<?xml version="1.0" encoding="UTF-8" ?>
<?xml-stylesheet type="text/xsl" href="http://aliceorbob.com/rss.xsl" media="screen"?><rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:slash="http://purl.org/rss/1.0/modules/slash/" xmlns:wfw="http://wellformedweb.org/CommentAPI/"><channel><title>Bob pointing in the right direction</title><link>http://aliceorbob.com/blogs/bob_pointing_in_the_right_direction/default.aspx</link><description>Bob's drive is to be a secure programmer. "Keeping everything under a lock" is his motto. So whenever he sees something of interest, he's marks the spot. </description><dc:language>en-US</dc:language><generator>CommunityServer 2.0 (Build: 60217.2664)</generator><item><title>Kaspersky Enterprise Space Security - Voted WindowSecurity.com Readers' Choice Award Winner -  Antivirus solution</title><link>http://aliceorbob.com/blogs/bob_pointing_in_the_right_direction/archive/2008/04/24/2851.aspx</link><pubDate>Thu, 24 Apr 2008 00:00:09 GMT</pubDate><guid isPermaLink="false">7df12e44-10b7-4c21-b04e-61c7aa8466eb:2851</guid><dc:creator>Bob</dc:creator><slash:comments>0</slash:comments><comments>http://aliceorbob.com/blogs/bob_pointing_in_the_right_direction/comments/2851.aspx</comments><wfw:commentRss>http://aliceorbob.com/blogs/bob_pointing_in_the_right_direction/commentrss.aspx?PostID=2851</wfw:commentRss><description>Kaspersky Enterprise Space Security was selected the winner in the Antivirus solution category of the WindowSecurity.com Readers' Choice Awards. avast! Server edition and McAfee VirusScan Enterprise were first runner-up and second runner-up. &lt;br /&gt;&lt;br /&gt; source: &lt;a href="http://www.windowsecurity.com/news/WindowSecurity-Readers-Choice-Award-Antivirus-Kaspersky-Enterprise-Space-Security-Mar08.html"&gt;www.windowsecurity.com&lt;/a&gt;. NOTE: this was published on Thursday, April 24, 2008 at www.windowsecurity.com&lt;img src="http://aliceorbob.com/aggbug.aspx?PostID=2851" width="1" height="1"&gt;</description><category domain="http://aliceorbob.com/blogs/bob_pointing_in_the_right_direction/archive/category/1007.aspx">Articles</category></item><item><title>Controlling Encrypting File System (EFS) using Group Policy</title><link>http://aliceorbob.com/blogs/bob_pointing_in_the_right_direction/archive/2008/04/23/2852.aspx</link><pubDate>Tue, 22 Apr 2008 23:00:05 GMT</pubDate><guid isPermaLink="false">7df12e44-10b7-4c21-b04e-61c7aa8466eb:2852</guid><dc:creator>Bob</dc:creator><slash:comments>0</slash:comments><comments>http://aliceorbob.com/blogs/bob_pointing_in_the_right_direction/comments/2852.aspx</comments><wfw:commentRss>http://aliceorbob.com/blogs/bob_pointing_in_the_right_direction/commentrss.aspx?PostID=2852</wfw:commentRss><description>Using Group Policy to control where EFS can be used. &lt;br /&gt;&lt;br /&gt; source: &lt;a href="http://www.windowsecurity.com/articles/Controlling-Encrypting-File-System-EFS-Group-Policy.html"&gt;www.windowsecurity.com&lt;/a&gt;. NOTE: this was published on Wednesday, April 23, 2008 at www.windowsecurity.com&lt;img src="http://aliceorbob.com/aggbug.aspx?PostID=2852" width="1" height="1"&gt;</description><category domain="http://aliceorbob.com/blogs/bob_pointing_in_the_right_direction/archive/category/1007.aspx">Articles</category></item><item><title>Data Leakage, preserving confidentiality</title><link>http://aliceorbob.com/blogs/bob_pointing_in_the_right_direction/archive/2008/04/16/2853.aspx</link><pubDate>Wed, 16 Apr 2008 01:34:02 GMT</pubDate><guid isPermaLink="false">7df12e44-10b7-4c21-b04e-61c7aa8466eb:2853</guid><dc:creator>Bob</dc:creator><slash:comments>0</slash:comments><comments>http://aliceorbob.com/blogs/bob_pointing_in_the_right_direction/comments/2853.aspx</comments><wfw:commentRss>http://aliceorbob.com/blogs/bob_pointing_in_the_right_direction/commentrss.aspx?PostID=2853</wfw:commentRss><description>www.windowsecurity.com recently published this article. Article focusing on data leakage and how this information asset is lost and the result of exposure. This vulnerability may be the result of inadequate measures, or poorly implemented controls that expose organizations and their clients. &lt;br /&gt;&lt;br /&gt; source: &lt;a href="http://www.windowsecurity.com/articles/Data-Leakage-preserving-confidentiality.html"&gt;www.windowsecurity.com&lt;/a&gt;. &lt;img src="http://aliceorbob.com/aggbug.aspx?PostID=2853" width="1" height="1"&gt;</description><category domain="http://aliceorbob.com/blogs/bob_pointing_in_the_right_direction/archive/category/1007.aspx">Articles</category></item><item><title>Protect Public Computers with Windows SteadyState, Part 2</title><link>http://aliceorbob.com/blogs/bob_pointing_in_the_right_direction/archive/2008/04/10/2854.aspx</link><pubDate>Thu, 10 Apr 2008 01:35:21 GMT</pubDate><guid isPermaLink="false">7df12e44-10b7-4c21-b04e-61c7aa8466eb:2854</guid><dc:creator>Bob</dc:creator><slash:comments>0</slash:comments><comments>http://aliceorbob.com/blogs/bob_pointing_in_the_right_direction/comments/2854.aspx</comments><wfw:commentRss>http://aliceorbob.com/blogs/bob_pointing_in_the_right_direction/commentrss.aspx?PostID=2854</wfw:commentRss><description>How to configure Windows SteadyState  a completely free toolkit from Microsoft that helps administrators take control of shared access computers running Windows XP. &lt;br /&gt;&lt;br /&gt; source: &lt;a href="http://www.windowsecurity.com/articles/Protect-Public-Computers-Windows-SteadyState-Part2.html"&gt;www.windowsecurity.com&lt;/a&gt;. NOTE: this was published on Thursday, April 10, 2008 at www.windowsecurity.com&lt;img src="http://aliceorbob.com/aggbug.aspx?PostID=2854" width="1" height="1"&gt;</description><category domain="http://aliceorbob.com/blogs/bob_pointing_in_the_right_direction/archive/category/1007.aspx">Articles</category></item><item><title>Readers' Choice Awards Yearly Round Up 2007</title><link>http://aliceorbob.com/blogs/bob_pointing_in_the_right_direction/archive/2008/04/09/2855.aspx</link><pubDate>Wed, 09 Apr 2008 00:59:59 GMT</pubDate><guid isPermaLink="false">7df12e44-10b7-4c21-b04e-61c7aa8466eb:2855</guid><dc:creator>Bob</dc:creator><slash:comments>0</slash:comments><comments>http://aliceorbob.com/blogs/bob_pointing_in_the_right_direction/comments/2855.aspx</comments><wfw:commentRss>http://aliceorbob.com/blogs/bob_pointing_in_the_right_direction/commentrss.aspx?PostID=2855</wfw:commentRss><description>www.windowsecurity.com recently published this article. The winning solutions for the 2007 Readers' Choice awards. &lt;br /&gt;&lt;br /&gt; source: &lt;a href="http://www.windowsecurity.com/news/Readers-Choice-Awards-2007.html"&gt;www.windowsecurity.com&lt;/a&gt;. &lt;img src="http://aliceorbob.com/aggbug.aspx?PostID=2855" width="1" height="1"&gt;</description><category domain="http://aliceorbob.com/blogs/bob_pointing_in_the_right_direction/archive/category/1007.aspx">Articles</category></item><item><title>Configuring the Windows Server 2008 Terminal Services Gateway (Part 2)</title><link>http://aliceorbob.com/blogs/bob_pointing_in_the_right_direction/archive/2008/04/08/2856.aspx</link><pubDate>Mon, 07 Apr 2008 23:00:01 GMT</pubDate><guid isPermaLink="false">7df12e44-10b7-4c21-b04e-61c7aa8466eb:2856</guid><dc:creator>Bob</dc:creator><slash:comments>0</slash:comments><comments>http://aliceorbob.com/blogs/bob_pointing_in_the_right_direction/comments/2856.aspx</comments><wfw:commentRss>http://aliceorbob.com/blogs/bob_pointing_in_the_right_direction/commentrss.aspx?PostID=2856</wfw:commentRss><description>www.windowsecurity.com published this article on Tuesday, April 08, 2008. How to install and configure the TS Gateway and the RDP client; making and testing the connection. &lt;br /&gt;&lt;br /&gt; source: &lt;a href="http://www.windowsecurity.com/articles/Configuring-Windows-Server-2008-Terminal-Services-Gateway-Part2.html"&gt;www.windowsecurity.com&lt;/a&gt;. &lt;img src="http://aliceorbob.com/aggbug.aspx?PostID=2856" width="1" height="1"&gt;</description><category domain="http://aliceorbob.com/blogs/bob_pointing_in_the_right_direction/archive/category/1007.aspx">Articles</category></item><item><title>Analyzing a Hack from A to Z (Part 4)</title><link>http://aliceorbob.com/blogs/bob_pointing_in_the_right_direction/archive/2008/04/02/2647.aspx</link><pubDate>Wed, 02 Apr 2008 00:00:06 GMT</pubDate><guid isPermaLink="false">7df12e44-10b7-4c21-b04e-61c7aa8466eb:2647</guid><dc:creator>Bob</dc:creator><slash:comments>1</slash:comments><comments>http://aliceorbob.com/blogs/bob_pointing_in_the_right_direction/comments/2647.aspx</comments><wfw:commentRss>http://aliceorbob.com/blogs/bob_pointing_in_the_right_direction/commentrss.aspx?PostID=2647</wfw:commentRss><description>How to write some IDS signatures. &lt;br /&gt;&lt;br /&gt; source: &lt;a href="http://www.windowsecurity.com/articles/Analyzing-Hack-Part4.html"&gt;www.windowsecurity.com&lt;/a&gt;. NOTE: this was published on Wednesday, April 02, 2008 at www.windowsecurity.com&lt;img src="http://aliceorbob.com/aggbug.aspx?PostID=2647" width="1" height="1"&gt;</description><category domain="http://aliceorbob.com/blogs/bob_pointing_in_the_right_direction/archive/category/1007.aspx">Articles</category></item><item><title>Enterprise Security Analyzer - Voted WindowSecurity.com Readers' Choice Award Winner -  Event Log Monitoring solution</title><link>http://aliceorbob.com/blogs/bob_pointing_in_the_right_direction/archive/2008/03/27/2625.aspx</link><pubDate>Thu, 27 Mar 2008 02:00:00 GMT</pubDate><guid isPermaLink="false">7df12e44-10b7-4c21-b04e-61c7aa8466eb:2625</guid><dc:creator>Bob</dc:creator><slash:comments>1</slash:comments><comments>http://aliceorbob.com/blogs/bob_pointing_in_the_right_direction/comments/2625.aspx</comments><wfw:commentRss>http://aliceorbob.com/blogs/bob_pointing_in_the_right_direction/commentrss.aspx?PostID=2625</wfw:commentRss><description>www.windowsecurity.com published this article on Thursday, March 27, 2008. Enterprise Security Analyzer was selected the winner in the  Event Log Monitoring solution category of the WindowSecurity.com Readers' Choice Awards. EventTracker and GFI EventsManager were first runner-up and second runner-up. &lt;br /&gt;&lt;br /&gt; source: &lt;a href="http://www.windowsecurity.com/news/WindowSecurity-Readers-Choice-Award-Event-Log-Monitoring-solution-Enterprise-Security-Analyzer-Feb08.html"&gt;www.windowsecurity.com&lt;/a&gt;. &lt;img src="http://aliceorbob.com/aggbug.aspx?PostID=2625" width="1" height="1"&gt;</description><category domain="http://aliceorbob.com/blogs/bob_pointing_in_the_right_direction/archive/category/1007.aspx">Articles</category></item><item><title>Configuring the Windows Server 2008 Terminal Services Gateway (Part 1)</title><link>http://aliceorbob.com/blogs/bob_pointing_in_the_right_direction/archive/2008/03/26/2621.aspx</link><pubDate>Tue, 25 Mar 2008 23:00:04 GMT</pubDate><guid isPermaLink="false">7df12e44-10b7-4c21-b04e-61c7aa8466eb:2621</guid><dc:creator>Bob</dc:creator><slash:comments>1</slash:comments><comments>http://aliceorbob.com/blogs/bob_pointing_in_the_right_direction/comments/2621.aspx</comments><wfw:commentRss>http://aliceorbob.com/blogs/bob_pointing_in_the_right_direction/commentrss.aspx?PostID=2621</wfw:commentRss><description>Here's an interesting article, aimed at developers, from tshinder@tacteam.net   (Thomas Shinder). How to put together a working Terminal Services Gateway solution. &lt;br /&gt;&lt;br /&gt; source: &lt;a href="http://www.windowsecurity.com/articles/Configuring-Windows-Server-2008-Terminal-Services-Gateway-Part1.html"&gt;www.windowsecurity.com&lt;/a&gt;. 
        Read more from &lt;a&gt; www.windowsecurity.com&lt;/a&gt;&lt;img src="http://aliceorbob.com/aggbug.aspx?PostID=2621" width="1" height="1"&gt;</description><category domain="http://aliceorbob.com/blogs/bob_pointing_in_the_right_direction/archive/category/1007.aspx">Articles</category></item><item><title>Configuring Granular Password Settings in Windows Server 2008  The Easy Way</title><link>http://aliceorbob.com/blogs/bob_pointing_in_the_right_direction/archive/2008/03/19/2601.aspx</link><pubDate>Wed, 19 Mar 2008 00:00:02 GMT</pubDate><guid isPermaLink="false">7df12e44-10b7-4c21-b04e-61c7aa8466eb:2601</guid><dc:creator>Bob</dc:creator><slash:comments>0</slash:comments><comments>http://aliceorbob.com/blogs/bob_pointing_in_the_right_direction/comments/2601.aspx</comments><wfw:commentRss>http://aliceorbob.com/blogs/bob_pointing_in_the_right_direction/commentrss.aspx?PostID=2601</wfw:commentRss><description>www.windowsecurity.com published this article on Wednesday, March 19, 2008. This article will demonstrate The Easy Way of how to handle Granular Password Policies  also known as Fine-Grained Password Policies - in a Windows Server 2008 domain environment. &lt;br /&gt;&lt;br /&gt; source: &lt;a href="http://www.windowsecurity.com/articles/Configuring-Granular-Password-Settings-Windows-Server-2008.html"&gt;www.windowsecurity.com&lt;/a&gt;. &lt;img src="http://aliceorbob.com/aggbug.aspx?PostID=2601" width="1" height="1"&gt;</description><category domain="http://aliceorbob.com/blogs/bob_pointing_in_the_right_direction/archive/category/1007.aspx">Articles</category></item><item><title>Using WEVTUTIL to Manage Event Logs</title><link>http://aliceorbob.com/blogs/bob_pointing_in_the_right_direction/archive/2008/03/13/2585.aspx</link><pubDate>Thu, 13 Mar 2008 02:00:00 GMT</pubDate><guid isPermaLink="false">7df12e44-10b7-4c21-b04e-61c7aa8466eb:2585</guid><dc:creator>Bob</dc:creator><slash:comments>0</slash:comments><comments>http://aliceorbob.com/blogs/bob_pointing_in_the_right_direction/comments/2585.aspx</comments><wfw:commentRss>http://aliceorbob.com/blogs/bob_pointing_in_the_right_direction/commentrss.aspx?PostID=2585</wfw:commentRss><description>On Thursday, March 13, 2008,  (Derek Melber) posted a new story. In addition to the new subscription option that Event Viewer now possesses, there is a new command line utility, WEVTUTIL, which allows you to control nearly every aspect of the Event Viewer logs.  &lt;br /&gt;&lt;br /&gt; source: &lt;a href="http://www.windowsecurity.com/articles/WEVTUTIL-Manage-Event-Logs.html"&gt;www.windowsecurity.com&lt;/a&gt;. 
        Read more from &lt;a&gt; www.windowsecurity.com&lt;/a&gt;&lt;img src="http://aliceorbob.com/aggbug.aspx?PostID=2585" width="1" height="1"&gt;</description><category domain="http://aliceorbob.com/blogs/bob_pointing_in_the_right_direction/archive/category/1007.aspx">Articles</category></item><item><title>Analyzing a Hack from A to Z (Part 3)</title><link>http://aliceorbob.com/blogs/bob_pointing_in_the_right_direction/archive/2008/03/11/2570.aspx</link><pubDate>Tue, 11 Mar 2008 00:00:05 GMT</pubDate><guid isPermaLink="false">7df12e44-10b7-4c21-b04e-61c7aa8466eb:2570</guid><dc:creator>Bob</dc:creator><slash:comments>0</slash:comments><comments>http://aliceorbob.com/blogs/bob_pointing_in_the_right_direction/comments/2570.aspx</comments><wfw:commentRss>http://aliceorbob.com/blogs/bob_pointing_in_the_right_direction/commentrss.aspx?PostID=2570</wfw:commentRss><description>On Tuesday, March 11, 2008,  (Don Parker) posted a new story. We finished off gathering the required information from the target network in part two. In part three we will now pull off the hack, and transfer some tools over to the compromised webserver. &lt;br /&gt;&lt;br /&gt; source: &lt;a href="http://www.windowsecurity.com/articles/Analyzing-Hack-Part3.html"&gt;www.windowsecurity.com&lt;/a&gt;. 
        Read more from &lt;a&gt; www.windowsecurity.com&lt;/a&gt;&lt;img src="http://aliceorbob.com/aggbug.aspx?PostID=2570" width="1" height="1"&gt;</description><category domain="http://aliceorbob.com/blogs/bob_pointing_in_the_right_direction/archive/category/1007.aspx">Articles</category></item><item><title>Moving on</title><link>http://aliceorbob.com/blogs/bob_pointing_in_the_right_direction/archive/2008/03/09/2559.aspx</link><pubDate>Sun, 09 Mar 2008 09:00:23 GMT</pubDate><guid isPermaLink="false">7df12e44-10b7-4c21-b04e-61c7aa8466eb:2559</guid><dc:creator>Bob</dc:creator><slash:comments>0</slash:comments><comments>http://aliceorbob.com/blogs/bob_pointing_in_the_right_direction/comments/2559.aspx</comments><wfw:commentRss>http://aliceorbob.com/blogs/bob_pointing_in_the_right_direction/commentrss.aspx?PostID=2559</wfw:commentRss><description>I travel a lot. It has been almost ten years since I had a job that was based in the same place I live. Whenever I get a call from friends and family the first question I get is &amp;#8220;where are you?&amp;#8221;   People who have known me for years but do not stay in touch [...]&lt;img src="http://feeds.feedburner.com/~r/zdnet/threatchaos/~4/248441681" height="1" width="1" /&gt; &lt;br /&gt;&lt;br /&gt; source: &lt;a href="http://feeds.feedburner.com/~r/zdnet/threatchaos/~3/248441681/"&gt;feeds.feedburner.com&lt;/a&gt;. NOTE: this was recently published at feeds.feedburner.com&lt;img src="http://aliceorbob.com/aggbug.aspx?PostID=2559" width="1" height="1"&gt;</description><category domain="http://aliceorbob.com/blogs/bob_pointing_in_the_right_direction/archive/category/1007.aspx">Articles</category></item><item><title>Security Baselining with AGPM Templates</title><link>http://aliceorbob.com/blogs/bob_pointing_in_the_right_direction/archive/2008/03/05/2548.aspx</link><pubDate>Wed, 05 Mar 2008 00:00:08 GMT</pubDate><guid isPermaLink="false">7df12e44-10b7-4c21-b04e-61c7aa8466eb:2548</guid><dc:creator>Bob</dc:creator><slash:comments>0</slash:comments><comments>http://aliceorbob.com/blogs/bob_pointing_in_the_right_direction/comments/2548.aspx</comments><wfw:commentRss>http://aliceorbob.com/blogs/bob_pointing_in_the_right_direction/commentrss.aspx?PostID=2548</wfw:commentRss><description>Here's an interesting story from  (Derek Melber). How to use Advanced Group Policy Management to create security baselines. &lt;br /&gt;&lt;br /&gt; source: &lt;a href="http://www.windowsecurity.com/articles/Security-Baselining-AGPM-Templates.html"&gt;www.windowsecurity.com&lt;/a&gt;. 
        Read more from &lt;a&gt; www.windowsecurity.com&lt;/a&gt;&lt;img src="http://aliceorbob.com/aggbug.aspx?PostID=2548" width="1" height="1"&gt;</description><category domain="http://aliceorbob.com/blogs/bob_pointing_in_the_right_direction/archive/category/1007.aspx">Articles</category></item><item><title>Judge releases Wikileaks</title><link>http://aliceorbob.com/blogs/bob_pointing_in_the_right_direction/archive/2008/02/29/2533.aspx</link><pubDate>Fri, 29 Feb 2008 19:46:15 GMT</pubDate><guid isPermaLink="false">7df12e44-10b7-4c21-b04e-61c7aa8466eb:2533</guid><dc:creator>Bob</dc:creator><slash:comments>0</slash:comments><comments>http://aliceorbob.com/blogs/bob_pointing_in_the_right_direction/comments/2533.aspx</comments><wfw:commentRss>http://aliceorbob.com/blogs/bob_pointing_in_the_right_direction/commentrss.aspx?PostID=2533</wfw:commentRss><description>feeds.feedburner.com published this article on Saturday, March 01, 2008. All it took was a little representation.  That is one trouble with the US legal system. You have to show up to defend yourself. The guys at Wikileaks.org were effecitvely put out of business by aggressive swiss bankers because they did not show up in court.  At a federal appeal today in San Francisco there [...]&lt;img src="http://feeds.feedburner.com/~r/zdnet/threatchaos/~4/243699436" height="1" width="1" /&gt; &lt;br /&gt;&lt;br /&gt; source: &lt;a href="http://feeds.feedburner.com/~r/zdnet/threatchaos/~3/243699436/"&gt;feeds.feedburner.com&lt;/a&gt;. &lt;img src="http://aliceorbob.com/aggbug.aspx?PostID=2533" width="1" height="1"&gt;</description><category domain="http://aliceorbob.com/blogs/bob_pointing_in_the_right_direction/archive/category/1007.aspx">Articles</category></item></channel></rss>