Kategori: Remediation Guides
Audit SUID Executables: Find and Remove Unneeded SUID and SGID Bits on Linux
“Audit SUID executables” is a CIS benchmark item asking you to review every SUID (set-user-ID) file, because each runs with its owner’s…
Unconstrained Delegation: How to Find and Remove It in Active Directory
Unconstrained delegation is an Active Directory account setting (the TRUSTED_FOR_DELEGATION flag) that lets a server receive and reuse the Kerberos ticket-granting ticket…
How to Hide the Server Version Header (HTTP Header Information Disclosure)
HTTP Header Information Disclosure means your web server announces its product and version in response headers such as Server, X-Powered-By or X-AspNet-Version.…
How to Remove the PASSWD_NOTREQD Flag in Active Directory (Nessus 150489)
The PASSWD_NOTREQD finding (Nessus “AD Starter Scan – Blank passwords”, PingCastle S-PwdNotRequired) means Active Directory accounts carry userAccountControl flag 32, which lets…
Microsoft Silverlight SEoL: How to Remove Silverlight (Nessus 58134)
Microsoft Silverlight SEoL is the Nessus finding (plugin 58134) raised when Silverlight is still installed on a host. Microsoft ended Silverlight support…
How to Remove GPP cpassword Passwords from SYSVOL (MS14-025)
A GPP cpassword is a password that Group Policy Preferences saved in an XML file on SYSVOL, encrypted with an AES key…
How to Remove a docker.sock Mount From Containers (Trivy KSV-0006, docker-bench 5.32)
A docker.sock mounted in a container means the host’s Docker API socket, /var/run/docker.sock, is shared into a pod or container, which gives…
DisableAntiSpyware: How to Fix “Turn off Microsoft Defender AntiVirus” CIS Findings
Ensure ‘Turn off Microsoft Defender AntiVirus’ is set to ‘Disabled’ is a CIS benchmark check that fails when the DisableAntiSpyware policy value…
How to Remove DCSync Permissions from Non-Admin Accounts
DCSync permissions are two extended rights on the Active Directory domain root, Replicating Directory Changes and Replicating Directory Changes All. An account…
How to Remove Dangerous SIDHistory Values in Active Directory
Accounts With a Dangerous SID History Attribute is an Active Directory finding: a user, group or computer holds a privileged or same-domain…