20 guides
A practical Microsoft 365 security checklist for small businesses: MFA, Conditional Access, admin hygiene, anti-phishing, secure score, audit logging, and external sharing controls.
Audit failed logons in Active Directory: enable the right audit policy, read Event ID 4625, decode logon types and failure codes, and trace where bad attempts come from.
Cursor Live Apps let cloud agents build a web app with Postgres, Cursor SSO and hosting, run four security checks, then publish it to a URL you choose.
Use Docker Scout to scan container images for CVEs: quickview, detailed vulnerability output, comparing images, base image recommendations, and CI gating.
Configure Windows Defender Firewall rules on Windows Server with the GUI and PowerShell New-NetFirewallRule: profiles, inbound/outbound rules, scoping, and testing.
Tampered Claude Code 2.1.312 and 2.1.313 builds on Cursor's marketplace tried to plant an SSH backdoor on Oct 29. How to check for svc-telemetry and clean up.
Read Microsoft 365 and Entra sign-in logs to investigate failed logins, suspicious activity, and Conditional Access results. Filters, failure codes, export, and retention.
Use Docker multi-stage builds to ship smaller, safer images: build in one stage, copy only the artifact into a clean final stage, and drop compilers and secrets.
A sysadmin's tour of Windows Server 2025: hotpatching via Azure Arc, the 32K AD database page size, SMB over QUIC in all editions, bigger Hyper-V limits, and more.
Block legacy authentication in Microsoft 365 with Conditional Access. Find who still uses it via sign-in logs, then block it safely without breaking real apps.
Turn on Remote Desktop in Windows 11 Pro the right way. Learn the Settings toggle, firewall rules, user permissions, Network Level Authentication, and how to connect securely.
Lock down Remote Desktop on Windows Server: enforce NLA, use TLS and a real certificate, restrict access, and stop exposing RDP directly to the internet.
Set account lockout threshold, duration, and reset counter with Group Policy. Practical settings, where the policy lives, common mistakes, and how to find locked-out users.
The real security risks of MCP servers in Claude Code, over-broad access, secrets in config, prompt injection, untrusted servers, and how to lock each one down.
Pillar Guide
A practical Windows Server hardening checklist for AD environments: patching, disabling SMBv1, RDP/NLA, account lockout, tiering, audit logging, and firewall rules.
Connect Postgres to Claude Code with an MCP server the safe way, read-only roles, non-prod targets, schema inspection, and query workflows on Windows and WSL.
Pillar Guide
A practical guide to Conditional Access in Microsoft 365: signals, conditions, controls, common policies, report-only mode, break-glass accounts, and P1/P2 licensing.
Set up Claude Code for IT and infrastructure work, install on Windows and WSL, user vs project config, safe permissions, the right MCP servers, and guardrails.
Understand how NTFS and share permissions combine on Windows file servers, why the most restrictive wins, inheritance, and the best-practice setup admins actually use.
Manage guest access in Microsoft Teams: how it differs from external access, enabling it in Entra and Teams admin, adding a guest, setting permissions, and staying secure.