March 2009 - Posts

Cheap real time monitoring for Conficker clients

I already did one post about using eventcomb/logparser to look for clients but found a better way to do it on a case last night which I wanted to share.  The first thing you need is to enable netlogon debug logging on all of your DC’s save the following Read More...

Posted 09 March 09 11:21 by kfalde | 0 Comments   
Filed under Incident Response

WSUS FCS Definitions

This is a follow up post to my previous FCS definitions post.  The first one focused on the mpam-fe files and what is contained that you can find on the security portal at www.microsoft.com/security/portal .  This one instead focuses on what Read More...

Posted 05 March 09 11:05 by kfalde | 4 Comments   
Filed under FCS Definitions, WSUS

Search

This Blog

• Home
• Email

Tags

• FCS
• FCS ADM
• FCS Database
• FCS Definitions
• FCS Policy
• Forefront Client Security
• Incident Response
• SCE
• Scheduled Scans
• System Center Essentials
• WSUS

Archives

• October 2009 (1)
• July 2009 (1)
• May 2009 (2)
• April 2009 (1)
• March 2009 (2)
• February 2009 (2)
• January 2009 (4)
• November 2008 (2)
• October 2008 (3)
• September 2008 (1)
• August 2008 (2)

Links

• FCS Support Blog
• Johan Blom's Blog FCS MVP
• FCS Product Team Blog
• Yaniv Feldman's Blog

Syndication

• RSS 2.0
• Atom 1.0