top of page

Category ✅
Search


Proofpoint TAP Click Rewrite Breaks a Vendor Link: Decode Before You Allowlist the World
Proofpoint rewrites URLs. Some vendors sign the original URL and reject the rewritten one. Decode and add a targeted rewrite exception. Techclick CLI lab: symptoms, commands, traps, and proof.
-
1 day ago2 min read


CyberArk PSM Connect Fail: After Auth When the Jump Never Starts
PSM is a jump. Check the PSM server service, the connector account, and RDP/SSH from PSM to the target — not the user's laptop to the target. Techclick CLI lab: symptoms, commands, traps, and proof.
-
1 day ago2 min read


Asymmetric Routing: two captures When SYN Leaves One Firewall and SYN-ACK Hits Another
Stateful firewalls drop the stray SYN-ACK. Draw both directions. Fix routing or enable state sharing. Do not add more allows. Techclick CLI lab: symptoms, commands, traps, and proof.
-
1 day ago2 min read


MTU Black Hole: ping -M do -s 1472 When One Path Dies and Small Packets Live
A device is dropping DF large packets and not sending ICMP need-to-frag. Clamp MSS or fix MTU. This is the classic black hole. Techclick CLI lab: symptoms, commands, traps, and proof.
-
1 day ago2 min read


CrowdStrike Isolate Too Wide: When a Containment Breaks AD for a Whole VLAN
Containment cuts the host off except to the Falcon cloud. If that host was a path or a license server, the blast radius is bigger than one laptop. Techclick CLI lab: symptoms, commands, traps, and proof.
-
1 day ago2 min read


Linux nftables Drop: nft list ruleset When ping Works and TCP Dies
Cloud NSG is not the guest firewall. nft list ruleset. A default drop on input explains everything. Techclick CLI lab: symptoms, commands, traps, and proof.
-
1 day ago2 min read


DNS Timeout Only on One VLAN: dig +trace When the Forwarder Is the Fault
dig from a VLAN 40 host. If it times out to the forwarder but works when pointed at 8.8.8.8, the path to the corporate DNS is filtered or the helper is wrong. Techclick CLI lab: symptoms, commands, traps, and proof.
-
1 day ago2 min read


Wireshark TCP Retransmissions: Expert Info When Users Say 'The Internet Is Slow'
Expert Information > Retransmissions and Dup ACKs. If they cluster one way, that path is dropping. It is not 'the internet'. Techclick CLI lab: symptoms, commands, traps, and proof.
-
1 day ago2 min read


tcpdump Sees Nothing on the Right Host: -i any and Offload Before You Blame the Firewall
Wrong interface, NIC offload, or you filtered the NAT'd address. Use -i any first, then turn off GRO/TSO for the capture. Techclick CLI lab: symptoms, commands, traps, and proof.
-
1 day ago2 min read


-
Jul 5, 20250 min read


CyberARK interview questions and answers
1. What are privileged accounts? ANS : A privileged account is a user account that has more privileges than ordinary users. There are many kinds of privileged accounts like Root and administrator accounts are typically used for installing and removing software and changing configuration. They are super user accounts. Examples: Root -Linux Administrator-Windows SA-Oracle Enable-Cisco 2. What are the different types of accounts? ANS: They are different account i
-
Jan 15, 202543 min read


SOC Interview
SOC Intervie w What do you have in your home network ?I set up a very strong user name and password for my router and Wi-Fi . its...
-
Jan 29, 202425 min read
bottom of page