Killing Sweet32 on Windows with PowerShell
Sweet32 (CVE-2016-2183) is one of the most common scan findings on Windows. Here's how to find and kill 3DES suites with built-in PowerShell cmdlets.
PCI DSS
The NetBIOS Finding That Wasn't About NetBIOS
A null session finding pointed at NetBIOS. NetBIOS was already off. The real gap was a named pipe exception list our hardening never touched.