Hello, welcome to the Thursday, March 21st, 2019 edition of the Sandcent Storm Center's Stormcast. My name's

Johannes Ulrich, and well, tomorrow you'll learn from where I'm recording from this week.

Keeping an accurate inventory of all the machines on your network is always a critical and challenging

task. We do have a hint today from Rob how to make some of this a little bit easier, at least

to automate it a bit more. What Rob is looking at is how to use Active Directory in order to

help find these machines. But, well,

this isn't really all that hard for machines that are managed by active directory, but Rob is

specifically looking for machines that are not actively managed by active directory.

The script Rob is presenting is listing all the subnets that can currently be found

as being active on your network. Then it does dump these subnets into a file that can easily

be consumed by your favorite scanning tools. And then optionally also, well, you can set up

some exceptions for machines that are

already managed by active directory so a great little script that rob came up with here and i hope

that it'll make this somewhat boring task of maintaining these inventories a little bit easier for you. And Microsoft apparently had a problem with its signatures for its anti-malware product

that did crash machines if they used real-time protection.

Effective were at least Windows 7 and Windows 8 machines.

There are also some reports that some of the server operating systems like Server 2012 and

2012 R2 were affected.

At this point, I haven't really seen anything about Windows 10, so Windows 10 may have been okay in this case.

Later today on Wednesday, Microsoft did publish updated signatures.

The version of the good signature file is 1.289.1587.0.

And this apparently fixed these crashes.

...