space saving hard disk dump using dd
Fill you enpty space witn zeros. dd if=/dev/zero of=/zero.txt rm -f /zero.txt Then dd your device: dd if=/dev/sdX of=mydisk.img conv=spars bs=512
Month: November 2020
Resizing an dumped image of a disk
Map mydisk.img as /dev/loop0 and use gparted to resize: udisksctl loop-setup -f mydisk.img gparted /dev/loop0 udisksctl loop-delete –block-device /dev/loop0 udisksctl is part of the udisks2 package.
SELKS | Suricata | update the rulesets
You can use the web interface to do that, but i had some issues soing so. It’s better (and much faster) to run this: /bin/su -s /bin/bash -c ‘cd /usr/share/python/scirius/ && . bin/activate && python bin/manage.py updatesuricata && deactivate’ www-data You can check your success by inspecting /etc/suricata/rules/scrirus.rules To check the plausibility/validity of your rules […]
Windows 10 upgrade | RSAT GPMC + DSA disappeared | 0x8024402c
You feature upgraded your windows 10 to the latest version and your RSAT gpmc and dsa disappeared? Microsoft says thats normal (??!!!!!!) You have to reinstall it. (! WT#???) Type ‘features’ – select ‘optional features’ aso. You got 0x8024402c? Maybe your machine cant reach microsoft.com
Windows 10 | Unpin/Remove/Delete Programs from Taskbar via GPO/powershell
At first approve applications name: ((New-Object -Com Shell.Application).NameSpace(‘shell:::{4234d49b-0245-4df3-b780-3893943456e1}’).Items()) Then get your languages localized Unpin-String, simply rightclick on that item in yout taskbar and get the unpin string. For English it’s ‘Unpin from taskbar’, for German it’s ‘Von Taskleiste lösen’ ARRRGGGG! # THE EDGY EDGE $appname = “Microsoft Edge” ((New-Object -Com Shell.Application).NameSpace(‘shell:::{4234d49b-0245-4df3-b780-3893943456e1}’).Items() | ?{$_.Name -eq $appname}).Verbs() […]
bytes and bones 