Cybersecurity
Defensive resources for phishing, ransomware, compromised accounts, MFA, hardening,19th, incidents and protection of backups
Cybersecurity test
Evaluate your cybersecurity level with the BOAI test and identify priority vigilance points in your computer environment
ResourceCybersecurity maturity assessment
Understand the cybersecurity maturity assessment, review its six domains and use the interactive test to build a prioritized action plan.
ResourceCyber Incident Center
Cyber Incident Center: qualification, containment, collection, account compromise,1920, ransomware, phishing and first actions
ResourceHTTP & web security analysis
HTTP & web security analysis — practical IT resource from IT Toolbox.
ResourceFree IT tools
Use free browser-based IT tools for networking, DNS, Windows, email, security, diagnostics, PDF workflows and day-to-day administration.
ResourceAzure / Entra / Intune Center
Azure, Entra ID and Intune diagnostics for sign-ins, Conditional Access, device compliance, Graph, licensing, networking and RBAC.
ResourceWordPress Center
WordPress diagnostic: critical error, 500, database, permalinks, SMTP, cron, plugins, Scriptor,194, SSL and performance
Knowledge hubHome
Free tools, procedures, diagnostics, scripts, dictionary and practical resources for IT technicians, system administrators and SMEs
IT dictionaryWiper Malware
Wiper malware deliberately destroys or corrupts information to disrupt systems and prevent recovery.
IT dictionaryFileless Malware
Fileless malware uses legitimate system tools or memory-resident execution to reduce reliance on executable files on disk.
IT dictionaryCyber Kill Chain
a cybersecurity model that breaks an attack into successive stages from reconnaissance through actions on objectives
IT dictionaryRootkit
A rootkit hides malicious activity or maintains privileged access by modifying operating system components.
IT dictionaryTriple Extortion
Triple extortion adds pressure on third parties, such as customers or partners, to ransomware encryption and data-leak threats.
IT dictionaryExposure Management
Exposure management continuously discovers, prioritizes, and reduces weaknesses across systems and external services.
ResourceHow to decode a JWT locally without exposing the token
Read a JWT header and payload for troubleshooting while remembering that decoding never validates the signature.
ResourceHow to diagnose an HTTP 504 error
A 504 must be broken down between the proxy network and backend processing time
ResourceHow to generate a gpresult report for Group Policy
Generate and read gpresult RSoP reports for applied Group Policy, user and computer scope, inheritance and filtering.
ResourceHow to check the of expiration of an HTTPS certificate
Check the validity period of the TLS certificate submitted by a site
ResourceHow to check if Windows firewall is enabled
Control the Windows firewall status on Domain, Private and Public profiles
ResourceMFA vs 2FA: what difference?
2FA means two-factor authentication. MFA means multifactor authentication and can use two or more factors
TroubleshootingMicrosoft 365 MFA buckle
The user is constantly re-demanded to authenticate or validate MFA
ResourceSMTP 554.57.1 — Rejected message for policy or security
The server has finally refused the message for a security or policy rule
ResourceEvent ID 4728 — Adding to a global security group
One member was added to a global security group
ResourceEvent ID 4732 — Adding to a local security group
One member was added to a local security group
Resource0x80072F8F — TLS security or date error
A secure connection fails, often due to the clock, certificate or TLS
ProcedureSecure administrator access
Set up nominal accounts, MFA, separation of usage and procedures, emergency
ProcedureRespond to fraudulent connection attempts on a VPN
Block sources, check for success and strengthen the, access to the RSS file without limiting yourself to IP addresses
ProcedureRespond to a suspected compromised Microsoft 365 account
Contain a suspected Microsoft 365 account compromise, review sign-ins and persistence, and validate recovery before re-enabling access.
ProcedureDiagnose a Group Policy issue with GPResult
Diagnose Group Policy with the correct user/computer scope, GPResult reports, security and WMI filtering, and processing evidence before changing the GPO.
ProcedureImplement a 3-2-1 backup strategy
Design multiple copies, on separate media, with at least one external or isolated copy
ProcedureHandle a VMware VM with an inconsistent snapshot chain
Secure the VM and analyze descriptors when a parent of the company is missing or disabled
ResourceMicrosoft 365 — memo administration
Microsoft 365 reference for Entra sign-ins, Graph, Exchange Online, message tracing, Teams, Intune and device checks.
ResourceHTTP — essential codes and headers
HTTP methods, response codes, caching, redirects, TLS and headers used when diagnosing websites and APIs.
ResourcePowerShell — Essential commands
PowerShell commands for Windows administration, services, events, networking, files and remote sessions.
ResourceSMTP, SPF, DKIM & DMARC — Cheat sheet
SMTP delivery, SPF, DKIM, DMARC alignment, DNS records and email authentication troubleshooting.
ResourceLinux — Essential commands
Linux commands for services, logs, processes, storage, networking, DNS, permissions and system diagnostics.
ResourceRobocopy — memo sheet
Robocopy options for file migration, permissions, restartable copies, logging, dry runs and return-code interpretation.
Knowledge hubFortiGate
Tools, diagnostics, commands and resources to administer and troubleshoot theFortiGate and FortiOS
Knowledge hubMicrosoft 365
Microsoft 365 administration and troubleshooting: Entra ID, Exchange Online, Intune, One (2005), SharePoint, MFA and courier
Knowledge hubBackup & Disaster Recovery
Backup, restoration and resumption of activity: Veeam, Acronis, VSS, RPO, RTO, immutability, replication and restoration tests.
Knowledge hubAzure / Entra / Intune
Administration and troubleshooting Azure, Entra ID and Intune: MFA, Conditional Access, devices, synchronization, compliance, Autopilot, RBAC and Azure network