BlueTeam

What if i name all my servers + shares misleading names ie Destination_UnreachablePacket_DroppedNot_FoundBad_AddressSynNoAckIncorrect_TokenOut_Of_MemoryField_OverrunIncorrect_Data_TypeAccess_DeniedTimeOutTCP_Expired_In_TransitMissing_CookieInvalid_PortCould_Not_Negotiate_EncryptionNo_Route_To_Host

https://github.com/decalage2/awesome-security-hardening#windows

a HoneyPot is a server or IP address that logs traffic that attempts to logon to it. It is generally deployed on a private network and it’s visibility is limited…

create a .bat or .cmd script with the following lines in it. I called mine PowershellPS1-Disassociate.cmd : This script prevents file-less malware from running by associating : powershell and visual…