Guides

Practical answers for Windows Servers and PCs: what the logs mean, how attacks look, and how to stop them, with Windows' own tools and with Coinetic.

For administrators

• Secure RDP without VPN: closed until you unlock it
  VPN, RD Gateway, firewall scope, NLA and MFA compared, and how to keep RDP invisible to the internet until you unlock it from your phone.
• Event ID 4625: what it means and how to stop it
  Failed logons in the Security log: status codes, logon types, finding the attacker's address, and stopping RDP password guessing.
• Blocked by Windows Firewall? See what and allow it
  Find out what the firewall blocks, then allow an app, open a port or block a program, with wf.msc, the firewall log, netsh and PowerShell.
• Event ID 4740 and 4771: account lockouts and Kerberos failures
  Lockout and Kerberos failure codes, finding the source of a lockout, and telling an attack from an old password.
• Windows Server hardening checklist (network side)
  Updates, firewall, open ports, RDP, SMBv1, admin passwords, logon auditing, backups and MFA: a practical list.
• NPS and RRAS VPN logs: where to find them
  NPS log location, events 6272 and 6273, RRAS logging and who is connected to your VPN right now.
• Do I need a WAF for my Windows web server?
  What a web application firewall really does, what IIS can block itself, and how to stop bots, scanners and floods.
• DORA and NIS2 on Windows Servers: logging and incidents
  What the EU rules expect from incident handling and reporting, and how to keep security logs and an incident record on your Servers.

For everyone

• Is my PC hacked? How to see what really connects
  Real signs and myths, what is connecting to the internet from your computer, and when to get help.
• How to tell if your PC has a virus: the network signs
  The signs, a full and offline scan with Windows Security, and how to see which programs go online.
• Gave a scammer remote access? What to do now
  AnyDesk, TeamViewer or UltraViewer scam: go offline, call your bank, change passwords from another device, remove the tool.
• How to detect a keylogger on Windows
  Startup apps, running programs, a full scan and the keyboard cable: step by step.
• How to block a program from the internet on Windows
  A firewall rule in a few clicks or one PowerShell line, and how to be asked before any new program goes online.
• Firewall vs antivirus: do you need both?
  What each one does, whether Windows Firewall is enough, and what the best free firewall is.
• Is someone using my WiFi? How to check
  Find every device in the router's list, lock out strangers, and keep your PC safe on a shared network.
• Is public WiFi safe? How to protect your laptop
  Cafe, hotel and airport WiFi: the real risks and the settings that protect your laptop.
• Is port forwarding safe? And what about UPnP?
  When an open port is fine, when it is a risk, and how to check yours.

Comparisons

• IPBan and RDPGuard alternative for Windows Server
  IPBan, RDPGuard, Cyberarms and Fail2Ban compared: how each blocks password guessing, and when one tool for bans, firewall and checks fits.
• GlassWire and simplewall alternative for Windows
  GlassWire, simplewall, TinyWall and Windows Firewall Control compared: how each controls which apps go online.

More guides are on the way. Get them by e-mail, once a month.