Security tips
Think like an attacker.
Defend like a pro.
Practical, step-by-step posts for IT teams, admins and the security-curious. Real commands, real checklists, no fluff.
WindowsDigital ForensicsAccount SecurityScams & FraudNetworking
PowerShell for Defenders: 15 Commands Every Windows Admin Should Know
Attackers love PowerShell because it is already on every Windows machine. Here are the 15 commands defenders use to see what they see: accounts, connections, persistence and logs, plus a 2-minute audit script.
Continue reading → 7 min read
Windows Event Logs: 10 Event IDs That Reveal an Intruder
Windows writes down almost everything an attacker does. Most people never read it. These are the ten Security-log event IDs that matter, what each one means, and the PowerShell to pull them in seconds.
Continue reading → 6 min read
SIM Swap Attacks: How Criminals Steal Your Phone Number and How to Stop Them (2026)
A SIM swap moves your phone number to a criminal's phone. Every text-message code then goes to them: bank, email, crypto. Here is how it works, the warning signs, and the five settings that shut it down.
Continue reading → 5 min read
How to Check If Your Password Has Leaked Online (and What to Do in the Next 10 Minutes)
Billions of passwords are sitting in breach dumps right now. Here is how to check yours safely in under five minutes, including a PowerShell one-liner, and the exact steps to take if you find a match.
Continue reading → 5 min read
Nmap for Network Admins: Audit Your Own Network in 10 Commands
Nmap is the tool attackers use to map a network before they strike. Run it on your own network first and you will find the forgotten printer with an open admin page before they do. Ten commands, from a basic sweep to a full inventory.
Continue reading → 5 min read