Waveinjector.com

Commande Log l’essentiel : tail -n 20 /var/log/caddy/coraza-audit.log | jq '.transaction | {date: .timestamp, ip: .client_ip, uri: .request.uri, blocked: .is_interrupted, ruleset: .producer.rulesets}' blocages : grep '"is_interrupted":true' /var/log/caddy/coraza-audit.log | jq '.transaction | {date:...

show firewall vip
show system interface wan1
show firewall local-in-policy

diagnose debug reset
diagnose debug flow filter addr xxx.xxx.xxx.xxx
diagnose debug enable
diagnose debug flow trace start 100

diagnose sniffer packet any "host xxx.xxx.xxx.xxx" 4

en temps réel

diagnose sys session filter src xxx.xxx.xxx.xxx
diagnose sys session list

REG ADD HKLM\SYSTEM\CurrentControlSet\Services\PolicyAgent /v AssumeUDPEncapsulationContextOnSendRule /t REG_DWORD /d 0x2 /f

REG ADD HKLM\SYSTEM\CurrentControlSet\Services\RasMan\Parameters /v ProhibitIpSec /t REG_DWORD /d 0x0 /f

Set-CASMailbox USER -ActiveSyncDebugLogging $true

Get-MobileDeviceStatistics -Mailbox USER-GetMailboxLog -NotificationEmailAddresses "user@domaine.com"

Start local group policy editor, start – run – gpedit.msc Go to Local Computer Policy –> Computer Configuration –> Administrative Templates –> System –> Credentials Delegation Edit “Allow Delegating Saved Credentials with NTLM-only Server Authentication” Enable the policy, click Show and enter the v...

Get-ExchangeCertificat Select Thumprint $txtrequest = Get-ExchangeCertificate -Thumbprint N° du Thumprint | New-ExchangeCertificate -GenerateRequest [System.IO.File]::WriteAllBytes('\\192.168.xxx.xxx\xxx\ContosoCertRenewal.req', [System.Text.Encoding]::Unicode.GetBytes($txtrequest)) puis Import-Exch...

Setup.exe /IAcceptExchangeServerLicenseTerms_DiagnosticDataON /Mode:Upgrade