Raymond P. Burkholder - Things I Do

• update-help
• get-help -name about*
• get-variable
• get-command -verb
• get-command -noun
• $psversiontable.psversion
• $null - can be assigned to and assigned from
• $var.gettype().name
• get-member -inputobject $variable
• $var = @('one','two') - array variable
• $var = @{ test1=1; test2='here' } - hash table
• get-content -path $filepath - can be used to pipe entries (piped as objects)
• get-help -name get-service -full - for details and examples

Using Linux Commands Cheat Sheet 2021, I found a few commands I did not know:

• last reboot - system reboot history, with kernel versions
• timedatectl - Query the system clock
• cal - current calendar (month and day)
• w - logged in users
• id
• last - last system logins
• pstree - processes in a tree-like diagram
• pmap - see loaded libraries
• netstat -pnltu
• netstat -nutlp

Secure Linux Servers by Default is a rant about hardening Linux servers and keeping them up-to-date. The article references:

• DevSecHardening Framework
• Ubuntu Security Features
• NSA Guide to Secure Configuration

There is also the CIS Debian Linux Benchmark for hardening Debian based Linux systems. I have this coded as a series of Salt States. Will need to make that public at some point.

While I'm at it, a few packages for file and system validation from a security and intrusion perspective:

• tiger - Report system security vulnerabilities, which can use tripwire or aide
• aide - Advanced Intrusion Detection Environment - static binary
• samhain - Data integrity and host intrusion alert system
• tripwire - file and directory integrity checker
• checksecurity - basic system security checks: setuid, sockets, passwd, disfree, ...
• systraq - monitor your system and warn when system files change - not recently maintained
• stealth - stealthy File Integrity Checker

• Zonemaster
• dnsviz
• EDNS Compliance Tester
• MX Toolbox - if you are not familiar with "dig" and the applicable RFCs
• dnssec-analyzer.verisignlabs.com - mainly about DNSSEC
• dnschecker.org/domain-health-checker.php - " ... of the eight warnings that it issued--and that the reporter thought needed attention--they were either incorrect, irrelevant, inscrutable, or simply wrong ..." - so be careful what you use
• emailaudit.com - checks SPF, DKIM, alignment, and DMARC.

• Beginner’s Guide for DNSSEC using BIND9
• detailed documentation for DNSSEC in BIND
• stats.dnssec-tools