Killing Sweet32 on Windows with PowerShell
Sweet32 (CVE-2016-2183) is one of the most common scan findings on Windows. Here's how to find and kill 3DES suites with built-in PowerShell cmdlets.
Hardening
Shutting Down Direct Send in Microsoft 365 (Without Breaking Your Printers)
Block unauthenticated Direct Send spoofing in M365 without breaking legacy apps and printers. Find your legitimate senders, create inbound connectors, and flip RejectDirectSend.
The NetBIOS Finding That Wasn't About NetBIOS
A null session finding pointed at NetBIOS. NetBIOS was already off. The real gap was a named pipe exception list our hardening never touched.