Tickets now available: 2019 Global Azure Bootcamp Melbourne

Global Azure Bootcamp Logo

I am excited to announce that tickets are now avavailable for the Global Azure Bootcamp - Melbourne! This year the bootcamp will be on Saturday 27th of April 2019.

The Global Azure Bootcamp is a free one-day global event organised entirely by users in the community for Azure users around the world who gathered to share essential Azure and Cloud Computing skills and ideas at the seventh annual Global Azure Bootcamp in 2019. We are hosting this event in Melbourne, Australia, but there are many locations, in fact more than 100 other locations worldwide, where the Global Azure Bootcamp will be hosted on the same day.

This is an educational event, and we want it to be an opportunity for everyone to gain new skills. The focus of the event is to teach essential Azure skills to anyone in the technology community who wants to advance their cloud knowledge and the goal of the event is to show people the benefits of Azure while strengthening the Azure community.

Tickets are available via EventBrite, and typically sell out very quickly. We will be maintaining a waiting list once we run out of tickets.

Call for Speakers: 2019 Global Azure Bootcamp Melbourne

Global Azure Bootcamp Logo

The 7th Edition of the Global Azure Bootcamp - Melbourne, Australia. This year the bootcamp will be on Saturday 27th of April 2019. The location will be announced once is it confirmed.

The Global Azure Bootcamp is a free one-day global event organised entirely by users in the community for Azure users around the world who gathered to share essential Azure and Cloud Computing skills and ideas at the seventh annual Global Azure Bootcamp in 2019. We are hosting this event in Melbourne, Australia, but there are many locations, in fact more than 100 other locations worldwide, where the Global Azure Bootcamp will be hosted on the same day.

This is an educational event, and we want it to be an opportunity for everyone to gain new skills. The focus of the event is to teach essential Azure skills to anyone in the technology community who wants to advance their cloud knowledge and the goal of the event is to show people the benefits of Azure while strengthening the Azure community.

Please consider followings when you submit your session:

• We welcome all submissions that talk about Azure and its services. From AI and DevOps to Infrastructure and Security and everything in between.
• Breakout Sessions are 45 minutes; Lightning talk are 15 minutes.
• We will not be able to cover travel or accommodations expenses.

The Call for Speakers will close on the 10th of March, with those successful being notified shortly after.

Tickets for attendees will become available on the 6th of Marth 2019.

Seeking Feedback: Melbourne Microsoft Cloud and Datacenter Meetup

The organizers of the Melbourne Microsoft Cloud and Datacenter Meetup would like to know how we can make the Meetup better and to understand your areas of interest and backgrounds to better serve you as members of this community focused Meetup group.

This feedback will help us decide the format, content and regularity of the meetups for 2019.

We have a short survey that we are asking people to complete, it should only take a few minutes to complete. You can access the survey here: https://bit.ly/2R5m8aW

As an added incentive, if you complete the survey you will be entered into the draw for:

1. Microsoft Wireless Display Adapter
2. Microsoft Designer Bluetooth Mouse

Prizes to be drawn one week before the next Microsoft Cloud and Datacenter Meetup scheduled in February 2019. Winners will be contacted by email and must attend the Meetup to collect their prize.

Content From Vic .Net Presentation

Last week I had the wonderful pleasure of presenting to the Victorian .Net User Group. I want to thank Mahesh, the other organizers and SportsBet for the wonderful facilities.

I have been extremely lucky to present to a wide range of audiences on the security challenges that PowerShell brings to our organisations. From security groups to architecture to infrastructure and now development focused groups.

As promised, here is the content, code and links to more information.

You can download the PowerPoint slides here, or find them on SlideShare here.

Lateral Movement with PowerShell from kieranjacobsen

If you want to take a look at the "malware" script that I created, you can find that up GitHub here. The repository includes two files, an example of the Excel spreadsheet which contains a macro that would infect a system, and then the SystemInformation.ps1, which is the actual "malware" that is the basis for all of my demonstrations.

I mentioned Matt Graeber's write up on PowerWorm, and this can be found here at his site, www.exploit-monday.com. Matt has rewritten the code to be more safe, as well as provide some tools to detect and remove PowerWorm infections and this can be found on his GitHub.

Another important set of resources are the 5 part series from the Microsoft's Hey Scripting Guy.

• Use PowerShell for Network Host and Port Discovery Sweeps
• Use PowerShell to Security Test SQL Server and SharePoint
• Use PowerShell to Discover Network Information from Shares
• Use PowerShell to Duplicate Process Tokens via P/Invoke
• Use PowerShell to Decrypt LSA Secrets from the Registry

I recommend reading the final two parts, I have made use of the code from these within SystemInformation.ps1.

Kieran

Welcome to Posh Security

I am thrilled to welcome everyone to my new website. This is something that I have been thinking about and working on for a number of months now, and am very glad to see it all finally coming together.

Why Posh Security?

My aim for this blog is, as it always was, to discuss what I am passionate about. My two biggest passions within the industry have always been automation with PowerShell and Security.

To all those that know me or have worked with me, it is pretty obvious that my first passion is PowerShell. I first starting working with PowerShell back in the code-name Monad days when the entire project was just a small concept from Jeffrey Snover (@jsnover); since then I have spent a considerable amount of time working with it, and have seen it develop and flourish into a truly amazing platform.

My second passion is the information security field. For a number of years I have been an avid follower of all movements within the information security industry, and I will admit that I spend a significant portion of my free time keeping up with the latest trends, tools and exploits. I have always been a big believer that security starts with those deploying and supporting systems, including system administrators, architects and developers. These employees should be highly skilled in various security concepts thus ensuring that they are actively working to ensure the security of an organisation and that an organisations security posture does not simply rest on the security and compliance teams.

I also believe that right now, there is a significant level of interest in PowerShell in the security community, and over the past few years, there have been a number of people who have had mode significant process in this field, including Matt Graeber (@mattifestation), Carlos Perez (@darkoperator), and Matt Johnson (@mwjcomputing). I was presented with my own opportunity to further the discussion on PowerShell and its security implications in 2014, when I was asked to present at  CrikeyCon. I was encouraged to do so by the always amazing Ash (@Ashd_au) and Wade Alcorn. I was then, and still am astounded by the feedback from that presentation, and my follow on appearance on Risky.Biz.

I have since been working on a number of project which I hope to present to the greater community over the coming months.

Why a new blog now?

There were so many reasons to start a new blog at this time.

I actually started down the path several months ago, however things prevented me from launching the site earlier. Whilst I feel that launching a new site on the 1st of January is a touch cliché, like a New Year's resolution, overall it feels like the best time to do so.

In early November, I joined an amazing team at Readify as a Technical Lead. My focus in this role is in supporting the infrastructure that allows all of our wonderful consultants and developers to achieve the best for Readify's customers. I am extremely excited at the amount of potential PowerShell development I have ahead of me, as well as working within the Microsoft Azure space. Special thanks goes out to  Tatham Oddie for his encouragement during the application process and over the past few weeks. Readify is an amazing place to work, and I recommend that people take a look at the  Readify Recruiting process, including the  Knock Knock challenge. Completing the challenge was extremely interesting and a lot of fun.

The new role also lead me to move to a new city! I have recently moved from hot and sunny Brisbane to beautiful Melbourne. With a new job, city and year, everything seemed right for a new website!

Moving Forward

You should have already started to see that my old site, aperturescience.su is now redirecting to poshsecurity.com, all of the content and addresses should have been migrated from the old to the new site.

I have setup @poshsecurity on Twitter with the aim to keep this to simply new post notifications and associated commentary. I will also post to this whenever a new GitHub repository is created or when I make major updates to my code. I wanted to have a Twitter address that people could follow and receive updates about the site and not have to also receive unwanted or unrelated messages/re-tweets. You can follow@poshsecurity  for site and code updates, for follow my personal account at @kjacobsen.

Speaking of code, I have created a GitHub organisation called PoshSecurity. This is where all the associated code for posts will go from now on. As code is improved and redeveloped, it will most likely be moved from my GitHub over to the PoshSecurity organisation. I will leave some personal repositories directly under my account.

One minor improvement is that I am planning on switching from code comments hosting with PasteBin to using Gists. Whilst they pretty much provide like-for-like functionality, the ability to clone Gists, leave comments and also maintain reversion history, makes them more useful.

Another change is that I have decided to make use of Disqus for comments. I know that the platform can be a pain, however there are some really neat things it can do. I feel that it might encourage more discussion, whilst discouraging some of the spam I have previously had to manage.

I will look at Tumblr/Facebook pages/Google+ down the track, but I think for now, this is enough to get started. In the future I am going to also look at putting up video guides on YouTube etc.

A very big thanks goes out to my Partner, Daniel and his sister Eileen. The two have greatly assisted in the development of the new site including the name, themes, layout and so much more. I highly recommend that people check out Eileen’s site, The Food Avenue, where she writes about food and fashion.

Once again, I would like to welcome everyone to the new site. I hope that people enjoy everything that I have planned for the future on this site. I welcome people to provide feedback on what they would like to see on this site. Leave a comment down below or use the Contact page.