS filesystem.

#linux #lvm #storage #ext4 #xfs #sysadmin

🐧 Linux

Managing Storage Pools and Snapshots with ZFS and Btrfs

Create mirrored storage, manage datasets and subvolumes, take snapshots, and check filesystem integrity on Linux.

#zfs #btrfs #storage #backups #linux #sysadmin

🐧 Linux

Troubleshoot RHEL 9 Multipath and SAN Path Failures

Trace a mounted workload to its WWID, inspect DM Multipath path groups and queueing, and recover a confirmed SAN path fault without deleting an active map.

#linux #rhel #multipath #san #storage #senior-sysadmin

🐧 Linux

Diagnose a Failed Linux systemd Service

Trace a failed systemd service from its unit definition and journal logs through safe validation and recovery.

#linux #troubleshooting #systemd #services #journalctl #sysadmin

🐧 Linux

Troubleshoot Linux Disk Space and Inode Exhaustion

Trace a full Linux filesystem safely by checking blocks, inodes, large directories, and deleted files still held open.

#linux #troubleshooting #storage #disk-space #inodes #sysadmin

🐧 Linux

Recover a Linux Server That Fails to Boot

Use a RHEL 9 console and rescue media to isolate boot failures, repair a verified mount or initramfs problem, and validate recovery.

#linux #rhel #boot #recovery #grub #dracut

🐧 Linux

Diagnose Linux Memory Pressure and OOM Kills

Use kernel logs, memory pressure metrics, process snapshots, and cgroup data to investigate Linux memory exhaustion safely.

#linux #troubleshooting #memory #oom #sysadmin

🐧 Linux

Linux Network Interface & Connection Failure Triage

Systematic Layer 2 through Layer 7 Linux network troubleshooting methodology using iproute2, ss, resolvectl, and tcpdump.

#linux #networking #troubleshooting #sysadmin #tcpdump

🐧 Linux

Set Up a Restricted Linux NFS Share

Create a read-only NFS export, restrict it to a client subnet, mount it for testing, and verify ownership and service state.

#linux #nfs #storage #mount #sysadmin

🐧 Linux

Configure RHEL 9 Kdump and Triage a Kernel Crash

Prepare reserved crash memory and a tested dump target, validate kdump safely in a lab, and inspect a vmcore using matching kernel symbols.

#linux #rhel #kdump #kernel #crash-analysis #senior-sysadmin

🐧 Linux

Change a systemd Service with a Drop-In Override

Inspect a unit, add a small local override, reload systemd, verify the merged configuration, and remove only the intended drop-in.

#linux #systemd #services #troubleshooting #configuration

🐧 Linux

Diagnose Linux TCP Retransmissions and Socket Queue Pressure

Correlate application latency with socket state, retransmission deltas, listener pressure, NIC counters, and bounded packet captures before changing TCP settings.

#linux #tcp #networking #performance #troubleshooting #senior-sysadmin

🌐 Networking

Create a Read-Only Meraki Inventory with Python

Use Cisco Meraki Dashboard API and its Python library to export organization, network, and device inventory to a protected CSV file.

#networking #cisco-meraki #python #api #inventory

🐧 Linux

Troubleshoot Linux DNS Resolution

Separate resolver configuration, DNS transport, authoritative answers, and local cache issues with common Linux tools.

#linux #dns #troubleshooting #systemd-resolved #networking

🌐 Networking

Isolate Docker Services with Bridge and Macvlan Networks

Segment Compose services with user-defined bridge networks, an internal backend, Docker secrets, and an optional Macvlan LAN address.

#networking #docker #containers #firewall #linux #security

🌐 Networking

Back Up and Restore a pfSense Configuration Safely

Export an encrypted full configuration, inspect history, and prove recovery on an isolated test firewall.

#networking #pfsense #firewall #backup #restore #disaster-recovery

🌐 Networking

Configure and Test Dual-WAN Failover in pfSense

Use monitored gateways and a tiered gateway group to keep LAN traffic online when the preferred Internet path fails.

#networking #pfsense #multi-wan #failover #gateway #troubleshooting

🌐 Networking

Build Clear pfSense Firewall Rules with Aliases and Logging

Use named host and port aliases to permit one approved flow, confirm rule order, and investigate matches in the firewall log.

#networking #pfsense #firewall #aliases #logging #access-control

🌐 Networking

Pi-hole with an Encrypted DNS-over-HTTPS Upstream

Deploy Pi-hole with Docker Compose and forward queries through AdGuard DNS Proxy to an encrypted DNS-over-HTTPS resolver.

#pihole #dns #privacy #networking #security

🌐 Networking

Segment Guest and IoT Networks with pfSense VLANs

Create two VLAN interfaces, serve their addresses, and permit only the traffic each network needs.

#networking #pfsense #firewall #vlan #segmentation #guest-network

🌐 Networking

Troubleshoot DHCPv4 Lease Failures with Wireshark

Capture an authorized DHCPv4 exchange, follow Discover, Offer, Request, and ACK packets, and narrow a lease failure to the client, relay, or server path.

#networking #wireshark #dhcp #packet-analysis #troubleshooting

🌐 Networking

Triage DNS and TCP Problems with Wireshark

Capture an authorized test flow and use display filters to inspect DNS answers, TCP handshakes, retransmissions, and connection timing.

#networking #wireshark #packet-analysis #dns #tcp #troubleshooting

🌐 Networking

Analyze a TLS Handshake with Wireshark

Capture one authorized HTTPS connection and inspect TLS handshake messages, negotiated protocol hints, and connection failures.

#networking #wireshark #tls #packet-analysis #troubleshooting

🌐 Networking

Self-Host Jellyfin with Caddy on Windows or Linux

Install Jellyfin, configure a domain or No-IP dynamic DNS, and publish it securely through Caddy with automatic HTTPS on Windows or Linux.

#jellyfin #caddy #reverse-proxy #dynamic-dns #windows #linux #networking

🌐 Networking

Configure Inter-VLAN Routing on Cisco IOS XE

Create routed SVIs for two VLANs on a Layer 3 switch and verify client gateways, connected routes, and forwarding.

#networking #cisco #ios-xe #routing #vlan #switching

🌐 Networking

Troubleshoot DHCP Relay Across VLANs

Trace a DHCP request from its VLAN SVI through an IOS XE relay to the server scope and back to the client.

#networking #dhcp #relay #cisco #ios-xe #troubleshooting

🌐 Networking

Caddy Reverse Proxy with Automated TLS and Safe Headers

Install Caddy, reverse proxy a local application with automatic HTTPS, and add conservative security headers.

#caddy #reverse-proxy #ssl #networking #docker #security

🌐 Networking

Configure Access and Trunk VLAN Ports on Cisco IOS XE

Create a VLAN, assign an endpoint access port, configure an explicit trunk allow-list, and verify the switch state.

#networking #vlan #switching #cisco #ios-xe #layer-2

🌐 Networking

Diagnose Path MTU Problems on an IP Network

Use tracepath and controlled ping probes to identify suspected MTU black holes affecting VPN, TLS, or large transfers.

#networking #mtu #pmtud #vpn #troubleshooting #ip

🌐 Networking

Troubleshoot Cisco Meraki AutoVPN Site-to-Site Connectivity

Use Meraki VPN status, event logs, advertised subnets, routes, and packet-path checks to isolate a site-to-site AutoVPN failure before changing configuration.

#networking #cisco-meraki #autovpn #vpn #troubleshooting

🌐 Networking

Tailscale Subnet Router with Explicit Access Grants

Advertise a private LAN through a Linux subnet router, approve the route, and scope access with Tailscale grants.

#networking #tailscale #vpn #zero-trust #wireguard #sysadmin

🌐 Networking

Set Up WireGuard Remote Access on pfSense

Configure one WireGuard tunnel and peer, permit only a selected internal service, and verify the remote client path.

#networking #pfsense #wireguard #vpn #remote-access #firewall

🌐 Networking

WireGuard VPN Quickstart

Build a point-to-point WireGuard tunnel between a Linux server and one remote client, with keys, firewall rules, and verification.

#wireguard #vpn #networking #security #linux

🪟 Windows

Plan an Active Directory Forest Recovery Exercise

Build a safe, isolated forest recovery rehearsal around trusted system state backups, DSRM access, and documented go/no-go checks.

#windows #active-directory #forest-recovery #backup #disaster-recovery

🪟 Windows

Restore Deleted Active Directory Objects with Recycle Bin

Check forest prerequisites, locate one deleted AD user, preview its restoration, and verify the recovered account and memberships.

#windows #active-directory #recycle-bin #recovery #powershell

🪟 Windows

Test Windows Server Backup Recovery

Inspect Windows Server Backup versions and run a safe file-level recovery drill to an alternate path before relying on a backup.

#windows #windows-server #backup #recovery #disaster-recovery #sysadmin

🪟 Windows

Windows Event Viewer Basics for Administrators

Navigate Windows Event Viewer, filter System and Application events, query recent records with PowerShell, and export logs safely.

#windows #basics #event-viewer #logs #powershell #troubleshooting

🪟 Windows

Windows File and Folder Permissions: NTFS Basics

Understand Windows NTFS permissions, inheritance, and effective access with Explorer, Get-Acl, and icacls using a safe practice folder.

#windows #basics #ntfs #permissions #acl #powershell

🪟 Windows

PowerShell Basics for Windows Administrators

Get started with PowerShell commands, help, paths, objects, and safe file-system practice for everyday Windows administration.

#windows #basics #powershell #command-line #administration

🪟 Windows

Windows Server Administration Essentials (MMC, Admin Center & Roles)

Master core Windows administrative toolkits, role provisioning, MMC snap-ins, and modern Windows Admin Center operations.

#windows #sysadmin #server #powershell #administration

🪟 Windows

Windows Services and Processes: A Beginner's Guide

Use Task Manager, Services, and PowerShell to inspect Windows processes and services, understand startup settings, and restart services cautiously.

#windows #basics #services #processes #powershell #administration

🪟 Windows

Windows Server Performance Monitor (PerfMon) & Telemetry Baselines

Capture rolling CPU, memory, and disk counters with Performance Monitor, configure an alert, and export a closed BLG log.

#windows #monitoring #powershell #perfmon #sysadmin

🪟 Windows

Plan Active Directory Sites and Services for Branch Offices

Map IP subnets to AD sites and review site links so domain controller discovery and replication reflect the real network.

#windows #active-directory #sites-and-services #replication #networking

🪟 Windows

Windows Server DHCP Scopes and Failover Operations

Inventory IPv4 scopes, review exclusions and options, plan a safe scope change, and verify DHCP failover replication.

#windows #dhcp #windows-server #failover #powershell

🪟 Windows

Windows Server DNS: Zones, Records, and Safe Scavenging

Inspect DNS zones, create and verify a host record, understand aging intervals, and plan stale-record scavenging safely.

#windows #dns #windows-server #powershell #sysadmin

🪟 Windows

Audit Active Directory User Accounts with PowerShell

Build a read-only review of enabled Active Directory accounts, recent logon metadata, and password age.

#windows #active-directory #powershell #identity #audit

🪟 Windows

Deploy a Group Managed Service Account (gMSA)

Prepare a security group, validate the KDS prerequisite, and migrate a supported Windows service to a group Managed Service Account.

#windows #active-directory #gmsa #service-accounts #powershell

🪟 Windows

Centralize Windows Events with Source-Initiated Forwarding

Set up a Windows Event Collector subscription and configure domain clients to forward selected events centrally.

#windows #event-forwarding #monitoring #wef #group-policy #security

🪟 Windows

Review Microsoft Entra User Sign-In Activity with PowerShell

Export Microsoft Entra user account and sign-in activity for an access review using Microsoft Graph PowerShell.

#windows #entra-id #azure #microsoft-graph #powershell #identity #audit

🪟 Windows

SysAdmin PowerShell Diagnostic Toolkit

A step-by-step PowerShell workflow for DISM/SFC system file repair, critical event log inspection, and storage health telemetry.

#powershell #windows #automation #sysadmin #troubleshooting

🪟 Windows

Audit and Secure AD CS Certificate Templates

Review enterprise CA templates for risky enrollment, identity, and issuance settings, then pilot a controlled remediation.

#windows #active-directory #ad-cs #pki #security #senior-sysadmin

🪟 Windows

Configure WinRM over HTTPS with a Trusted Certificate

Configure a WinRM HTTPS listener with a trusted server certificate, restrict access to management clients, and verify remoting before retiring HTTP.

#windows #winrm #powershell #security #sysadmin #hardening

🪟 Windows

Install and Scope OpenSSH Server on Windows

Enable the Windows OpenSSH Server, verify its service and firewall rule, and restrict access to a trusted management network.

#windows #openssh #powershell #remote-administration #security

🪟 Windows

BitLocker Drive Encryption and Recovery Key Backup

Review BitLocker status, verify TPM and recovery protectors, and confirm a recovery key is backed up through Windows or your organization's escrow process.

#windows #bitlocker #encryption #security #recovery #powershell

🪟 Windows

Windows Security Baseline & Protocol Hardening

Audit legacy name and file-sharing protocols, apply compatible hardening, and enable PowerShell script block logging.

#windows #security #hardening #powershell #protocols

🪟 Windows

Pilot a Microsoft Entra Conditional Access MFA Policy

Build a scoped MFA policy in report-only mode, simulate its match, review sign-in results, and plan a controlled rollout.

#windows #microsoft-entra #conditional-access #mfa #identity #security

🪟 Windows

Review Microsoft Entra Guest Access with Access Reviews

Create a focused guest access review, assign accountable reviewers, evaluate decisions, and manually apply approved access changes.

#windows #microsoft-entra #access-reviews #guest-access #identity #governance

🪟 Windows

Configure Just-in-Time Microsoft Entra Role Activation with PIM

Set up a least-privilege eligible role, configure activation controls, test approval, and verify time-limited access in Microsoft Entra Privileged Identity Management.

#windows #microsoft-entra #pim #privileged-access #identity #security

🪟 Windows

Package and Deploy a Win32 App with Microsoft Intune

Prepare a silent Windows installer as an .intunewin package, configure detection and requirements, deploy to a pilot device group, and troubleshoot results.

#windows #intune #win32-app #endpoint-management #deployment

🪟 Windows

Pilot Intune Windows Update Rings and Feature Updates

Create a device-scoped Windows update ring and feature update policy, stage a supported release, and monitor readiness before broad rollout.

#windows #intune #windows-update #update-rings #feature-updates #endpoint-management

🪟 Windows

Pilot an Intune Windows Device Compliance Policy

Create a scoped Windows compliance policy, sync an enrolled test device, and investigate its per-setting compliance results before wider assignment.

#windows #intune #device-compliance #endpoint-management #security

🪟 Windows

Create a Scoped Inbound Windows Firewall Rule

Use PowerShell to add, verify, and safely remove an inbound firewall rule limited to approved source addresses.

#windows #firewall #powershell #security #networking #hardening

🪟 Windows

Deploy Windows LAPS with Active Directory Backup

Configure Windows LAPS to rotate local administrator passwords and back them up securely to Active Directory.

#windows #laps #active-directory #security #hardening #powershell

🪟 Windows

Windows Defender Firewall with Advanced Security: Scoped Inbound Rules

Use the wf.msc MMC snap-in to create, scope, verify, and test a Windows Defender Firewall inbound rule for a specific TCP service and management subnet.

#windows #firewall #security #networking #mmc #sysadmin

🪟 Windows

Deploy Windows LAPS with Intune and Microsoft Entra ID

Pilot Entra-backed local administrator password management, verify backup and rotation, and restrict password access.

#windows #laps #intune #entra-id #security #senior-sysadmin

🪟 Windows

Troubleshoot DFS Namespaces and Site-Aware Referrals

Trace a client's DFS namespace referral, verify site placement and target health, and correct the confirmed configuration issue.

#windows #dfs #file-server #active-directory #troubleshooting #senior-sysadmin

🪟 Windows

Diagnose SMB Performance and Multichannel Bottlenecks

Measure SMB throughput alongside negotiated capabilities, selected network paths, storage latency, and CPU load without weakening signing or encryption.

#windows #smb #storage #multichannel #performance #senior-sysadmin

🪟 Windows

Enable and Verify Hotpatching on Windows Server 2025

Check eligibility, enable Azure Arc hotpatching on one server, and verify baseline versus hotpatch behavior.

#windows #windows-server-2025 #azure-arc #hotpatch #patch-management #senior-sysadmin

🪟 Windows

Storage Spaces & ReFS Resilient Volume Provisioning

Configure a dedicated-disk Storage Spaces pool, a two-way mirror, and ReFS integrity streams with explicit checks before formatting.

#windows #storage #refs #storage-spaces #powershell #sysadmin

🪟 Windows

Build and Test a Windows Server Storage Replica Recovery Plan

Validate a server-to-server Storage Replica topology, monitor synchronization, and rehearse a planned direction change.

#windows #storage-replica #disaster-recovery #storage #powershell #senior-sysadmin

🪟 Windows

Windows Server SMB Shares and Access Permissions

Create a restricted test SMB share, understand share and NTFS permissions together, and verify access from a client.

#windows #smb #file-server #permissions #powershell

🪟 Windows

Active Directory DC Locator and DNS Troubleshooting

Trace Active Directory domain controller discovery from Netlogon and site-aware DNS SRV records through UDP LDAP pings, firewall paths, and registration health.

#windows #active-directory #dns #domain-controller #troubleshooting #netlogon

🪟 Windows

Troubleshoot Active Directory Replication Health

Use Repadmin, Dcdiag, DNS checks, and Directory Service events to isolate Active Directory replication failures before changing the topology.

#windows #active-directory #replication #troubleshooting #domain-controller

🪟 Windows

Troubleshoot Microsoft Entra Cloud Sync: Agents, Object Provisioning, and Quarantine

Trace an AD user through Microsoft Entra Cloud Sync, diagnose agent and provisioning failures, review deletion safeguards, and validate recovery safely.

#windows #active-directory #microsoft-entra #cloud-sync #hybrid-identity #troubleshooting

🪟 Windows

Troubleshoot Failover Cluster Quorum and Witness Failures

Inspect dynamic votes, witness dependencies, and cluster logs; repair a confirmed witness fault and validate quorum without forcing a split cluster online.

#windows #failover-clustering #quorum #high-availability #troubleshooting #senior-sysadmin

🪟 Windows

Back Up and Roll Out Group Policy Changes Safely

Back up GPOs, create a scoped pilot, verify resultant policy, and promote changes only after client validation.

#windows #group-policy #gpo #active-directory #change-management

🪟 Windows

Troubleshoot Group Policy Processing on Windows

Use gpresult, Resultant Set of Policy, and Group Policy operational events to find why a computer or user policy did not apply.

#windows #group-policy #gpo #troubleshooting #sysadmin #powershell

🪟 Windows

Troubleshoot Kerberos and Service Principal Names

Trace a Windows service authentication failure by checking domain controller discovery, Kerberos tickets, and SPN ownership before changing AD.

#windows #active-directory #kerberos #spn #troubleshooting

🪟 Windows

Troubleshoot SYSVOL and DFSR Replication Across Domain Controllers

Separate AD replication from SYSVOL file replication, inspect DFSR state and backlog, and validate a targeted recovery without risking healthy domain controllers.

#windows #active-directory #sysvol #dfsr #group-policy #senior-sysadmin

🪟 Windows

Troubleshoot Windows DNS Client Resolution

Trace Windows name-resolution failures from adapter settings and DNS server reachability to record answers and cache state.

#windows #dns #troubleshooting #powershell #networking

🪟 Windows

Diagnose Windows Time Synchronization with w32tm

Inspect Windows Time configuration, source, peer reachability, and synchronization status on workgroup and domain systems.

#windows #troubleshooting #time-service #w32tm #active-directory

🪟 Windows

Back Up and Import a WSL2 Distribution Safely

Export a WSL distribution, import a separate copy to another drive, restore its default user, and verify it before removing the source.

#windows #wsl2 #backup #migration #virtualization

🪟 Windows

Troubleshoot WSL2 Networking with VPNs

Compare WSL2 NAT and mirrored networking, test DNS and localhost access, and narrow VPN or firewall connectivity problems safely.

#windows #wsl2 #networking #vpn #troubleshooting

Guide

Site-to-Site IPsec IKEv2 Route-Based VPN Tunnel Deployment

Route-based Virtual Tunnel Interface (VTI) IPsec IKEv2 site-to-site VPN deployment complying with NSA Suite B cryptographic standards.

#networking #vpn #ipsec #ikev2 #fortigate #cisco

🪟 Windows

WSL2 Performance Tuning & Memory Optimization

Tame vmmem RAM consumption, optimize CPU cores, and accelerate I/O with .wslconfig.

#wsl2 #windows #linux #performance #sysadmin

Guide

802.1X Port Security & Dynamic VLAN Assignment via RADIUS / Windows NPS

Enterprise IEEE 802.1X port security, dynamic VLAN assignment, and MAC Authentication Bypass (MAB) using Cisco switches and Windows Server NPS.

#networking #802.1x #radius #cisco #security

🪟 Windows

Windows Network Stack Reset as a Last Resort

Back up network settings, then reset Winsock and TCP/IP on Windows 10 or 11 when targeted troubleshooting has not resolved the issue.

#windows #networking #troubleshooting #dns #powershell

Guide

Enterprise IT Change Management, Maintenance Windows & Release Governance Standard

ITIL v4 and ISO 27001 compliant enterprise IT change management standard, RFC governance matrix, and maintenance window scheduling.

#operations #itil #change-management #governance #compliance

Guide

Incident Response Host Isolation, Live Memory Acquisition & Triage Forensics

Tactical host isolation, volatile memory acquisition (WinPmem/AVML), and triage artifact collection adhering to RFC 3227 order of volatility.

#incident-response #forensics #security #dfir #soc

Guide

Wazuh SIEM & XDR / EDR Enterprise Agent Deployment, Hardening & Active Response

Enterprise deployment, cryptographic enrollment, File Integrity Monitoring (FIM), and Active Response configuration for Wazuh SIEM/EDR.

#wazuh #siem #edr #fim #soc

Guide

Break-Glass Enterprise Ransomware Containment & Forest Isolation Procedure

Emergency enterprise runbook for immediate network air-gap, storage quench, and Active Directory Kerberos forest freeze during active ransomware attack.

#ransomware #incident-response #active-directory #disaster-recovery #soc

Guide

Windows Server 2025 Active Directory 32k Database Page Size Initialization

Initialize and migrate Active Directory Domain Services to Windows Server 2025 native 32k database page size architecture.

#windows-server #active-directory #ws2025 #sysadmin

Guide

Proxmox VE 8 Multi-Node Clustered Virtualization & Ceph Hyperconverged Storage Deployment

Greenfield multi-node Proxmox VE 8 cluster initialization, redundant Corosync ring setup, and Ceph hyperconverged storage pool deployment.

#proxmox #ceph #virtualization #storage #linux

Guide

TrueNAS Enterprise ZFS Storage Pool Provisioning, iSCSI Target Configuration & NFS Datastore Export

Enterprise TrueNAS SCALE ZFS storage pool provisioning, SLOG/L2ARC configuration, and resilient iSCSI / NFS datastore exports.

#truenas #zfs #storage #iscsi #nfs

Guide

Authoritative & Non-Authoritative SYSVOL Synchronization (DFSR)

Authoritative and non-authoritative DFSR SYSVOL synchronization, dirty shutdown remediation (Event 2213), and database rebuilds.

#active-directory #dfsr #sysvol #group-policy #troubleshooting

🛡️ Cybersecurity

Hunting Windows Persistence: Registry, Scheduled Tasks & WMI Subscriptions

Inventory common Windows persistence locations, correlate task, service, and WMI evidence, and preserve findings safely before approved response actions.

#cybersecurity #incident-response #windows #threat-hunting #persistence #powershell #autoruns

🛡️ Cybersecurity

Linux Incident Response: Collect a First-Response Snapshot

Capture a focused Linux triage snapshot of system state, users, processes, network sockets, and recent journal entries while preserving collected files with SHA-256 hashes.

#cybersecurity #linux #incident-response #logging #forensics #sha256

🛡️ Cybersecurity

Live Incident Response: Volatile Memory Acquisition and Triage

Plan and capture a live Windows or Linux memory image, record its SHA-256 hash, and begin offline triage while documenting acquisition limits.

#cybersecurity #incident-response #forensics #memory-analysis #winpmem #avml #lime

🛡️ Cybersecurity

Collect a Windows Endpoint First-Response Snapshot

Capture a focused Windows host, process, network, Defender, and event-log snapshot into a restricted case folder and verify collected files with SHA-256.

#cybersecurity #windows #incident-response #logging #forensics #sha256

🔍

No tutorials found for this tag

Try selecting a different topic from the tag cloud above.