Articles

~/articles/how-to-identify-the-exact-..

Firewall

How to Identify the Exact Windows Firewall Rule Blocking Your Traffic in Windows Server 2022

Diagnosing blockages in the Windows Filtering Platform (WFP) used to require complex analysis. With the arrival of Windows Server 2022 and the Filter Origin property, it is now possible to link Event ID 5152 to the relevant firewall rule in four simple steps. See the step-by-step guide.

R

RICHARD·23 July 2026

~/articles/seguridad-o-funcionalidad-..

Security

Security or Functionality: The Dilemma

Sometimes system administrators are asked to make security improvements in our environments, but is it always possible? We explore some practical cases.

A

ADRIÁN·23 July 2026

~/articles/60-useful-command-for-wind..

CLI

60 useful command for Windows System Administrators

We review the most important PowerShell and CMD commands for a system administrator. In this first content, we cover some of the most common and useful general commands for both Windows Server and Windows client versions. In upcoming contents, we'll review other useful commands for Active Directory, networking, PKI, and WinRM, among others.

A

~/articles/ldap-or-ldaps-hardening-wi..

Active Directory

LDAP or LDAPS? Hardening with encrypted LDAP in your Active Directory

We can require LDAP Signing since March 2020 with KB4520412. In this video we describe the differences among LDAP, LDAPS and LDAP Secure. After that, we check the different policies that can be used to harden LDAP: either with LDAP signing, LDAP sealing or SSL encryption with Windows Server 2025 and older.

A

~/articles/step-by-step-guide-kerbero..

Step by step guide: Kerberos Hardening (KB5073381)

In this last contet of the Kerberos hardening series, I explain step by step how to manage Kerberos hardening to stay alert, check service by service if there might be any impact, and gradually deploy changes from least to most risky to avoid the biggest possible impact.

A

~/articles/rc4defaultdisablementphase..

RC4DefaultDisablementPhase - How to Identify Accounts Affected by Kerberos Hardening

With a single command, we'll help you obtain a list of accounts that will be affected by the upcoming Kerberos hardening, with the arrival of the RC4DefaultDisablementPhase registry key. We'll also review the new events released by Microsoft in the January cumulative update.

A

~/articles/msds-supportedencryptionty..

msDS-SupportedEncryptionTypes + etypes: How to calculate Kerberos Encryption Types

We continue our content series dedicated to the upcoming Kerberos hardening update. In this one, we show you how to calculate the encryption types for the msDS-SupportedEncryptionTypes attribute and related registry keys, as well as how to differentiate them from etypes.

A

~/articles/cve-2026-20833-what-is-ker..

CVE-2026-20833 - What is Kerberos and how to face RC4 deprecation - Theory

We are starting a new series of contents focused on CVE-2026-20833 and Microsoft's hardening on which AES256 will become the default encryption for service tickets. In this first theoretical article, we explain what Kerberos is, its encryption types, and the change Microsoft is proposing.

A

ADRIÁN·9 July 2026

~/articles/dns-basic-troubleshooting

$ nslookup itriedareboot.com

Server:    192.168.1.1

Non-authoritative answer:

Name:   itriedareboot.com

Address: 172.67.152.192

DNS

DNS Basic Troubleshooting

A field-tested, step-by-step method for diagnosing DNS failures - response codes, dig one-liners, and three real incidents that weren't what they first looked like.

R

ROY·9 July 2026