Justin's Tech Blog

WireShark filters Below are few WireShark filters ip.addr == <IP address>      : To filter by IP address tcp.port == <Port no>           : To filter by port number dns or http                                     : Displays dns and http traffic frame matches "<string>"      : Strings search tcp.analysis.flags                          : Shows the problems like packet loss, windows problem !(arp or dns or icmp)                    : removes arp, dns and icmp from the traces Follow TCP stream                    : Any packets that are related to the tcp conversation tcp.stream eq 32           ...

 Summary: In Windows 2012 server, Internet Explorer won't be listed in ADD/Remove programs. Also Tun Windows feature on or off won't work. Internet explorer can be uninstalled by below steps: Solution steps: Execute below command and verify Internet Explorer feature is enabled dism /online /get-features Look for below output from above command: Feature Name : Internet-Explorer-Optional-amd64 State : Enabled Execute below command to uninstall Internet explorer dism /online /Disable-Feature /FeatureName:Internet-Explorer-Optional-amd64 C:\>dism /online /Disable-Feature /FeatureName:Internet-Explorer-Optional-amd64 Deployment Image Servicing and Management tool Version: 6.2.9200.22807 Image Version: 6.2.9200.22807 Disabling feature(s) [==========================100.0%==========================] The operation completed successfully. Restart Windows to complete this operation. Do you want to restart the computer now? (Y/N) n Server needs to be restarted for change to take effect...

#Initial command : netsh trace start persistent=yes capture=yes IPv4.Address=X.X.X.X tracefile=c:\temp\nettrace-boot.etl  #Stop command: netsh trace stop Open the ETL file in Microsoft Message Analyzer Ref : https://techcommunity.microsoft.com/t5/iis-support-blog/capture-a-network-trace-without-installing-anything-amp-capture/ba-p/376503

Run -> shell:startup - for current user Run -> shell:common startup - for all users

wsus client configuration Registry: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\windows\WindowsUpdate\ Windows update log path (obselete): c:\windows\windowsupdate.log Powershell : Get-WindowsUpdateLog Installing updates: Using Powershell: Install-Module PSWindowsUpdate #- to install the Windows update module Get-WindowsUpdate #- to check for updates Install-WindowsUpdate #- to install the available updates Older version windows (Without PowerShell module): wuauclt /detectnow - to check for updates wuauclt /updatenow - to start installing the detected updates wuauclt /detectnow /updatenow - to check, download and install updates wuauclt /reportnow # TBC wuauclt /detectnow /updatenow /reportnow # TBC For Windows 10 computers, rather than use WUAUCLT.EXE you need to use UsoClient.exe. This exe is located in System32 and you can use the following strings. StartScan - Used To Start Scan StartDownload - Used to Start Download of Patches StartInstall - Used to Install Downloaded...

Look at below files at the below location to view the PowerShell commands executed history: ConsoleHost_history.txt Visual Studio Code Host_history.txt C:\Users\<UserName>\AppData\Roaming\Microsoft\Windows\PowerShell\PSReadLine