Blogs, Articles, and Posts

• NDES Security Hardening: Protecting and Monitoring the SCEP Registry Configuration
  This article focuses on securing and monitoring Network Device Enrollment Service (NDES) configuration, specifically the SCEP registry settings, to prevent attacks.
• Automate AVD Hybrid part 2
  This blog post demonstrates how to automate the deployment of an Azure Virtual Desktop (AVD) hybrid machine using Terraform and PowerShell. The author provides a step-by-step guide on how to create a VM, install Windows 11, and deploy the AVD agents, resulting in a fully functional AVD hybrid machine.
• How to Build Useful Reports from PowerShell — CSV, HTML and Email
  Learn how to create useful reports from PowerShell output, including choosing the right format (CSV, HTML, or JSON) and scheduling and emailing them properly.
• Powershell for Hackers, Part 9: Hacking with PsMapExec
  PsMapExec is a PowerShell script that allows hackers to dump hashes, execute remote commands, and extract Kerberos ticket keys. It can be used for various attacks such as Kerberoasting, timeroasting, and NTDS dumping.
• New Graph Permissions Pose Questions for Microsoft 365 Tenants
  Microsoft has introduced three new granular Graph permissions, allowing apps to create and modify user accounts without needing higher-level permissions. To stay up-to-date with new permissions, developers and administrators can use tools like the Permission Explorer and service principal permissions report script.
• Microsoft To Enforce WAM for Delegated Interactive Graph Sessions
  Microsoft is enforcing the use of Web Account Manager (WAM) for delegated interactive Graph sessions, starting from a future date. This change will make older SDK versions incompatible with browser-based authentication and may require administrators to re-evaluate their workflows.

Projects, Scripts, and Modules

• Windows Neofetch Alternatives
  Ed Tittel explores alternatives to Neofetch for displaying system information on Windows, including the use of Windows Console and custom scripting.

Books, Media, and Learning Resources

• Microsoft Graph Authentication Made Simple — Part 1: Delegated Access
  Authentication doesn’t have to be hard. In Part 1 of Microsoft Graph Authentication Made Simple, Andrew Pla and Morten Mynster focus on delegated authentication.

Community

• Unit Testing Your Cloud with Mike Soule
  Mike Soule discusses Maester, an open-source PowerShell-based test automation framework that applies unit testing concepts to Microsoft 365 security configuration.
• Security Features of PowerShell 7 with Mike O'Neill
  PowerShell 7.3+ introduces security features such as session configuration files and clean blocks to secure scripts, making it harder for attackers to exploit.

Fun

• XKCD v 1.5.3
  Commands related to the webcomic XKCD

Events

• PowerShell MythBusters w/ Matthew Dowst
  Join me and the PowerShell Ohio community for a fun evening of Mythbusting

Check out psweekly.dowst.dev for all past editions as well as a searchable archive.