Latest News

Неочевидный Privesc через WEC и WinRM: обычный сертификат = административный shell

Можно ли получить административный доступ к Windows Event Collector, используя обычный сертификат доменного пользователя, без эксплуатации ESC-уязви…

Windows Robocopy Command: Mirror a Folder Without Deleting the Wrong Files

robocopy /MIR is the fastest way to keep two folders identical on Windows. It is also the fastest way to wipe a backup drive, because a mirror does…

What Is ifrmewrk.exe? Intel's Wireless Process, Explained

You found ifrmewrk.exe in Task Manager or your startup list and want to know whether it's safe. Short answer: yes — it's Intel's, it's legitimate, a…

Его мы делаем все вместе

Привет, Хабр! С первой статьи про Гига Писаря прошло чуть больше месяца, пора подвести итоги. За это время мне пришла масса сообщений: в комментария…

The Netherlands is building its own Linux OS to break free from Microsoft

From Tutorial Consumer to Operator: The Skills Gap CMD Master Targets

Watching CLI tutorials feels like progress. You nod at PATH diagrams. You pause a video to copy a command. You finish a playlist titled “Windows Com…

[Перевод] Разбор отличий между клавиатурами под Windows и Mac

За годы работы с Mac и Windows я обнаружил много неожиданных и странных различий в их логике клавиатурного ввода. Особенно это касается веб-приложен…

How Curiosity About the Snapdragon NPU Turned Into HK NPU STUDIO

Local AI for Snapdragon® PCs Your Hardware • Your AI • Your Control Developing software is rarely a straight line. Sometimes it feels like progress,…

AQEMU - a point-and-click QEMU front-end for Windows and Linux

QEMU can emulate almost anything, but getting a guest running usually means a wall of command-line flags. AQEMU is my attempt to fix that: an open-s…

Wi-Fi or VPN sign-in failing after a Windows update? What to check

When a user says their Wi-Fi or VPN stopped working after an update, there are quite a few things to check. Drivers, connection profiles, credential…

Where did WIN32_LEAN_AND_MEAN come from? (2009)

Intune Assignment Filter Not Working: A Read-First Filter Evaluation, Include/Exclude, and Property Triage

Helpdesk: "We put an assignment filter on the Wi-Fi profile so only corporate Surface devices get it. Half the Surfaces still don't have Wi-Fi, and…

Entra Seamless SSO Not Working: A Read-First Intranet Zone, Kerberos Ticket, and AZUREADSSOACC Triage

Helpdesk: "Outlook on the web used to just open on my desk PC. Now it asks for my password every morning." A second ticket from the same floor: the…

Intune Microsoft 365 Apps Not Installing: A Read-First MSI, CDN, and Office CSP Error Triage

Helpdesk: a Required Microsoft 365 Apps assignment sits on Install pending or Waiting for install status for hours. Another device shows Failed . Ou…

Почему раньше Windows переустанавливали каждые полгода, а теперь можно годами жить на одной

Когда-то Windows была для компьютеров чем-то вроде расходника. Проходило от нескольких месяцев до года, система забивалась мусором, начинала безжало…

Intune Configuration Profile Error 65000 or Conflict: A Read-First Per-Setting Status and MDM Event Log Triage

A Windows device shows your Intune configuration profile as Error , and the per-setting detail says 65000 or 0x87D1FDE8 (Remediation failed) . Anoth…

Send Files to Linux With a Drag-and-Drop Widget

KiwiDrop lets you drop a file onto a floating desktop widget and send it to a paired device on the local network. It supports Windows, Linux, and An…

Nextcloud Slow? Mount It as a Local Drive Instead

If you've installed Nextcloud and the desktop sync client feels like 2008 software, you're not alone. The sync-everything model breaks down fast: 50…

Building a free Windows AI assistant: one window for cloud and local models

We're a small team in Granada (Spain) and we've been building Cerewro, a Windows 10/11 desktop app that lets you talk to several AI models from a si…

Intune Remediation Script Not Running: A Read-First Exit Code, Context, and HealthScripts.log Triage

You wrote a detection script and a remediation script, uploaded them as a script package under Devices > Manage devices > Scripts and remediat…

Works on desktop, fails on phones: the post-quantum TLS bug hiding in your network card

Modern browsers now send a larger TLS hello. On some Windows servers, a receive-offload bug in the network card silently breaks about half of those…

Batch .bat in 2026: Legacy Glue, Not a Personality

I still write .bat files in 2026. I also refuse to build an identity around them. That distinction— legacy glue vs personality —is the retrospective…

PowerShell Out-File vs Set-Content: Encoding Is the Real Difference

Set-Content and Out-File both put text into a file. On a quiet English UTF-8 machine they look interchangeable. On a Czech log, a CSV opened in Exce…

"Your Organization Has Disabled This Device" (AADSTS135011): A Read-First Entra Device Triage

A user opens Outlook or Word and gets "Something went wrong. Your organization has disabled this device. To fix this, contact your system administra…

BitLocker Recovery Key Missing from Intune or Entra: A Read-First Escrow Triage

Helpdesk has a locked laptop and a recovery prompt. You open Intune admin center > Devices > [device] > Recovery keys (or Entra admin cente…

I didn't replace Razer Synapse. I replaced the 600 MB it leaves running.

I have a Razer Basilisk V3 35K. Its keys and DPI stages live in the mouse's on-board memory, so they keep working without any software. The lighting…

ssh-agent on Windows: start the service, add your keys, fix the errors

You put a passphrase on your SSH key, and now Windows asks for it on every git push and every ssh . The fix is the SSH agent — unlock the key once,…

374 tests went in, 352 came out, and the build was green

The last run had 374 tests. This one had 352. No failures, so the build was green. Twenty-two checks had disappeared. The test host died partway thr…

Windows IR: системный подход. Часть 3 — задачи, автозапуск, учётные записи, журналы

Это третья часть материала, посвящённого реагированию на инциденты ИБ в Windows. Вторая часть была посвящена изоляции хоста и разбору процессов и сл…

"Connected, But No Internet": Check for a 169.254 Address First

A user calls the help desk: "My Wi-Fi says connected, but nothing loads." Before restarting the router or reinstalling network drivers, spend 30 sec…