Precision Computing

Most fragrance advice takes the form of a list: here are ten scents that get compliments.

In Threat-Driven Software Development, we focus heavily on the nuances of Operational Security and how to secure online services from modern threat actors.

I recently made the mistake of asking folks to thumbs up an email if they wanted me to get back to them on something.

If you’re a Blue Teamer trying to write secure services or secure an organization that does, Threat Driven Software Development is the book you’ve been looking for.

As a Canadian living in the US: whenever my family and I go back up to Canada, we always pack our luggage to bring back stuff you just can’t find easily around here.

Once every 80 years, T Coronae Borealis - also known as the “Blaze Star” - goes nova.

If you have a Hiboy S2 Pro scooter, you might have explored whether you can increase its max speed above 20 MPH / 30 KPH.

Pixel Doodle is a fun little Pixel Editor for Gameboy, emulators, and retro handhelds like the Anbernic RG35XX.

APL is one of the most curious programming languages you’ll ever run across.

I was recently interested in doing some data analysis of a Microsoft Teams transcript - specifically to understand if I was talking too much and not giving other folks the opportunity to speak.

Postman is an extremely popular application for developers testing remote web APIs.

Once in a while, I’ll stumble on a question online (or get an email) from a person wondering “Who the heck is leeholm16?”

If you’re looking to play with the cool Desktop Mode on your shiny new Steam Deck, you might have already seen that it is Arch Linux under the hood.

Watchy is an exciting Open Source E-Paper Watch, based on Arduino and the ESP32 micro controller.

20 years ago, I decided to put up a “Web Log” - or “blog” for short :) I didn’t know what would become of it, but I’m happy that I started.

I am extremely excited to announce that the 4th edition of the PowerShell Cookbook is now available!

It’s alive!

A class of security research out there that is a never-ending source of entertainment is “novel” communication methods.

When optimizing website performance, the performance tools that Google has built are magical.

When hosting a static website or blog, you ultimately have to tackle the question: “What about the comments?”.

When working with raw binary data (especially in security forensics), it is common to need to write parsers for this binary data.

There are many times in security investigations where we want to quickly filter out “Known Good” and only focus on what remains.

If you’re running into the following error trying to get a device to sync with Intune: The sync could not be initiated (0x80190190) You probably have checked the Windows Event Log and also seen this error: MDM Session: OMA-DM message failed to be sent.

It’s March 4, 2020.

The mind is an incredibly complex organ.

Summary When email users of several email services send mail using mechanisms other than that service’s web interface (i.e.: their phone or laptop’s email program), services commonly include the user’s IP address in message headers.

A while back, we talked about a common challenge in the security industry – searching for some known bad content (i.e.: “Invoke-WebRequest”) in content that you know has been encoded in base64.

If you’re looking to get one of the Star Trek TOS patches (Science, Engineering, or Command) embroidered on something, they often charge a lot of money to convert the logo to the format that embroidery machines understand.

If you’re looking to get the Dragon Ball Z logo embroidered on something, they often charge a lot of money to convert the logo to the format that embroidery machines understand.

If you’re looking to get the PowerShell logo embroidered on something, they often charge a lot of money to convert the logo to the format that embroidery machines understand.

Background In the web application world – especially single-page applications – smooth and fluid interaction is key.

In 2003, Crosby and Wallach wrote an excellent paper demonstrating a new form of Denial of Service vulnerability against applications by abusing algorithmic complexity in the data structures that they depend on.

After posting Extracting Activity History from PowerShell Process Dumps, I got an interesting follow up question: “Is it possible to extract the content of scripts (from disk) that were executed, even if those files were not captured?”

Imagine that you’re investigating the compromise of a system.

After it’s done indexing your data, Scour is blazingly fast at local content searches – far faster than Select-String, grep, or anything else that rips through files when you search.

If you have a large collection of documents (source code or text files), searching them with PowerShell or your favourite code editor can feel like it takes forever.

So you’re interested in submitting a talk for a security conference?

Mandiant recently posted some research about an attack leveraging the NetSupport Remote Access tool.

When analyzing text, a common goal is to identify the parts of speech within that text – what parts are nouns?

K-Means clustering is a popular technique to find clusters of data based only on the data itself.

When you first get your ham radio license, the FCC gives you a random call sign based on your location and roughly your date of application.

You might have run into situations in the past where you’re looking for some specific text or binary sequence, but that content is encoded with Base-64.

Overview We’d like to introduce a new Zero-Tay technique for injecting code and maintaining persistency against common advanced attacker toolkits dubbed TripleAgent.

If you host your website in Azure, you might be interested in adding SSL support via Let’s Encrypt.

We sometimes get the question: Why is the SeDebugPrivilege enabled by default in PowerShell?

With the advent of PowerShell v5’s awesome new security features, old versions of PowerShell have all of the sudden become much more attractive for attackers and Red Teams.

If you’re interested in knowing when specific Visual Studio compiler options have been introduced, here you go. 2003 to 2005 Option Purpose ------ ------- /analyze Enable code analysis.

Time Journal helps you analyze where you spend your time by infrequently asking the simple question: “What are you doing?”

Visual Studio Code has a built-in feature to check for and install updates, but I’ve always been frustrated by having to acknowledge the update, allow the browser to restart, watch an installer, and then get back to what I was about to do anyways (which is

In 1799, Napoleon’s explorers discovered a 4-foot tall, 700 lb stone slab in Rosetta (Rashid), Egypt.