https://mdleom.com/_routes.json 2026-03-15 https://mdleom.com/threat-hunting/rdp-policy-change 2026-03-15 https://mdleom.com/blog/2026/01/07/japan-travel-2025-p1/ 2026-01-07 https://mdleom.com/blog/2025/12/13/framework-laptop/ 2025-12-20 https://mdleom.com/threat-hunting/veeam-backup-delete 2025-12-02 https://mdleom.com/threat-hunting/uac-change 2025-11-30 https://mdleom.com/threat-hunting/secondary-logon-service 2025-10-05 https://mdleom.com/threat-hunting/suspicious-command-public-folder 2025-09-21 https://mdleom.com/threat-hunting/uac-policy-change 2025-08-24 https://mdleom.com/threat-hunting/ad-integrated-dns-zone-export 2025-08-09 https://mdleom.com/threat-hunting/root-certificate-installation 2025-08-09 https://mdleom.com/threat-hunting/veeam-credential-extraction 2025-08-06 https://mdleom.com/threat-hunting/windows-recovery-environment-disabled 2025-08-03 https://mdleom.com/threat-hunting/3losh-ioc 2025-07-27 https://mdleom.com/threat-hunting/account-discovery-using-dir-whoami-and-net 2025-07-27 https://mdleom.com/threat-hunting/account-lockout-in-administrator-groups 2025-07-27 https://mdleom.com/threat-hunting/ad-account-deletion 2025-07-27 https://mdleom.com/threat-hunting/ad-database-dump 2025-08-09 https://mdleom.com/threat-hunting/ad-database-read 2025-07-27 https://mdleom.com/threat-hunting/ad-password-policy-change 2025-07-27 https://mdleom.com/threat-hunting/ad-password-policy-modified 2025-07-27 https://mdleom.com/threat-hunting/anonymous-authentication-attempt-from-foreign-ip 2025-07-27 https://mdleom.com/threat-hunting/applocker-audit 2025-07-27 https://mdleom.com/threat-hunting/authentication-against-a-new-domain-controller 2025-07-27 https://mdleom.com/threat-hunting/authentication-from-foreign-ip 2025-07-27 https://mdleom.com/threat-hunting/aws-assumeroot-api-operation 2025-07-27 https://mdleom.com/threat-hunting/badrabbit-ioc 2025-07-27 https://mdleom.com/threat-hunting/basic-brute-force-detection 2025-07-27 https://mdleom.com/threat-hunting/basic-scanning 2025-07-27 https://mdleom.com/threat-hunting/chrome-spawned-from-user-profile 2025-07-27 https://mdleom.com/threat-hunting/clear-text-password-search 2025-07-27 https://mdleom.com/threat-hunting/clickfix-detection 2025-07-27 https://mdleom.com/threat-hunting/cloudflared-tailscaled-tunnel-detection 2025-07-27 https://mdleom.com/threat-hunting/cmd-exe-powershell-exe-auto-start 2025-07-27 https://mdleom.com/threat-hunting/cobalt-strike-ioc 2025-07-27 https://mdleom.com/threat-hunting/credential-manager-sam-dump 2025-07-27 https://mdleom.com/threat-hunting/cve-2023-23397-outlook-smb 2025-07-27 https://mdleom.com/threat-hunting/dcsync-detection 2025-07-27 https://mdleom.com/threat-hunting/defender-incident 2025-07-27 https://mdleom.com/threat-hunting/defender-traffic-blocked-by-windows-firewall 2025-07-27 https://mdleom.com/threat-hunting/deprioritise-windows-defender 2025-07-27 https://mdleom.com/threat-hunting/disable-microsoft-defender-powershell-script 2025-07-27 https://mdleom.com/threat-hunting/disable-microsoft-defender-registry 2025-07-27 https://mdleom.com/threat-hunting/disable-microsoft-defender 2025-07-27 https://mdleom.com/threat-hunting/dllfake-ioc 2025-07-27 https://mdleom.com/threat-hunting/domain-admin-report 2025-07-27 https://mdleom.com/threat-hunting/domain-administrator-enabled-disabled 2025-07-27 https://mdleom.com/threat-hunting/evilproxy-ioc 2025-07-27 https://mdleom.com/threat-hunting/excessive-account-lockout 2025-07-27 https://mdleom.com/threat-hunting/excessive-aws-waf-blocked-events 2025-07-27 https://mdleom.com/threat-hunting/excessive-blocked-websites 2025-07-27 https://mdleom.com/threat-hunting/excessive-rdp 2025-07-27 https://mdleom.com/threat-hunting/file-hiding-using-attrib-exe-observed 2025-07-27 https://mdleom.com/threat-hunting/filefix-detection 2025-07-27 https://mdleom.com/threat-hunting/gootloader-ioc 2025-07-27 https://mdleom.com/threat-hunting/headless-browser 2025-07-27 https://mdleom.com/threat-hunting/ie4uinit-exe-msxsl-exe-abuse 2025-07-27 https://mdleom.com/threat-hunting/impacket-detection 2025-07-27 https://mdleom.com/threat-hunting/innodownloadplugin-user-agent-observed 2025-07-27 https://mdleom.com/threat-hunting/internal-proxies-creation 2025-07-27 https://mdleom.com/threat-hunting/kerberos-certificate-spoofing 2025-07-27 https://mdleom.com/threat-hunting/kerberos-pre-authentication-flag-disabled-in-useraccountcontrol 2025-07-27 https://mdleom.com/threat-hunting/kerberos-service-ticket-request-with-weak-encryption 2025-07-27 https://mdleom.com/threat-hunting/kerberos-tgt-request-with-weak-encryption 2025-07-27 https://mdleom.com/threat-hunting/kerberos-tgt-request-without-password 2025-07-27 https://mdleom.com/threat-hunting/kernel-driver-service-was-installed 2025-07-27 https://mdleom.com/threat-hunting/large-powershell-module 2025-07-27 https://mdleom.com/threat-hunting/ldap-ad-computers 2025-07-27 https://mdleom.com/threat-hunting/ldap-ad-users 2025-07-27 https://mdleom.com/threat-hunting/lockbit-3-0 2025-07-27 https://mdleom.com/threat-hunting/logon-from-external-network 2025-07-27 https://mdleom.com/threat-hunting/logon-with-newcredentials-type 2025-07-27 https://mdleom.com/threat-hunting/lolbin-execution 2026-02-07 https://mdleom.com/threat-hunting/lsass-exe-driver-loading 2025-07-27 https://mdleom.com/threat-hunting/lsass-exe-read 2025-07-27 https://mdleom.com/threat-hunting/malicious-host-threat-intelligence 2025-07-27 https://mdleom.com/threat-hunting/microsoft-public-symbol-download 2025-07-27 https://mdleom.com/threat-hunting/monthly-inactive-accounts-report 2025-07-27 https://mdleom.com/threat-hunting/multiple-account-passwords-changed-by-an-administrator 2025-07-27 https://mdleom.com/threat-hunting/named-pipe-usage 2025-07-27 https://mdleom.com/threat-hunting/new-interactive-logon-from-a-service-account 2025-07-27 https://mdleom.com/threat-hunting/new-network-share-detected 2025-07-27 https://mdleom.com/threat-hunting/nodejs-spawning-cmd-exe 2025-07-27 https://mdleom.com/threat-hunting/non-chrome-process-accessing-chrome-registry 2025-07-27 https://mdleom.com/threat-hunting/onenote-ioc 2025-07-27 https://mdleom.com/threat-hunting/open-port-53 2025-07-27 https://mdleom.com/threat-hunting/plaintext-credential 2025-07-27 https://mdleom.com/threat-hunting/possible-sharefinder-netscan-sharphound-cobaltstrike-usage 2025-07-27 https://mdleom.com/threat-hunting/powershell-web-downloads-operational 2025-07-27 https://mdleom.com/threat-hunting/powershell-web-downloads 2025-07-27 https://mdleom.com/threat-hunting/privileged-group-monitoring 2025-07-27 https://mdleom.com/threat-hunting/privileged-service-with-sedebugprivilege-was-called 2025-07-27 https://mdleom.com/threat-hunting/protected-group-monitoring 2025-07-27 https://mdleom.com/threat-hunting/qbot-ioc 2025-07-27 https://mdleom.com/threat-hunting/rclone-restic-exfiltration 2025-07-27 https://mdleom.com/threat-hunting/reboot-to-safe-mode 2025-07-27 https://mdleom.com/threat-hunting/regasm-exe-execution 2025-07-27 https://mdleom.com/threat-hunting/regsvcs-exe-process-injection 2025-07-27 https://mdleom.com/threat-hunting/remote-desktop-tool-auto-start 2025-12-16 https://mdleom.com/threat-hunting/remote-desktop-tool-installation-execution 2025-12-16 https://mdleom.com/threat-hunting/remote-desktop-tool-scheduled-task 2025-12-16 https://mdleom.com/threat-hunting/restartmanager-abuse 2025-07-27 https://mdleom.com/threat-hunting/restricted-admin-mode-detection 2025-08-24 https://mdleom.com/threat-hunting/rundll32-dumping-lsass-memory 2025-07-27 https://mdleom.com/threat-hunting/rundll32-scheduled-task 2025-07-27 https://mdleom.com/threat-hunting/safedllsearchmode-is-modified 2025-07-27 https://mdleom.com/threat-hunting/sidhistory-compromise 2025-07-27 https://mdleom.com/threat-hunting/splunk-events-deletion 2025-07-27 https://mdleom.com/threat-hunting/sql-server-spawning-cmd-exe 2025-07-27 https://mdleom.com/threat-hunting/suspicious-logon-logoff-events 2025-07-27 https://mdleom.com/threat-hunting/suspicious-netscaler-cli 2025-07-27 https://mdleom.com/threat-hunting/suspicious-network-settings 2025-07-27 https://mdleom.com/threat-hunting/suspicious-wmi 2025-07-27 https://mdleom.com/threat-hunting/unauthorised-computer-account-creation 2025-07-27 https://mdleom.com/threat-hunting/unauthorised-reverse-proxy-tunnel 2025-07-27 https://mdleom.com/threat-hunting/unusual-printui-exe-path 2025-07-27 https://mdleom.com/threat-hunting/unusual-scheduled-task 2025-08-03 https://mdleom.com/threat-hunting/unusual-user-agent 2025-12-21 https://mdleom.com/threat-hunting/upnp-enablement 2025-07-27 https://mdleom.com/threat-hunting/user-login-with-local-credentials 2025-07-27 https://mdleom.com/threat-hunting/volt-typhoon-ioc 2025-07-27 https://mdleom.com/threat-hunting/volume-shadow-copy 2025-07-27 https://mdleom.com/threat-hunting/volume-shadow-delete 2025-07-27 https://mdleom.com/threat-hunting/vpn-web-traffic-from-foreign-ip 2025-07-27 https://mdleom.com/threat-hunting/vscode-tunnel 2025-07-27 https://mdleom.com/threat-hunting/windows-event-log-clearing-events 2025-07-27 https://mdleom.com/threat-hunting/windows-firewall-modification 2025-07-27 https://mdleom.com/threat-hunting/windows-jscript-execution 2025-07-27 https://mdleom.com/threat-hunting/windows-sandbox-execution 2025-07-27 https://mdleom.com/threat-hunting/windows-script-executed-from-zip 2025-07-27 https://mdleom.com/threat-hunting/windows-system-event-log-clearing-events 2025-07-27 https://mdleom.com/threat-hunting/winrar-spawning-shell-application 2025-07-27 https://mdleom.com/blog/2025/04/06/tailscale-alpine/ 2025-04-06 https://mdleom.com/blog/2025/02/02/atlassian-jira-sso/ 2025-02-03 https://mdleom.com/threat-hunting/ 2025-12-02 https://mdleom.com/blog/2024/12/12/splunk-app-update/ 2025-01-05 https://mdleom.com/blog/2024/10/12/nts-openwrt/ 2025-05-08 https://mdleom.com/blog/2024/07/15/dnf-automatic-centos-stream/ 2025-04-08 https://mdleom.com/blog/2024/02/24/splunk-app-acl/ 2024-02-24 https://mdleom.com/blog/2023/10/01/splunk-ldapsearch-useraccountcontrol/ 2023-10-01 https://mdleom.com/blog/2023/08/27/saml-scim/ 2024-09-28 https://mdleom.com/blog/2023/07/17/ctrl-h-backspace/ 2023-07-17 https://mdleom.com/blog/2023/06/17/json-splunk-uf/ 2024-01-05 https://mdleom.com/blog/2023/04/16/splunk-lookup-malware-filter/ 2023-04-16 https://mdleom.com/blog/2023/02/13/ssh-certificate-cloudflare-tunnel/ 2023-02-21 https://mdleom.com/blog/2022/11/27/grub-luks2-argon2/ 2022-11-27 https://mdleom.com/blog/2022/08/09/remove-gitlab-artifacts/ 2022-08-09 https://mdleom.com/blog/2021/12/27/caddy-plugins-nixos/ 2023-02-26 https://mdleom.com/blog/2021/12/25/nginx-splunk-field-extractor/ 2021-12-25 https://mdleom.com/blog/2021/12/17/log4shell-log4j-unbound-dns/ 2022-02-12 https://mdleom.com/blog/2021/10/08/cloud-control-config/ 2021-10-08 https://mdleom.com/blog/2021/09/17/aws-config/ 2021-09-17 https://mdleom.com/blog/2021/07/23/aws-waf-wcu/ 2021-07-23 https://mdleom.com/blog/2021/07/04/ecdsa-tls-tor-caddy/ 2021-07-04 https://mdleom.com/blog/2021/07/02/custom-package-nixos-module/ 2021-07-02 https://mdleom.com/blog/2021/06/27/aws-waf/ 2021-09-01 https://mdleom.com/blog/2021/06/15/cloudflare-argo-nixos/ 2024-08-25 https://mdleom.com/blog/2021/06/13/upgrade-note-nixos-21-05/ 2021-06-13 https://mdleom.com/blog/2021/04/20/python-venv/ 2021-04-20 https://mdleom.com/blog/2021/03/20/urlhaus-phishing-snort-suricata/ 2021-04-05 https://mdleom.com/blog/2021/03/15/rsync-setup-nixos/ 2021-03-15 https://mdleom.com/blog/2021/03/09/nixos-oracle/ 2021-03-09 https://mdleom.com/blog/2021/02/15/cloudflare-pages/ 2021-02-15 https://mdleom.com/blog/2020/11/22/cloudflare-hsts/ 2021-03-11 https://mdleom.com/blog/2020/11/21/cloudflare-html-cache/ 2020-11-21 https://mdleom.com/blog/2020/11/12/caddy2-pre-compressed/ 2022-05-06 https://mdleom.com/blog/2020/10/21/busybox-httpd-aws/ 2020-10-21 https://mdleom.com/blog/2020/08/30/override-smartypants-marked/ 2020-08-30 https://mdleom.com/blog/2020/08/19/snap-node-spawn/ 2020-08-19 https://mdleom.com/blog/2020/07/31/dedup-array-object-javascript/ 2020-07-31 https://mdleom.com/blog/2020/07/18/git-sign-commit-ed25519/ 2020-07-18 https://mdleom.com/blog/2020/07/11/dns-filtering/ 2020-09-03 https://mdleom.com/blog/2020/07/07/phishing-filter/ 2020-07-11 https://mdleom.com/blog/2020/06/03/onion-location-redirect/ 2020-07-09 https://mdleom.com/blog/2020/05/24/caddy-v2-nixos/ 2020-11-10 https://mdleom.com/blog/2020/05/23/caddy-upgrade-v2-proxy/ 2021-02-16 https://mdleom.com/blog/2020/04/21/gitlab-github-mirror/ 2020-04-21 https://mdleom.com/blog/2020/03/21/i2p-eepsite-nixos/ 2020-11-09 https://mdleom.com/blog/2020/03/16/tor-hidden-onion-nixos/ 2022-08-01 https://mdleom.com/blog/2020/03/14/caddy-nixos-part-3/ 2025-01-26 https://mdleom.com/blog/2020/03/04/caddy-nixos-part-2/ 2024-07-25 https://mdleom.com/blog/2020/02/23/caddy-nixos-part-1/ 2024-07-25 https://mdleom.com/blog/2020/01/20/how-to-use-camaro-xml/ 2020-01-20 https://mdleom.com/blog/2019/12/30/unit-testing-jest/ 2020-09-28 https://mdleom.com/blog/2019/12/08/github-referer-firefox/ 2019-12-08 https://mdleom.com/blog/2019/10/03/git-ssh-gitlab-ci/ 2020-04-18 https://mdleom.com/blog/2019/09/26/rhythmbox-aac/ 2019-09-26 https://mdleom.com/about/ 2025-06-30 https://mdleom.com/blog/2019/09/05/cloudflare-registrar/ 2019-09-05 https://mdleom.com/blog/2019/08/12/firefox-containers/ 2019-08-27 https://mdleom.com/blog/2019/06/28/view-image-dark-reader-firefox/ 2019-06-28 https://mdleom.com/disclaimer/ 2019-06-12 https://mdleom.com/blog/2019/06/09/engadget-redirect-guce/ 2019-06-09 https://mdleom.com/blog/2019/06/01/embed-svg-img/ 2020-08-29 https://mdleom.com/blog/2019/05/25/firefox-doh-cloudflare/ 2019-05-25 https://mdleom.com/blog/2019/04/07/firefox-instances-profiles/ 2019-08-09 https://mdleom.com/blog/2019/04/04/doh-tls-privacy/ 2019-04-04 https://mdleom.com/blog/2019/02/28/aliexpress-no-login-firefox/ 2019-04-29 https://mdleom.com/blog/2019/02/09/statistical-test/ 2019-02-09 https://mdleom.com/blog/2019/01/15/replace-truecrypt-keepassx-adblock-plus/ 2019-01-15 https://mdleom.com/blog/2019/01/12/microg-google-play-replacement/ 2021-09-18 https://mdleom.com/blog/2019/01/07/recommended-android-apps/ 2021-06-19 https://mdleom.com/blog/2019/01/05/make-pdf-files-smaller/ 2019-01-05 https://mdleom.com/blog/2018/12/31/facebook-instagram-whatsapp-china/ 2019-10-23 https://mdleom.com/blog/2018/11/10/hexo-blog-github/ 2020-11-17 https://mdleom.com/blog/2018/11/08/unix-tools-line-endings/ 2018-11-08 https://mdleom.com/blog/2018/10/31/snyk-patch-alpine-docker/ 2019-03-09 https://mdleom.com/blog/2018/10/31/word-break-limesurvey/ 2018-10-31 https://mdleom.com/blog/2018/10/25/validity-gitlab-ci-config/ 2018-10-25 https://mdleom.com/blog/2018/10/24/disable-control-alt-s-mate-shortcut/ 2018-10-24 https://mdleom.com/blog/2018/10/24/running-locally-installed-node-packages/ 2018-10-24 https://mdleom.com/blog/2018/10/18/edit-multiple-questions-limesurvey/ 2018-10-26 https://mdleom.com/blog/2018/10/14/spellcheck-language-ghostwriter/ 2019-06-06 https://mdleom.com/blog/2018/10/13/gnu-vs-busybox-tools/ 2021-04-19 https://mdleom.com/blog/2018/10/10/binaries-alpine-docker/ 2021-01-08 https://mdleom.com/blog/2018/10/02/hide-folders-caja-side-pane/ 2018-10-02 https://mdleom.com/blog/2018/10/01/secure-node-modules-snyk/ 2019-06-11 https://mdleom.com/blog/2018/09/28/make-hexo-blog-smaller/ 2018-10-06 https://mdleom.com/blog/2018/09/26/how-to-remove-windows-10-default-apps/ 2019-03-01 https://mdleom.com/blog/2018/09/21/how-to-create-a-hexo-blog/ 2020-11-17 https://mdleom.com/ 2026-03-15 https://mdleom.com/blog/ 2026-03-15 https://mdleom.com/tags/firefox/ 2019-04-29 https://mdleom.com/tags/jira/ 2025-02-03 https://mdleom.com/tags/sso/ 2025-02-03 https://mdleom.com/tags/aws/ 2021-09-17 https://mdleom.com/tags/security/ 2021-09-17 https://mdleom.com/tags/aws-config/ 2021-09-17 https://mdleom.com/tags/linux/ 2021-01-08 https://mdleom.com/tags/alpine/ 2021-01-08 https://mdleom.com/tags/busybox/ 2021-01-08 https://mdleom.com/tags/server/ 2024-07-25 https://mdleom.com/tags/caddy/ 2024-07-25 https://mdleom.com/tags/nixos/ 2024-07-25 https://mdleom.com/tags/cloudflare/ 2025-01-26 https://mdleom.com/tags/zsh/ 2023-07-17 https://mdleom.com/tags/powershell/ 2023-07-17 https://mdleom.com/tags/javascript/ 2020-07-31 https://mdleom.com/tags/centos/ 2025-04-08 https://mdleom.com/tags/privacy/ 2019-04-04 https://mdleom.com/tags/doh/ 2019-04-04 https://mdleom.com/tags/tor/ 2021-07-04 https://mdleom.com/tags/stats/ 2018-10-26 https://mdleom.com/tags/limesurvey/ 2018-10-26 https://mdleom.com/tags/svg/ 2020-08-29 https://mdleom.com/tags/web/ 2020-08-29 https://mdleom.com/tags/censorship/ 2019-10-23 https://mdleom.com/tags/gitlab/ 2020-07-18 https://mdleom.com/tags/manjaro/ 2022-11-27 https://mdleom.com/tags/arch/ 2022-11-27 https://mdleom.com/tags/luks/ 2022-11-27 https://mdleom.com/tags/hexo/ 2020-11-17 https://mdleom.com/tags/netlify/ 2020-11-17 https://mdleom.com/tags/windows/ 2019-03-01 https://mdleom.com/tags/i2p/ 2020-11-09 https://mdleom.com/tags/travel/ 2026-01-07 https://mdleom.com/tags/splunk/ 2024-01-05 https://mdleom.com/tags/pdf/ 2019-01-05 https://mdleom.com/tags/android/ 2021-09-18 https://mdleom.com/tags/nginx/ 2021-12-25 https://mdleom.com/tags/oci/ 2021-03-09 https://mdleom.com/tags/openwrt/ 2025-05-08 https://mdleom.com/tags/media/ 2019-09-26 https://mdleom.com/tags/node-js/ 2018-10-24 https://mdleom.com/tags/servicenow/ 2024-09-28 https://mdleom.com/tags/azure-ad/ 2024-09-28 https://mdleom.com/tags/snyk/ 2019-06-11 https://mdleom.com/tags/markdown/ 2019-06-06 https://mdleom.com/tags/tailscale/ 2025-04-06