Hello and welcome to the Friday, November 7th, 2025 edition of the Sands Internet Storm Centers.

Stormcast, my name is Johannes Ulrich, recording today from Jacksonville, Florida.

And this episode is brought you by the sands.edu undergraduate certificate program

in Applied Cybersecurity. Today's diary comes from one of our undergraduate interns, David Hammond.

David wrote about something that's, well, I always like to talk about and sort of emphasize

in this internship, and that's

scripting. I always think there are two kinds of security professionals, those that know

how to script and those that will be replaced by a script. But what I often find is that students

who are more exposed to the Windows world, not so much to the Unix world, often aren't exposed to scripting

the same way how Unix users are often more sort of naturally exposed to it. However, we do, of course,

have some great scripting tools on Windows. They're just a little bit more hidden behind that

GUI. And one of those tools is PowerShell.

So what David is looking at here, how to do things that you commonly do on Linux with

command line tools like JQ and such to parse, for example, JSON files, how do you similar

things on Windows?

So great if you are more a Windows user and are looking for an in to some of these scripting tools.

I often also think that on the Windows side,

there aren't a lot of great tutorials to do some of this common scripting,

as you often find much easier on the Linux slash Unix site. And earlier this week, I talked about botnet that we observed that did exploit

a rather than new ex-Wiki vulnerability. Well, one of the odd things here was like the email

address that was on the left as far as user

agent and such. Well, it turns out

...