#  @awakecoding Marc-Andrรฉ Moreau Marc-Andrรฉ Moreau posts on X about how to, microsoft, if you, azure the most. They currently have [-----] followers and [---] posts still getting attention that total [-----] engagements in the last [--] hours. ### Engagements: [-----] [#](/creator/twitter::161137627/interactions)  - [--] Week [------] -34% - [--] Month [------] +332% - [--] Months [-------] -7.20% - [--] Year [-------] -62% ### Mentions: [--] [#](/creator/twitter::161137627/posts_active)  - [--] Month [--] -64% - [--] Months [---] +174% - [--] Year [---] +14% ### Followers: [-----] [#](/creator/twitter::161137627/followers)  - [--] Week [-----] +0.30% - [--] Month [-----] +1.40% - [--] Months [-----] +3.70% - [--] Year [-----] +13% ### CreatorRank: [---------] [#](/creator/twitter::161137627/influencer_rank)  ### Social Influence **Social category influence** [technology brands](/list/technology-brands) 18.18% [stocks](/list/stocks) 9.09% [finance](/list/finance) 0.7% [social networks](/list/social-networks) 0.7% **Social topic influence** [how to](/topic/how-to) 8.39%, [microsoft](/topic/microsoft) 6.99%, [if you](/topic/if-you) 6.99%, [azure](/topic/azure) 4.2%, [claude code](/topic/claude-code) #1666, [ai](/topic/ai) 2.8%, [apple](/topic/apple) 2.8%, [environment](/topic/environment) 2.8%, [random](/topic/random) 2.8%, [level](/topic/level) 2.1% **Top accounts mentioned or mentioned by** [@pierceboggan](/creator/undefined) [@burkeholland](/creator/undefined) [@nathanmcnulty](/creator/undefined) [@ibuildthecloud](/creator/undefined) [@haefeledev](/creator/undefined) [@steskalj](/creator/undefined) [@amorriscode](/creator/undefined) [@thdxr](/creator/undefined) [@przemyslawklys](/creator/undefined) [@stefanolson](/creator/undefined) [@taurisjoe](/creator/undefined) [@blaken](/creator/undefined) [@behaviourtree](/creator/undefined) [@orenme](/creator/undefined) [@unixterminal](/creator/undefined) [@imog](/creator/undefined) [@dubeg](/creator/undefined) [@horizonsecured](/creator/undefined) [@alexaka1](/creator/undefined) [@davidfowl](/creator/undefined) **Top assets mentioned** [Microsoft Corp. (MSFT)](/topic/microsoft) [Alphabet Inc Class A (GOOGL)](/topic/$googl) [Cloudflare, Inc. (NET)](/topic/cloudflare) [ServiceNow Inc (NOW)](/topic/servicenow) ### Top Social Posts Top posts by engagements in the last [--] hours "Why did I not realize the GitHub CLI is open source I don't write Go but I have GitHub Copilot. Let me see if I can implement *dynamic* account selection in gh cli because it's really the most annoying thing about using two GitHub accounts at the same time New blog post ๐ฐ Configuring SSH for personal and work GitHub accountsproperly. Automatic key selection automatic email overrides and where GitHub tooling still falls short. ๐๐ป https://t.co/QzilrYR4ba New blog post ๐ฐ Configuring SSH for personal and work GitHub accountsproperly. Automatic key selection automatic email overrides and where" [X Link](https://x.com/awakecoding/status/2022406559742189803) 2026-02-13T20:24Z [----] followers, [----] engagements "@amorriscode But then. GitHub Copilot agent is already there and you don't need to build a flaky DIY solution. It would just be a fun experiment unless someone really takes the time to build it to come close to the current level of GitHub Copilot agent" [X Link](https://x.com/awakecoding/status/2022519030398038373) 2026-02-14T03:51Z [----] followers, [---] engagements "What's cooking PowerShell Remoting over SSH in pure .NET without the OpenSSH client. And yes it can interactively prompt for credentials or accept them as input for automation ๐" [X Link](https://x.com/awakecoding/status/2018807807819300896) 2026-02-03T22:04Z [----] followers, [----] engagements "@GergelyOrosz in your latest deepdive you mention how in one case GitHub Copilot adoption was hindered by an underwhelming model being selected by default. We've hit the exact same issue ourselves I even opened an issue. @pierceboggan https://github.com/microsoft/vscode/issues/276993 https://github.com/microsoft/vscode/issues/276993" [X Link](https://x.com/awakecoding/status/2019068057730089040) 2026-02-04T15:18Z [----] followers, 39.2K engagements "@burkeholland Guess why I prefer to use GitHub Copilot in VSCode: there's a built-in terminal separate from the AI chat. I can ask GitHub Copilot to use my terminal yet I can use the terminal directly myself so I have the best of both worlds" [X Link](https://x.com/awakecoding/status/2019492113130373432) 2026-02-05T19:23Z [----] followers, [---] engagements "Good news: VSCode finally shows detailed context window usage Bad news: Claude Opus [---] is capped at 128K just like all the other models I don't really notice the difference but just knowing it's capped at 128K with no option to increase it is annoying" [X Link](https://x.com/awakecoding/status/2019543742768902360) 2026-02-05T22:48Z [----] followers, [----] engagements "@BehaviourTree @burkeholland @OrenMe I'm not sure if it's the training set or just better tooling used by the AI agent. I use GitHub Copilot all the time now to diagnose issues *live*. There's a lot it can figure out when you let it run commands to gain more insight into an issue especially live processes" [X Link](https://x.com/awakecoding/status/2019579107252793762) 2026-02-06T01:09Z [----] followers, [--] engagements "@nolemolt @BehaviourTree @burkeholland @OrenMe Speaking of which Claude Code and most of the CLI tools out there use primitive grepping of files for search which performs poorly on large code bases. GitHub Copilot and Cursor have excellent automatic workspace indexing. It makes a huge difference in speed and accuracy" [X Link](https://x.com/awakecoding/status/2019581412358386009) 2026-02-06T01:18Z [----] followers, [--] engagements "@unixterminal Really As in GitHub Copilot or the "other" Copilot" [X Link](https://x.com/awakecoding/status/2019596543926632603) 2026-02-06T02:18Z [----] followers, [---] engagements "@ibuildthecloud not even clang-llvm I've got my own builds: https://github.com/awakecoding/llvm-prebuilt https://github.com/awakecoding/llvm-prebuilt" [X Link](https://x.com/awakecoding/status/2019608587530825914) 2026-02-06T03:06Z [----] followers, [--] engagements "@ibuildthecloud but you know what I'd like to see $20K burned building a functional RDP client from scratch. I bet they can't pull this one off because it's very hard to get AI agents to loop on something they have trouble getting feedback on. It's very hard to test RDP development in scripts" [X Link](https://x.com/awakecoding/status/2019611397148328238) 2026-02-06T03:17Z [----] followers, [--] engagements "@NathanMcNulty @thanaen_dev Large context windows for models that support it are generally $$$ more expensive ๐ซฐ so that's normal. We've had developers internally who cost like 750$ in a month because they cranked it to the max in Claude Code before we had to tell them not to do that" [X Link](https://x.com/awakecoding/status/2019890670408991001) 2026-02-06T21:47Z [----] followers, [--] engagements "@pierceboggan My suggestion would be to do the same as Cursor with a reduced context window by default and a "max mode" to crank the context window to the maximum supported by the model with a higher cost: https://cursor.com/docs/models https://cursor.com/docs/models" [X Link](https://x.com/awakecoding/status/2019916678788759708) 2026-02-06T23:30Z [----] followers, [---] engagements "@NathanMcNulty @merill I wish I could see your face as you realize what Nathan has done ๐คฃ" [X Link](https://x.com/awakecoding/status/2020305659565339085) 2026-02-08T01:16Z [----] followers, [---] engagements "Has anyone written an agent skill to efficiently reference Windows protocol specifications I know there's the Microsoft Learn Docs MCP server but the specs have a regular structure and also contain overview documents etc. https://learn.microsoft.com/en-us/openspecs/windows_protocols/ms-winprotlp/e36c976a-6263-42a8-b119-7a3cc41ddd2a https://learn.microsoft.com/en-us/openspecs/windows_protocols/ms-winprotlp/e36c976a-6263-42a8-b119-7a3cc41ddd2a" [X Link](https://x.com/awakecoding/status/2020541462438367539) 2026-02-08T16:53Z [----] followers, [---] engagements "The PowerShell release schedule really needs to be improved to match the .NET runtime. We've migrated our core C# libraries to .NET [--] ahead of our next major product release in a few weeks and just found out there's no stable version of PowerShell based on .NET [--] yet: https://github.com/PowerShell/PowerShell/discussions/26754 https://github.com/PowerShell/PowerShell/discussions/26754" [X Link](https://x.com/awakecoding/status/2020967335729995919) 2026-02-09T21:05Z [----] followers, [---] engagements "PowerShell is deeply reliant on the .NET runtime anyway so it would just make sense to keep the major releases in sync. Why not PowerShell [----] for .NET [--] Or PowerShell [--] while we're at it I don't care how but we need .NET runtime updates faster than that in PowerShell" [X Link](https://x.com/awakecoding/status/2020968190818623644) 2026-02-09T21:08Z [----] followers, [---] engagements "@haefeledev This was an ideal scenario - I ported code which I wrote [--] years ago in FreeRDP. It had test vectors so I created a 37-step plan to port it from C to Rust properly using this prompt to craft the plan: https://github.com/awakecoding/copilot-resources/blob/master/prompts/long-plan-orchestrator.prompt.md https://github.com/awakecoding/copilot-resources/blob/master/prompts/long-plan-orchestrator.prompt.md" [X Link](https://x.com/awakecoding/status/2020986857597898758) 2026-02-09T22:23Z [----] followers, [--] engagements "@haefeledev I then had a few more prompts to check for various things and it caught more problems. I cleaned it up today and submitted a pull request confident that it actually worked as I had GitHub Copilot make RDP connections and grab screenshots and logs for all compression levels" [X Link](https://x.com/awakecoding/status/2020987517143744763) 2026-02-09T22:25Z [----] followers, [--] engagements "@AvaloniaUI @shanselman your next vibe coded project could now be a desktop app written using C# and Avalonia UI ๐" [X Link](https://x.com/awakecoding/status/2021202037732765907) 2026-02-10T12:38Z [----] followers, [---] engagements "RDP WebAuthn redirection is implemented as a dynamic virtual channel plugin in C:WindowsSystem32webauthn.dll. For the fun of it I asked GitHub Copilot in VSCode to make a plan to implement the DVC COM APIs in Rust such that it could be loaded in IronRDP. Here it is working:" [X Link](https://x.com/awakecoding/status/2021330886579585080) 2026-02-10T21:10Z [----] followers, [----] engagements "@thdxr Everyone knows TUI stands for "Terrible UI" while GUI stands for "Great UI" ๐คช" [X Link](https://x.com/awakecoding/status/2021332144791093606) 2026-02-10T21:15Z [----] followers, [----] engagements "@steskalj this in plan mode. generating the plan literally took a good [--] minutes of Opus [---] analyzing everything. executing the plan took less than an hour followed by some manual testing and refinement" [X Link](https://x.com/awakecoding/status/2021343412071387646) 2026-02-10T21:59Z [----] followers, [---] engagements "@imog @NathanMcNulty In the end what matters the most is being able to develop the software with the features you want implemented according to your specifications. I don't really miss spending hours mindlessly writing code to test if it builds and runs only to make another edit to try again" [X Link](https://x.com/awakecoding/status/2021408975892381834) 2026-02-11T02:20Z [----] followers, [--] engagements "@dubeg_ @horizon_secured Kerberos is wrapped in CredSSP which still ends with the full credentials being delegated to the server for a remote interactive logon. The RDP server keeps that password in memory without clearing it after it is no longer needed basically waiting for mimikatz to grab it" [X Link](https://x.com/awakecoding/status/2021433957171200428) 2026-02-11T03:59Z [----] followers, [--] engagements "@dubeg_ @horizon_secured The restricted admin mode skips the delegation step but you end up with a network logon type like SMB. Remote Credential Guard skips the delegation step but does a remote interactive logon by doing RPC to expose the client LSA to the server over a virtual channel" [X Link](https://x.com/awakecoding/status/2021434579442438565) 2026-02-11T04:02Z [----] followers, [--] engagements "@burkeholland @hmorneau I don't know I like Opus [---] so far. It's hard to tell the difference with Opus [---] but I see no reason to dislike it it performs really well" [X Link](https://x.com/awakecoding/status/2021435118104216027) 2026-02-11T04:04Z [----] followers, [---] engagements "@thdxr Can we get Alt+V for image pasting enabled by default next This would really help for Windows support and align OpenCode to support the same shortcut supported by Claude Code and Copilot CLI: https://github.com/anomalyco/opencode/issues/8490 https://github.com/anomalyco/opencode/issues/8490" [X Link](https://x.com/awakecoding/status/2021574834119987675) 2026-02-11T13:19Z [----] followers, [---] engagements "@ibuildthecloud Yes install Remote Desktop Manager (Free) we have a real Apple Remote Desktop client the high-performance VNC variant used by the built-in macOS remote desktop server. The built-in macOS server supports vanilla VNC but with poor performance. https://devolutions.net/ https://devolutions.net/" [X Link](https://x.com/awakecoding/status/2021614553839124876) 2026-02-11T15:57Z [----] followers, [---] engagements "ICYMI there's a discussion right now about #PowerShell releases being so far behind the .NET runtime that we are unable to fully migrate to .NET [--] in all of our products at Devolutions. PowerShell [---] is lagging behind by *several months*: https://github.com/PowerShell/PowerShell/discussions/26754#discussioncomment-15770364 https://github.com/PowerShell/PowerShell/discussions/26754#discussioncomment-15770364" [X Link](https://x.com/awakecoding/status/2021675929815462251) 2026-02-11T20:01Z [----] followers, [----] engagements "@pierceboggan we're looking at converting all of our custom commands into skills. I just tried and slash completion for skills only works in VSCode Insiders for me. Got any idea if it's an optional feature that can be enabled in VSCode or if it's coming to VSCode soon" [X Link](https://x.com/awakecoding/status/2021706893672972590) 2026-02-11T22:04Z [----] followers, [---] engagements "@thdxr When would you use codex over opus Do you consider it a one-size-fits-all model or a model better suited for planning versus executing etc" [X Link](https://x.com/awakecoding/status/2021752743736582501) 2026-02-12T01:06Z [----] followers, [---] engagements "I mean they even managed to break it even more with the latest release: https://github.com/vercel-labs/agent-browser/issues/398 https://github.com/vercel-labs/agent-browser/issues/398" [X Link](https://x.com/awakecoding/status/2021959515135267043) 2026-02-12T14:48Z [----] followers, [---] engagements "Let's see how GPT-5.3 codex performs in GitHub Copilot" [X Link](https://x.com/awakecoding/status/2021959835068301325) 2026-02-12T14:49Z [----] followers, [----] engagements "@TheCodeMan__ Can you do this with Avalonia UI instead of the browser Let's say I have 1500+ WInForms dialogs to migrate" [X Link](https://x.com/awakecoding/status/2021979858151387459) 2026-02-12T16:08Z [----] followers, [---] engagements "@alexaka1 It's a problem when Claude Code needs to co-exist with other tools in a large monorepo. We have multiple nested files automatically synchronized with but they still need to be loaded properly when opening the monorepo root http://AGENTS.md http://CLAUDE.md http://AGENTS.md http://CLAUDE.md" [X Link](https://x.com/awakecoding/status/2022389671498780859) 2026-02-13T19:17Z [----] followers, [---] engagements "I just wish VSCode had a built-in agentic browser to rival the one in Cursor. I know there's the "simple browser" extension but maybe rename it to something that doesn't look basic and put a browser-use button in the GitHub Copilot chat" [X Link](https://x.com/awakecoding/status/2021998067399241996) 2026-02-12T17:21Z [----] followers, [---] engagements "@davidfowl Have you tried the Claude Code desktop app https://code.claude.com/docs/en/desktop https://code.claude.com/docs/en/desktop" [X Link](https://x.com/awakecoding/status/2022059794476179717) 2026-02-12T21:26Z [----] followers, [---] engagements "@navneet_rabdiya Did you submit a pull request I would really like dynamic account selection to be supported upstream so I opened a PR myself with my changes: https://github.com/cli/cli/pull/12681 https://github.com/cli/cli/pull/12681" [X Link](https://x.com/awakecoding/status/2022486977371652097) 2026-02-14T01:44Z [----] followers, [--] engagements "@SimonHolman You don't need to bulk-assign a few mapping rules should do the trick. anything under is mapped to my personal account and anything under is mapped to my work account. The rest uses my currently selected account. Problem solved http://github.com/Devolutions http://github.com/awakecoding http://github.com/Devolutions http://github.com/awakecoding" [X Link](https://x.com/awakecoding/status/2022656153088594355) 2026-02-14T12:56Z [----] followers, [--] engagements "@PrzemyslawKlys @ibuildthecloud The "adaptive" quality is really the one you want to use it's a form of progressive JPEG with two passes so if you drag stuff around it'll just skip sending the second pass to get a temporary higher frame rate" [X Link](https://x.com/awakecoding/status/2021660361527898375) 2026-02-11T18:59Z [----] followers, [--] engagements "@stefanolson @taurisjoe @davidfowl It's frankly a lot better than the terminal UI. There are still some missing things like slash completion for commands/skills but I'm crossing fingers they fix that soon" [X Link](https://x.com/awakecoding/status/2022111919818346596) 2026-02-13T00:53Z [----] followers, [--] engagements "@pierceboggan This is a really good move. Cursor doesn't have the distinction between stable and insiders and as a result lots of features are available much faster in Cursor than in VSCode stable even if they're in VSCode Insiders. This will help close the gap much faster" [X Link](https://x.com/awakecoding/status/2022150579188011071) 2026-02-13T03:27Z [----] followers, [---] engagements "Nested usage in VSCode doesn't work for me. I had to create explicit custom instructions in my .github/copilot-instructions.md to force it to read files when dealing with anything in related directories: http://AGENTS.md http://AGENTS.md" [X Link](https://x.com/awakecoding/status/2022364146646356406) 2026-02-13T17:36Z [----] followers, [----] engagements "@joeyeomanss If you want a patched version of GitHub CLI that supports dynamic account selection here it is: https://x.com/awakecoding/status/2022422114297651234s=20 Guess who now has a locally built GitHub CLI that does automatic account selection ๐ https://t.co/at29FyVVOt https://x.com/awakecoding/status/2022422114297651234s=20 Guess who now has a locally built GitHub CLI that does automatic account selection ๐ https://t.co/at29FyVVOt" [X Link](https://x.com/awakecoding/status/2022423791750779071) 2026-02-13T21:33Z [----] followers, [---] engagements "@jaredpalmer @github An alternative pattern with a couple of projects has been to enforce opening an issue first to link with the pull request that fixes it. Contributing a well documented issue is now often more valuable as a contribution than the code to fix the issue" [X Link](https://x.com/awakecoding/status/2022492633063739590) 2026-02-14T02:06Z [----] followers, [---] engagements "@amorriscode I've used this custom action in the past to expose SSH into a GitHub actions runner - someone could build a workflow just to get a clean dev env in the cloud and then connect to it: https://github.com/namespacelabs/breakpoint https://github.com/namespacelabs/breakpoint" [X Link](https://x.com/awakecoding/status/2022518357426393427) 2026-02-14T03:48Z [----] followers, [---] engagements "@SimonHolman But if you'd like a simple GUI tool to configure and use the GitHub CLI why not vibe code one using GitHub Copilot or else Maybe consider Avalonia UI in C# for a cross-platform desktop app. I never learned Go but I could still get the feature I wanted added to the GitHub CLI" [X Link](https://x.com/awakecoding/status/2022656891567100135) 2026-02-14T12:59Z [----] followers, [--] engagements "@blaken Or custom GitHub Copilot instructions it's the best way to ensure other devs will have it working out of the box. This just shows how important it is to regularly test assumptions about which markdown instructions are used and when" [X Link](https://x.com/awakecoding/status/2022658858108293529) 2026-02-14T13:07Z [----] followers, [--] engagements "@SwiftOnSecurity Fun fact: the dancing banana gif is small and has low entropy so it compresses well and can serve as a good animated sample for codec testing. I've recorded it in my Apple Remote Desktop reversing work to get an MVS codec message sequence that could be replayed to the client:" [X Link](https://x.com/awakecoding/status/1514625470402285571) 2022-04-14T15:23Z [----] followers, [---] engagements "@kelseyhightower It was already a problem [--] years ago and it's probably only worse now. I feel like most low-level developers coming out of school today learned it by themselves" [X Link](https://x.com/awakecoding/status/1521624971285512192) 2022-05-03T22:57Z [----] followers, [--] engagements "I found something a bit odd inside WsmSvc.dll (WinRM library). It appears to connect to http://127.0.0.1:80 for proxy auto-detection with a special user agent. Do all Windows machines have such a special localhost HTTP listener on port [--] How does that work exactly ๐ค" [X Link](https://x.com/awakecoding/status/1524019437434814466) 2022-05-10T13:32Z [----] followers, [---] engagements "sspi-rs is taking form: here's FreeRDP using a pure @rustlang Kerberos SSPI module on Linux to perform RDP NLA with Windows Server. This supports both TCP and HTTP(S) transports for Kerberos. KDC detection is still a work in progress but it's coming ๐ช https://github.com/Devolutions/sspi-rs https://github.com/Devolutions/sspi-rs" [X Link](https://x.com/awakecoding/status/1530258453054296065) 2022-05-27T18:43Z [----] followers, [---] engagements "If you think OAuth is hard wait until you see Windows authentication:" [X Link](https://x.com/awakecoding/status/1542234960332996610) 2022-06-29T19:54Z [----] followers, [----] engagements "Get-RdpLogonEvent: extract the list of recent RDP logons from the event viewer and become a magician ๐งโ that can answer impossible questions like "is it really using Kerberos (nope) or did it downgrade to NTLM (again)" ๐ https://gist.github.com/awakecoding/5fda938a5fd2d29ebffb31eb023fe51c https://gist.github.com/awakecoding/5fda938a5fd2d29ebffb31eb023fe51c" [X Link](https://x.com/awakecoding/status/1567323609189736451) 2022-09-07T01:27Z [----] followers, [----] engagements "Am I weird to like Rust as a language for which I mostly have *other* developers write the actual code I still feel vastly more comfortable in C/C++ myself but I would would take Rust deliverables any day over C/C++ deliverables. Code safety quality and stability is higher" [X Link](https://x.com/awakecoding/status/1568343756335902721) 2022-09-09T21:01Z [----] followers, [--] engagements "@ShawnWildermuth @markrussinovich It's very hard to unlearn C/C++ but it doesn't matter young developers can pick up Rust quite fast and that makes it vastly easier than trying to find talented C/C++ developers. https://x.com/awakecoding/status/1568343756335902721t=BDaRl6nF1ZRJcTInNZ3GZw&s=19 Am I weird to like Rust as a language for which I mostly have *other* developers write the actual code I still feel vastly more comfortable in C/C++ myself but I would would take Rust deliverables any day over C/C++ deliverables. Code safety quality and stability is higher" [X Link](https://x.com/awakecoding/status/1571998733138821122) 2022-09-19T23:04Z [----] followers, [--] engagements "@markrussinovich https://ohshitgit.com/ https://ohshitgit.com/" [X Link](https://x.com/awakecoding/status/1578451467484430336) 2022-10-07T18:25Z [----] followers, [---] engagements "@pati_gallardo Want to feel old When my colleague in the security team mentioned it was the biggest OpenSSL vulnerability in the last ten years I wanted to contradict him with heartbleed only to realize that was in [----]. It is literally [--] years ago already ๐ญ" [X Link](https://x.com/awakecoding/status/1587413720677945346) 2022-11-01T11:58Z [----] followers, [--] engagements "Do you want a *FREE* ARM server with [--] CPUs 24GB of RAM and 200GB storage in the cloud ๐ฎ It's possible using the Oracle Cloud Free Tier Here's how ๐ https://cohost.org/awakecoding/post/384627-free-arm-server-with https://cohost.org/awakecoding/post/384627-free-arm-server-with" [X Link](https://x.com/awakecoding/status/1595597041656532992) 2022-11-24T01:55Z [----] followers, [---] engagements "Do you need to create a local user account on a Windows [--] test VM Try using "no@thankyou.com" with password "nope" let it fail and then the installer will let you create a local user account ๐" [X Link](https://x.com/awakecoding/status/1597663967375396865) 2022-11-29T18:49Z [----] followers, [---] engagements "@bitfield Code is static a debugger gives you a dynamic view of the execution with real values in memory which you can't accurately predict otherwise. Good luck finding what's happening with your code at runtime without running it" [X Link](https://x.com/awakecoding/status/1602343231353917440) 2022-12-12T16:42Z [----] followers, [---] engagements "binwalk: the dream binary extraction tool I wish I knew about earlier. "binwalk -e firmimg.d7" found and extracted the embedded squashfs filesystem from an iDRAC firmware update file: https://github.com/ReFirmLabs/binwalk https://github.com/ReFirmLabs/binwalk" [X Link](https://x.com/awakecoding/status/1613188018780737537) 2023-01-11T14:56Z [----] followers, 31.8K engagements "๐ it looks like someone's working on macOS support for Hyper-V https://github.com/acidanthera/MacHyperVSupport https://github.com/acidanthera/MacHyperVSupport" [X Link](https://x.com/awakecoding/status/1615018966862159872) 2023-01-16T16:11Z [----] followers, 31.5K engagements "Something wrong with Azure AD registration on a device dsregcmd /status looks good but something's off DSRegTool.ps1 is the right diagnostic tool for the job it solved another issue today for me: https://learn.microsoft.com/en-us/samples/azure-samples/dsregtool/dsregtool/ https://learn.microsoft.com/en-us/samples/azure-samples/dsregtool/dsregtool/" [X Link](https://x.com/awakecoding/status/1616121964485132290) 2023-01-19T17:14Z [----] followers, [----] engagements "If you're a 7-Zip user I highly recommend trying NanaZip from @MouriNaruto instead: it's built on top of 7-Zip but adds more features like Windows [--] top-level context menu integration. I've been using it for a few weeks and I love it ๐ https://github.com/M2Team/NanaZip https://github.com/M2Team/NanaZip" [X Link](https://x.com/awakecoding/status/1621867444821262337) 2023-02-04T13:45Z [----] followers, 36.8K engagements "The complete guide to RDP with Security Keys by Jonas Markstrm https://link.medium.com/ZuLpgNqFxyb https://link.medium.com/ZuLpgNqFxyb" [X Link](https://x.com/awakecoding/status/1640774819594510344) 2023-03-28T17:56Z [----] followers, 25.2K engagements "Wow when I see a GitHub issue opened on a repository that hasn't seen an update in [--] years I expect spam not someone telling me how much my code is garbage and accusing me of filling GitHub with garbage ๐ I'm sorry for sharing code that was helpful to people other than you" [X Link](https://x.com/awakecoding/status/1642172201083318273) 2023-04-01T14:28Z [----] followers, 92.3K engagements "And here's my response to such garbage I think I've been polite enough and will not engage further ๐" [X Link](https://x.com/awakecoding/status/1642175478596288515) 2023-04-01T14:41Z [----] followers, [----] engagements "Would you like to know how to decrypt RDP traffic live in Wireshark Yes ๐ No ๐ ๐คท Yes ๐ No ๐ ๐คท" [X Link](https://x.com/awakecoding/status/1642912429360201728) 2023-04-03T15:30Z [----] followers, 45.5K engagements "Here's how to decrypt RDP live traffic in Wireshark I will keep expanding on these notes there are so many tips and tricks to know to get it right Shout-out to @BoreanJordan for his awesome script using PSDetour that I've imported and adapted https://github.com/awakecoding/wireshark-rdp Would you like to know how to decrypt RDP traffic live in Wireshark https://github.com/awakecoding/wireshark-rdp Would you like to know how to decrypt RDP traffic live in Wireshark" [X Link](https://x.com/awakecoding/status/1642997939843878914) 2023-04-03T21:10Z [----] followers, 42.6K engagements "Simply put the annoying mstsc certificate prompt users have ignored for years by habit has zero value since the CredSSP protocol not only doesn't care about it but the RDP client will begin NTLM authentication with the server *before it even validates it* - by design won't fix Our latest blog post is out. After years of RDP research I decided that it was time that googling "Is RDP safe to use over untrusted networks" had a good answer with the biggest risk clearly laid out. Spoiler: the answer is no. https://t.co/XNDjevI0Sb Our latest blog post is out. After years of RDP research I decided" [X Link](https://x.com/awakecoding/status/1651242119099473923) 2023-04-26T15:09Z [----] followers, 33.1K engagements "Did you know Remote Desktop Manager [------] added several RDP client security hardening options โ Enforce Network Level Authentication (NLA) โ Enforce Kerberos authentication (no NTLM) These are all options in FreeRDP as the first-party RDP client does not support them ๐" [X Link](https://x.com/awakecoding/status/1651609994394062851) 2023-04-27T15:31Z [----] followers, 23.2K engagements "I have just updated my Wireshark guide to decrypting RDP traffic with notes on FreeRDP IronRDP and instructions on how to export a .pcapng file with embedded TLS session keys such that it can easily be shared with other people https://github.com/awakecoding/wireshark-rdp https://github.com/awakecoding/wireshark-rdp" [X Link](https://x.com/awakecoding/status/1657492591343026177) 2023-05-13T21:06Z [----] followers, 58K engagements "New blog post ๐ฐ PowerShell Remoting Trusted Hosts: What does it even mean ๐ฑ Everything you need to know to make WinRM work properly without cryptic errors and more โ๐ป๐ https://awakecoding.com/posts/powershell-remoting-trusted-hosts-what-does-it-mean/ https://awakecoding.com/posts/powershell-remoting-trusted-hosts-what-does-it-mean/" [X Link](https://x.com/awakecoding/status/1670188752587702274) 2023-06-17T21:56Z [----] followers, 15.5K engagements "Why is it that every time I try to set up RDP smartcard authentication I hit a new error I didn't have before" [X Link](https://x.com/awakecoding/status/1686739591305318401) 2023-08-02T14:03Z [----] followers, 18.2K engagements "Windows smartcard authentication client certificate mapping is easy just refer to the following diagram Why is it that every time I try to set up RDP smartcard authentication I hit a new error I didn't have before https://t.co/iSmMsRxqBu Why is it that every time I try to set up RDP smartcard authentication I hit a new error I didn't have before https://t.co/iSmMsRxqBu" [X Link](https://x.com/awakecoding/status/1686804251962470407) 2023-08-02T18:20Z [----] followers, 14.6K engagements "New blog post ๐ฐ Active Directory LDAPS certificate selection deep dive ๐ The ULTIMATE guide to figuring out why your certificate isn't getting picked up for LDAPS and how to ensure it picks exactly the certificate you want โ๐ป๐ https://awakecoding.com/posts/active-directory-ldaps-certificate-selection-deep-dive/ https://awakecoding.com/posts/active-directory-ldaps-certificate-selection-deep-dive/" [X Link](https://x.com/awakecoding/status/1690382083489697793) 2023-08-12T15:17Z [----] followers, 10.3K engagements "I'm thrilled to announce that I've been promoted to Chief Technology Officer (CTO) at @DevolutionsInc ๐พ๐ฅณ After almost [--] years of hard work I can't wait to help take the company to the next level ๐ช๐" [X Link](https://x.com/anyuser/status/1704936955996217450) 2023-09-21T19:13Z [----] followers, 10.7K engagements "TIL: Windows [--] 23H2 now makes it possible to *uninstall* mstsc.exe ๐ฑ @awakecoding @BurgerhoutJ @smoon_lee Is it uninstalled https://t.co/aoQUTOMNPJ @awakecoding @BurgerhoutJ @smoon_lee Is it uninstalled https://t.co/aoQUTOMNPJ" [X Link](https://x.com/awakecoding/status/1721932663949267305) 2023-11-07T16:48Z [----] followers, 228.2K engagements "Wait what If you launch vmconnect.exe without any parameters you get a simple connection dialog to select the Hyper-V server and target virtual machine from a drop-down list. I had no idea this was even there" [X Link](https://x.com/awakecoding/status/1723851161705365553) 2023-11-12T23:51Z [----] followers, 24.1K engagements "Remote Desktop Manager [------] includes revamped X.509 certificate support The new credential entry can import/export to/from PEM/PFX formats (no OpenSSL) but it can also link to the Windows certificate store and even automatically select an RDP smartcard with PIN injection๐" [X Link](https://x.com/awakecoding/status/1727363488660779312) 2023-11-22T16:28Z [----] followers, 22.9K engagements "Are you tired of manually downloading and installing the Windows SDK just so you can copy dbghelp.dll srcsrv.dll symsrv.dll from it and get clean stack traces in Process Monitor and Process Explorer I made a script to download and extract those https://gist.github.com/awakecoding/71ce70e7ac3b3058d4bfae250f69f54e https://gist.github.com/awakecoding/71ce70e7ac3b3058d4bfae250f69f54e" [X Link](https://x.com/awakecoding/status/1734416482413469903) 2023-12-12T03:34Z [----] followers, 11.6K engagements "New blog post ๐ฐ Decompiling Hyper-V Manager to rebuild it from source ๐จ Help me convince Microsoft to save Hyper-V Manager by open sourcing it Until then here's how to patch it locally from decompiled code https://awakecoding.com/posts/decompiling-hyper-v-manager-to-rebuild-it-from-source/ https://awakecoding.com/posts/decompiling-hyper-v-manager-to-rebuild-it-from-source/" [X Link](https://x.com/anyuser/status/1742310107377975521) 2024-01-02T22:21Z [----] followers, 21.3K engagements "How can I skip the Microsoft Edge first run experience for all users in a lab environment I have to go through [--] () manual steps every single time I open Edge the first time in a test VM for a new user. The "HideFirstRunExperience" registry key doesn't even show up in ProcMon:" [X Link](https://x.com/anyuser/status/1750554127128474062) 2024-01-25T16:20Z [----] followers, 43.1K engagements "Do you want to hide the Microsoft Edge first run experience and change the default tab to Google instead of random news Go under HKLM:SoftwarePoliciesMicrosoftEdge Then set: HideFirstRunExperience = [--] NewTabPageLocation = Enjoy http://google.com How can I skip the Microsoft Edge first run experience for all users in a lab environment I have to go through [--] () manual steps every single time I open Edge the first time in a test VM for a new user. The "HideFirstRunExperience" registry key doesn't even show up in ProcMon: https://t.co/iLhqKMBwC7 http://google.com How can I skip the Microsoft Edge" [X Link](https://x.com/anyuser/status/1750736577746084162) 2024-01-26T04:25Z [----] followers, 28.2K engagements "New blog post ๐ฐ Enable PowerShell WinRM Remoting in PowerShell [--] ๐ฑ Yes you can use PowerShell [--] in the server without switching to SSH-based remoting and here's how to do it for WinRM and Hyper-V PowerShell Direct โ๐ป๐ https://awakecoding.com/posts/enable-powershell-winrm-remoting-in-powershell-7/ https://awakecoding.com/posts/enable-powershell-winrm-remoting-in-powershell-7/" [X Link](https://x.com/awakecoding/status/1755346137303654690) 2024-02-07T21:41Z [----] followers, [----] engagements "Remote Debugging 101: 1) Download winsdksetup.exe 2) Install "Debugging Tools for Windows" 3) Add dbgsrv.exe Windows Firewall exception 4) Go to "C:Program Files (x86)Windows Kits10Debuggersx64" 5) .dbgsrv.exe -t tcp:port=1234 6) From WinDBG: tcp:server=HOSTport=1234" [X Link](https://x.com/awakecoding/status/1757120013960393200) 2024-02-12T19:10Z [----] followers, 10.6K engagements "๐ Exciting world first ๐ True Kerberos support in an RDP web client ๐ก Devolutions: [--] Microsoft: [--] Here's a demo showing IronRDP with Devolutions Gateway connecting using an account member of the Protected Users group in Active Directory ๐" [X Link](https://x.com/anyuser/status/1762858901173579938) 2024-02-28T15:14Z [----] followers, 26.1K engagements "Azure Bastion is Apache Guacamole in disguise" [X Link](https://x.com/anyuser/status/1763314756675371294) 2024-02-29T21:26Z [----] followers, 38.4K engagements "I'm writing raw Win32 GUIs with ATL and ActiveX in [----] ask me anything" [X Link](https://x.com/awakecoding/status/1770154756519891250) 2024-03-19T18:25Z [----] followers, 17.5K engagements "RDP ActiveX host window in plain Win32 with C/C++ and COM without ATL and all that funky stuff that made everything so much harder to understand: I'm writing raw Win32 GUIs with ATL and ActiveX in [----] ask me anything I'm writing raw Win32 GUIs with ATL and ActiveX in [----] ask me anything" [X Link](https://x.com/awakecoding/status/1770913103477166243) 2024-03-21T20:39Z [----] followers, 14.5K engagements "New laptop new Hyper-V Active Directory lab environment all created with a bunch of scripts" [X Link](https://x.com/anyuser/status/1773004009495744952) 2024-03-27T15:07Z [----] followers, 23K engagements "Dreaming of X.509 client certificate auth in RDP without dealing with smartcard limitations We've got you covered with *application-level* virtual smartcards that wrap X.509 certificates Here is MsRdpEx injecting sspi-rs into mstsc.exe instead of credssp.dll and winscard.dll ๐" [X Link](https://x.com/awakecoding/status/1778419968188572133) 2024-04-11T13:48Z [----] followers, 40.9K engagements "Wireshark now has an easy way to embed TLS pre-master secrets (SSLKEYLOGFILE) into a capture file from the GUI: Edit - Inject TLS Secrets This will make it MUCH easier to save decrypted TLS sessions in a .pcapng file to share with others" [X Link](https://x.com/awakecoding/status/1783639701737415045) 2024-04-25T23:30Z [----] followers, 27.1K engagements "@getwired "Do security" by pushing users to install random tools to remove built-in Windows [--] ads that shouldn't be there in the first place" [X Link](https://x.com/awakecoding/status/1786754421600162263) 2024-05-04T13:47Z [----] followers, 19.9K engagements "I have just updated my Wireshark RDP decryption instructions and included a first set of sample decrypted capture files to show different RDP authentication scenarios: https://github.com/awakecoding/wireshark-rdp https://github.com/awakecoding/wireshark-rdp" [X Link](https://x.com/awakecoding/status/1787588763054473259) 2024-05-06T21:02Z [----] followers, 12.4K engagements "@mikeroySoft With everything going on at Broadcom/VMware I had to read that [--] times just to be sure I understood it correctly. It's good news but where's the catch ๐ง" [X Link](https://x.com/anyuser/status/1790392300394135705) 2024-05-14T14:42Z [----] followers, 23.5K engagements "@techspence There are three possible scenarios: 1) Admin is still logged in so you bump him and take over his session (very noticeable) 2) Admin is disconnected but RDP session is inactive you reactivate it and take over 3) Admin has signed out so you create a new RDP session" [X Link](https://x.com/awakecoding/status/1790455980242714964) 2024-05-14T18:55Z [----] followers, [----] engagements "PSA: the list of DNS servers in Windows is not supposed to be an ordered list of DNS servers to try - if you put 8.8.8.8 (Google) or 1.1.1.1 (Cloudflare) as a "fallback" after your internal DNS server you'll just cause random name resolution failures for internal DNS" [X Link](https://x.com/anyuser/status/1791576027174478059) 2024-05-17T21:06Z [----] followers, 127.7K engagements "If you want to diagnose weird random internal DNS resolution failures I suggest you try the Nirsoft DNS Query Sniffer tool it's a real lifesaver ๐ much easier to use than Wireshark: https://www.nirsoft.net/utils/dns_query_sniffer.html https://www.nirsoft.net/utils/dns_query_sniffer.html" [X Link](https://x.com/awakecoding/status/1791576622530773439) 2024-05-17T21:08Z [----] followers, 12.2K engagements "@Spshulem @arcsincall Hum. if you're putting "new display type similar to eInk but with a high refresh rate something that's always been a limiting factor of eInk" in the same bucket as an AI pin you're officially living in a parallel universe" [X Link](https://x.com/awakecoding/status/1794020331633426877) 2024-05-24T14:59Z [----] followers, [---] engagements "RDP smartcard emulation is coming to Remote Desktop Manager [------] with support for mstsc Import your X.509 client certificate set a PIN associate it with your RDP connection entry enable emulated smartcards and then ๐ช watch the magic happen ๐ฅณ Dreaming of X.509 client certificate auth in RDP without dealing with smartcard limitations We've got you covered with *application-level* virtual smartcards that wrap X.509 certificates Here is MsRdpEx injecting sspi-rs into mstsc.exe instead of credssp.dll and winscard.dll ๐ https://t.co/CHS0msqQ98 Dreaming of X.509 client certificate auth in RDP" [X Link](https://x.com/awakecoding/status/1795112951470342376) 2024-05-27T15:20Z [----] followers, 25.9K engagements "Here's Recall capturing temporarily visible passwords from Remote Desktop Manager in a test Azure VM. It's less effective that I would have thought the search results are screenshots and it's unclear how one can obtain the full OCR text it used for the match" [X Link](https://x.com/anyuser/status/1797656613127590300) 2024-06-03T15:48Z [----] followers, 150.5K engagements "The full OCR text with the temporarily visible password is available in the %LocalAppData%CoreAIPlatform.00UKPUUIDukg.db SQLite database nicely gift wrapped ๐ for infostealer malware to exfiltrate:" [X Link](https://x.com/awakecoding/status/1797724492812431677) 2024-06-03T20:18Z [----] followers, 85.5K engagements "@MalwareJake Recall is a melting pot of everything wrong with modern Windows: Per-user app and settings MSIX app setting virtualization Intune MDM per-user policies WinRT generated proxy code Enabled by default opt-out If you hate it it's in there I tell you" [X Link](https://x.com/awakecoding/status/1798168395583746216) 2024-06-05T01:42Z [----] followers, 19.8K engagements "@pavandavuluri "Secure by design and secure by default" the preview version of Recall was made without proper security so how can it be secure by *design* Security was an afterthought you're rushing to *add* security to Recall only *after* it's been pointed out how it was seriously lacking" [X Link](https://x.com/awakecoding/status/1799141561806082425) 2024-06-07T18:09Z [----] followers, [----] engagements "Do you sometimes use RDP through an SSH tunnel Are you aware that this specific use case is not properly covered by the current NTLM deprecation plan from Microsoft Even with IAKerb and the TryIPSPN solution connecting to "localhost:local port" will never work for Kerberos" [X Link](https://x.com/awakecoding/status/1800168106490531886) 2024-06-10T14:08Z [----] followers, 19K engagements "New blog post ๐ฐ Mac RDP Client: Kerberos and Protected Users Guide ๐ Are you trying to harden your Active Directory environment by eliminating NTLM usage but RDP from Macs stands in the way Read this โ๐ป๐ https://awakecoding.com/posts/mac-rdp-client-kerberos-and-protected-users-guide/ https://awakecoding.com/posts/mac-rdp-client-kerberos-and-protected-users-guide/" [X Link](https://x.com/awakecoding/status/1801352335341359338) 2024-06-13T20:33Z [----] followers, 23.8K engagements "Proxy servers edited through the Windows Settings app remain in the registry after being disabled *and removed* in the UI where it still gets picked up by WinHTTP APIs Remove-Item HKLM:SYSTEMCurrentControlSetServicesiphlpsvcParametersProxyMgr -Recurse -EA SilentlyContinue" [X Link](https://x.com/awakecoding/status/1813211472211644839) 2024-07-16T13:57Z [----] followers, 10.4K engagements "When all you did was add "-Parallel" to a #PowerShell foreach loop and the script runs 250% faster ๐ฅ If you are still using PowerShell [--] you are missing one of the greatest features In PowerShell [--] we have the option to do $something ForEach-Object -Parallel "do the thing" Read all about it here: https://t.co/40Ndu8wmum If you are still using PowerShell [--] you are missing one of the greatest features In PowerShell [--] we have the option to do $something ForEach-Object -Parallel "do the thing" Read all about it here: https://t.co/40Ndu8wmum" [X Link](https://x.com/awakecoding/status/1818743744688275845) 2024-07-31T20:21Z [----] followers, 23.4K engagements "I know Windows [--] is making it increasingly harder to create an *initial* local user account but I hadn't noticed the new dark patterns that make it harder to create additional local user accounts. This is just bad for testing:" [X Link](https://x.com/awakecoding/status/1823808248358822235) 2024-08-14T19:45Z [----] followers, 15.8K engagements "Remote Desktop Manager [------] is out Azure Privileged Identity Management (PIM) One Identity Safeguard Delinea Secret Server proxy for RDP and SSH HP iLO native console Proton Pass password manager Barracuda NAC VPN Add-on ServiceNow ticketing service https://blog.devolutions.net/2024/09/whats-new-in-remote-desktop-manager-20243 https://blog.devolutions.net/2024/09/whats-new-in-remote-desktop-manager-20243" [X Link](https://x.com/awakecoding/status/1838600906994057289) 2024-09-24T15:26Z [----] followers, 19.8K engagements "Why am I only finding out about RemoteSessionNamedPipeServer.CreateCustomNamedPipeServer() now Any .NET process can suddenly become a PowerShell Host *server* that you can connect to via named pipe from a regular PowerShell terminal: https://learn.microsoft.com/en-us/dotnet/api/system.management.automation.remoting.remotesessionnamedpipeserver.createcustomnamedpipeserverview=powershellsdk-7.4.0 https://learn.microsoft.com/en-us/dotnet/api/system.management.automation.remoting.remotesessionnamedpipeserver.createcustomnamedpipeserverview=powershellsdk-7.4.0" [X Link](https://x.com/awakecoding/status/1838690281828561002) 2024-09-24T21:21Z [----] followers, 12.4K engagements "Do you plan to fully decommission Active Directory within the next [--] years By this I mean getting rid of domain controllers *entirely* without hybrid-joined systems" [X Link](https://x.com/anyuser/status/1841662949481418804) 2024-10-03T02:13Z [----] followers, 46K engagements "How to hide the Windows [--] 24H2 "Learn more about this picture" desktop icon: Set-ItemProperty -Path 'HKCU:SoftwareMicrosoftWindowsCurrentVersionExplorerHideDesktopIconsNewStartPanel' -Name '2cc5ca98-6485-489a-920e-b3e88a6ccce3' -Value [--] Right-click desktop + refresh" [X Link](https://x.com/anyuser/status/1841984603227066692) 2024-10-03T23:32Z [----] followers, 38K engagements "RDP is designed to expose a LOT from the client machine to the server - now imagine what can be done if an attacker successfully gets a victim to connect to a malicious RDP server. Signing .RDP files provides a false sense of security that malicious actors use for their benefit The spear-phishing emails in this campaign were sent to thousands of targets in over [---] organizations and contained a signed Remote Desktop Protocol (RDP) configuration file that connected to an actor-controlled server. The spear-phishing emails in this campaign were sent to thousands of targets in over 100" [X Link](https://x.com/awakecoding/status/1851354245422813597) 2024-10-29T20:03Z [----] followers, 28.5K engagements "@SwiftOnSecurity Is it a good time to remind you that RDM Mac exists and that if you want to access your Mac from Windows RDM has an Apple Remote Desktop client that supports the full protocol (we reverse engineered it)" [X Link](https://x.com/awakecoding/status/1852180898289954890) 2024-11-01T02:48Z [----] followers, 34.5K engagements "Who would like to review my slides for my upcoming RDP IO Lab presentation on "Decrypting and Inspecting RDP traffic in Wireshark" I have finished my first draft but could use some feedback. It's supposed to be [--] minutes in total including Q&A. Just DM me with your email and I'll send you a copy" [X Link](https://x.com/anyuser/status/1879547364081311797) 2025-01-15T15:13Z [----] followers, 80.5K engagements "TIL: virtual machine names in Azure apparently go through a trademark filter so my Windows lab VM can't be called "windows-lab" ๐คฆ "The name 'windows-lab' or a part of the name is a trademarked or reserved word."" [X Link](https://x.com/anyuser/status/1880330646415188332) 2025-01-17T19:05Z [----] followers, 12K engagements "My RDP IO Lab presentation on "Decrypting and Inspecting RDP traffic in Wireshark" was just *cancelled* - apparently Microsoft decided they would only do internal presentations with no guest speakers ๐ What's the point of even trying when you get treated like this Who would like to review my slides for my upcoming RDP IO Lab presentation on "Decrypting and Inspecting RDP traffic in Wireshark" I have finished my first draft but could use some feedback. It's supposed to be [--] minutes in total including Q&A. Just DM me with your email and https://t.co/i6ymOdAu2q Who would like to review my" [X Link](https://x.com/awakecoding/status/1884353252344394016) 2025-01-28T21:29Z [----] followers, 68.7K engagements "Update: I have decided to cancel my attendance at the RDP IO Lab event and to make the presentation as a Devolutions webinar instead. Stay tuned for the registration link which will be coming up soon My RDP IO Lab presentation on "Decrypting and Inspecting RDP traffic in Wireshark" was just *cancelled* - apparently Microsoft decided they would only do internal presentations with no guest speakers ๐ What's the point of even trying when you get treated like this My RDP IO Lab presentation on "Decrypting and Inspecting RDP traffic in Wireshark" was just *cancelled* - apparently Microsoft" [X Link](https://x.com/awakecoding/status/1884767501566783893) 2025-01-30T00:56Z [----] followers, 10.4K engagements "๐ Webinar: Decrypting RDP Traffic in Wireshark ๐ ๐ Feb [--] 9:00 AM 10:00 AM EST Learn how to analyze and decrypt RDP traffic like a pro. Can't attend live No worries you'll get the slides & recording afterward if you register๐ https://events.ringcentral.com/events/decrypting-rdp-traffic-in-wireshark-e9e4e309-e90b-4c99-a742-325c00669fde/registration https://events.ringcentral.com/events/decrypting-rdp-traffic-in-wireshark-e9e4e309-e90b-4c99-a742-325c00669fde/registration" [X Link](https://x.com/anyuser/status/1885086828136481254) 2025-01-30T22:04Z [----] followers, [----] engagements "๐ป Ever wondered what's happening inside your RDP sessions ๐ Join my webinar tomorrow (Feb [--] 9:00 AM EST) to learn how to decrypt RDP traffic in Wireshark and gain deeper visibility into your remote connections. ๐ Dont miss it Register now: https://devo-inc.net/4hnZyqX https://devo-inc.net/4hnZyqX" [X Link](https://x.com/anyuser/status/1888984322067022215) 2025-02-10T16:12Z [----] followers, 31.4K engagements "My webinar "Decrypting RDP Traffic in Wireshark" went well this morning we had over [---] attendees out of [---] people registered. As promised here are the slides for the presentation: https://raw.githubusercontent.com/awakecoding/wireshark-rdp/master/documents/Devolutions_2025_Decrypting_RDP_Traffic_in_Wireshark.pdf ๐ป Ever wondered what's happening inside your RDP sessions ๐ Join my webinar tomorrow (Feb [--] 9:00 AM EST) to learn how to decrypt RDP traffic in Wireshark and gain deeper visibility into your remote connections. ๐ Dont miss it Register now: https://t.co/Kdmt1aIsYA" [X Link](https://x.com/anyuser/status/1889360256976740681) 2025-02-11T17:06Z [----] followers, 28.8K engagements "I'm thinking of writing a 'Top [--] Things You Didn't Know About RDP' blog post. What would you be most interested in Obscure mstsc command-line options Lesser-known .RDP file settings I'm looking for bite-sized insights that can be explained in a single paragraph" [X Link](https://x.com/anyuser/status/1891962160957260195) 2025-02-18T21:25Z [----] followers, 11.1K engagements "Need to use RDP without leaving traces Learn how to enable MSTSC public mode for more privacy and security in your remote sessions. Perfect for shared environments and enhanced confidentiality ๐๐ป ๐ Read my latest blog post: https://blog.devolutions.net/2025/03/using-rdp-without-leaving-traces-the-mstsc-public-mode/ https://blog.devolutions.net/2025/03/using-rdp-without-leaving-traces-the-mstsc-public-mode/" [X Link](https://x.com/awakecoding/status/1897716233073467595) 2025-03-06T18:29Z [----] followers, 16.9K engagements "Grammarly and UI Automation applications are commonly the cause of hard-to-diagnose problems - years after @SwiftOnSecurity's tweet we've identified Grammarly as the root cause behind Remote Desktop Manager instability after a long investigation: https://forum.devolutions.net/topics/43305/remote-desktop-manager-crashing-multiple-times-a-day#204620 https://forum.devolutions.net/topics/43305/remote-desktop-manager-crashing-multiple-times-a-day#204620" [X Link](https://x.com/anyuser/status/1899478361535062423) 2025-03-11T15:11Z [----] followers, 30.2K engagements "๐คฃ excellent "MSTSC IS NOT GOING AWAY" message to fix what Microsoft can't communicate properly from https://techcommunity.microsoft.com/blog/Windows-ITPro-blog/windows-app-to-replace-remote-desktop-app-for-windows/4390893/replies/4394516 https://techcommunity.microsoft.com/blog/Windows-ITPro-blog/windows-app-to-replace-remote-desktop-app-for-windows/4390893/replies/4394516" [X Link](https://x.com/anyuser/status/1902015162384560546) 2025-03-18T15:12Z [----] followers, [----] engagements "Cloudflare took my advice and built their web-based RDP client using IronRDP with the RDCleanPath protocol extension we pioneered in Devolutions Gateway. Apache Guacamole and Azure Bastion watch out: there's a superior design in town and it came from @DevolutionsInc. ๐ช๐ Cloudflare now provides clientless browser-based support for the Remote Desktop Protocol (RDP). https://t.co/wJ3eCz4smf #SecurityWeek Cloudflare now provides clientless browser-based support for the Remote Desktop Protocol (RDP). https://t.co/wJ3eCz4smf #SecurityWeek" [X Link](https://x.com/awakecoding/status/1903095490708656370) 2025-03-21T14:44Z [----] followers, 18K engagements "My Windows [--] start menu was unresponsive today unable to find local apps. I disabled Bing search "feature" and then it started working as expected: Set-ItemProperty -Path "HKCU:SOFTWAREMicrosoftWindowsCurrentVersionSearch" -Name "BingSearchEnabled" -Value 0" [X Link](https://x.com/awakecoding/status/1904231466625540543) 2025-03-24T17:58Z [----] followers, 28.5K engagements "Did you know that Remote Desktop Manager natively supports connecting to Macs using the Apple Remote Desktop (ARD) protocol which is *significantly* faster than standard VNC https://devolutions.net/integration-center/apple-remote-desktop/ https://devolutions.net/integration-center/apple-remote-desktop/" [X Link](https://x.com/awakecoding/status/1904274547701920069) 2025-03-24T20:50Z [----] followers, [----] engagements "New blog post ๐ฐ Isolating a Windows Service Process for Easier Debugging ๐ Find out which svchost.exe process hosts a service and how to make that service run in its own dedicated process ๐ ๐ฅ๐ https://awakecoding.com/posts/isolating-a-windows-service-process-for-easier-debugging/ https://awakecoding.com/posts/isolating-a-windows-service-process-for-easier-debugging/" [X Link](https://x.com/awakecoding/status/1908983935251476490) 2025-04-06T20:43Z [----] followers, [----] engagements "RDP Auth PSA: FIDO2 = smartcards. They use very different API layers and they're not the same. Smartcards: Kerberos with PKINIT and X.509 certificates requires a KDC line-of-sight FIDO2: doesn't use Kerberos requires RDP RDS AAD auth and being joined to Entra ID" [X Link](https://x.com/anyuser/status/1909622261851505018) 2025-04-08T15:00Z [----] followers, [----] engagements "Helping someone use PowerShell every time: Set-ExecutionPolicy Unrestricted Helping someone use PowerShell Remoting every time: Set-Item 'WSMan:localhostClientTrustedHosts' -Value '*' -Force I've literally had to help with both today" [X Link](https://x.com/awakecoding/status/1912154799102996798) 2025-04-15T14:43Z [----] followers, 12K engagements "Im looking for on-demand virtual lab platforms that can spin up full Active Directory environments (8 vCPUs 64GB RAM nested virt). It needs to support complex enterprise scenarios to showcase Remote Desktop Manager with other Devolutions products. Any recommendations ๐" [X Link](https://x.com/anyuser/status/1912257837234860350) 2025-04-15T21:32Z [----] followers, 16.6K engagements "@MicrosoftDesign UX designer: look at how all my app icons are so neatly organized Actual user: I just typed the name of my app I want to launch - not only is it sluggish to return results but sometimes it never returns them at all A Start menu that sometimes doesn't launch apps is useless" [X Link](https://x.com/awakecoding/status/1920931750034677985) 2025-05-09T19:59Z [----] followers, [----] engagements "If you're not using ChatGPT to generate #PowerShell cmdlets for just about anything you need in the moment you are seriously missing out ๐" [X Link](https://x.com/awakecoding/status/1920938502792901019) 2025-05-09T20:26Z [----] followers, 30.7K engagements "Do you want to feel like an RDP expert without reading thousands of pages of protocol specifications Decrypt TLS in Wireshark export your capture in a text file with all details upload it to ChatGPT and start asking questions" [X Link](https://x.com/awakecoding/status/1923104016638050731) 2025-05-15T19:51Z [----] followers, [----] engagements "๐ It's official I am now a Microsoft MVP in the PowerShell & Windows categories Years of digging โ into RDP and Windows internals and automating all the things with #PowerShell have finally paid off ๐ช I can't wait to meet everyone at the next MVP Summit #MVPBuzz" [X Link](https://x.com/anyuser/status/1929167723788955846) 2025-06-01T13:26Z [----] followers, 14.1K engagements "The Winlogon registry keys for autologon don't work with the Hyper-V enhanced session mode so I undusted an old credential provider in C++ made it load default credentials from the registry and poof it works This will be very useful for lab environments ๐" [X Link](https://x.com/anyuser/status/1934751132657598551) 2025-06-16T23:13Z [----] followers, 36K engagements "It's here - a first release of RdpCredProv a Windows credential provider with autologon capabilities better than the original ๐ Yes it works even with the Hyper-V enhanced session mode Grab a copy from and then follow the instructions from the readme ๐ https://github.com/Devolutions/RdpCredProv The Winlogon registry keys for autologon don't work with the Hyper-V enhanced session mode so I undusted an old credential provider in C++ made it load default credentials from the registry and poof it works This will be very useful for lab environments ๐ https://t.co/l0J3vBfKow" [X Link](https://x.com/anyuser/status/1935075577444114801) 2025-06-17T20:42Z [----] followers, [----] engagements "I've got new shiny decoration for the office ๐๐" [X Link](https://x.com/awakecoding/status/1940071773833503058) 2025-07-01T15:35Z [----] followers, [----] engagements Limited data mode. Full metrics available with subscription: lunarcrush.com/pricing
@awakecoding Marc-Andrรฉ MoreauMarc-Andrรฉ Moreau posts on X about how to, microsoft, if you, azure the most. They currently have [-----] followers and [---] posts still getting attention that total [-----] engagements in the last [--] hours.
Social category influence technology brands 18.18% stocks 9.09% finance 0.7% social networks 0.7%
Social topic influence how to 8.39%, microsoft 6.99%, if you 6.99%, azure 4.2%, claude code #1666, ai 2.8%, apple 2.8%, environment 2.8%, random 2.8%, level 2.1%
Top accounts mentioned or mentioned by @pierceboggan @burkeholland @nathanmcnulty @ibuildthecloud @haefeledev @steskalj @amorriscode @thdxr @przemyslawklys @stefanolson @taurisjoe @blaken @behaviourtree @orenme @unixterminal @imog @dubeg @horizonsecured @alexaka1 @davidfowl
Top assets mentioned Microsoft Corp. (MSFT) Alphabet Inc Class A (GOOGL) Cloudflare, Inc. (NET) ServiceNow Inc (NOW)
Top posts by engagements in the last [--] hours
"Why did I not realize the GitHub CLI is open source I don't write Go but I have GitHub Copilot. Let me see if I can implement dynamic account selection in gh cli because it's really the most annoying thing about using two GitHub accounts at the same time New blog post ๐ฐ Configuring SSH for personal and work GitHub accountsproperly. Automatic key selection automatic email overrides and where GitHub tooling still falls short. ๐๐ป https://t.co/QzilrYR4ba New blog post ๐ฐ Configuring SSH for personal and work GitHub accountsproperly. Automatic key selection automatic email overrides and where"
X Link 2026-02-13T20:24Z [----] followers, [----] engagements
"@amorriscode But then. GitHub Copilot agent is already there and you don't need to build a flaky DIY solution. It would just be a fun experiment unless someone really takes the time to build it to come close to the current level of GitHub Copilot agent"
X Link 2026-02-14T03:51Z [----] followers, [---] engagements
"What's cooking PowerShell Remoting over SSH in pure .NET without the OpenSSH client. And yes it can interactively prompt for credentials or accept them as input for automation ๐"
X Link 2026-02-03T22:04Z [----] followers, [----] engagements
"@GergelyOrosz in your latest deepdive you mention how in one case GitHub Copilot adoption was hindered by an underwhelming model being selected by default. We've hit the exact same issue ourselves I even opened an issue. @pierceboggan https://github.com/microsoft/vscode/issues/276993 https://github.com/microsoft/vscode/issues/276993"
X Link 2026-02-04T15:18Z [----] followers, 39.2K engagements
"@burkeholland Guess why I prefer to use GitHub Copilot in VSCode: there's a built-in terminal separate from the AI chat. I can ask GitHub Copilot to use my terminal yet I can use the terminal directly myself so I have the best of both worlds"
X Link 2026-02-05T19:23Z [----] followers, [---] engagements
"Good news: VSCode finally shows detailed context window usage Bad news: Claude Opus [---] is capped at 128K just like all the other models I don't really notice the difference but just knowing it's capped at 128K with no option to increase it is annoying"
X Link 2026-02-05T22:48Z [----] followers, [----] engagements
"@BehaviourTree @burkeholland @OrenMe I'm not sure if it's the training set or just better tooling used by the AI agent. I use GitHub Copilot all the time now to diagnose issues live. There's a lot it can figure out when you let it run commands to gain more insight into an issue especially live processes"
X Link 2026-02-06T01:09Z [----] followers, [--] engagements
"@nolemolt @BehaviourTree @burkeholland @OrenMe Speaking of which Claude Code and most of the CLI tools out there use primitive grepping of files for search which performs poorly on large code bases. GitHub Copilot and Cursor have excellent automatic workspace indexing. It makes a huge difference in speed and accuracy"
X Link 2026-02-06T01:18Z [----] followers, [--] engagements
"@unixterminal Really As in GitHub Copilot or the "other" Copilot"
X Link 2026-02-06T02:18Z [----] followers, [---] engagements
"@ibuildthecloud not even clang-llvm I've got my own builds: https://github.com/awakecoding/llvm-prebuilt https://github.com/awakecoding/llvm-prebuilt"
X Link 2026-02-06T03:06Z [----] followers, [--] engagements
"@ibuildthecloud but you know what I'd like to see $20K burned building a functional RDP client from scratch. I bet they can't pull this one off because it's very hard to get AI agents to loop on something they have trouble getting feedback on. It's very hard to test RDP development in scripts"
X Link 2026-02-06T03:17Z [----] followers, [--] engagements
"@NathanMcNulty @thanaen_dev Large context windows for models that support it are generally $$$ more expensive ๐ซฐ so that's normal. We've had developers internally who cost like 750$ in a month because they cranked it to the max in Claude Code before we had to tell them not to do that"
X Link 2026-02-06T21:47Z [----] followers, [--] engagements
"@pierceboggan My suggestion would be to do the same as Cursor with a reduced context window by default and a "max mode" to crank the context window to the maximum supported by the model with a higher cost: https://cursor.com/docs/models https://cursor.com/docs/models"
X Link 2026-02-06T23:30Z [----] followers, [---] engagements
"@NathanMcNulty @merill I wish I could see your face as you realize what Nathan has done ๐คฃ"
X Link 2026-02-08T01:16Z [----] followers, [---] engagements
"Has anyone written an agent skill to efficiently reference Windows protocol specifications I know there's the Microsoft Learn Docs MCP server but the specs have a regular structure and also contain overview documents etc. https://learn.microsoft.com/en-us/openspecs/windows_protocols/ms-winprotlp/e36c976a-6263-42a8-b119-7a3cc41ddd2a https://learn.microsoft.com/en-us/openspecs/windows_protocols/ms-winprotlp/e36c976a-6263-42a8-b119-7a3cc41ddd2a"
X Link 2026-02-08T16:53Z [----] followers, [---] engagements
"The PowerShell release schedule really needs to be improved to match the .NET runtime. We've migrated our core C# libraries to .NET [--] ahead of our next major product release in a few weeks and just found out there's no stable version of PowerShell based on .NET [--] yet: https://github.com/PowerShell/PowerShell/discussions/26754 https://github.com/PowerShell/PowerShell/discussions/26754"
X Link 2026-02-09T21:05Z [----] followers, [---] engagements
"PowerShell is deeply reliant on the .NET runtime anyway so it would just make sense to keep the major releases in sync. Why not PowerShell [----] for .NET [--] Or PowerShell [--] while we're at it I don't care how but we need .NET runtime updates faster than that in PowerShell"
X Link 2026-02-09T21:08Z [----] followers, [---] engagements
"@haefeledev This was an ideal scenario - I ported code which I wrote [--] years ago in FreeRDP. It had test vectors so I created a 37-step plan to port it from C to Rust properly using this prompt to craft the plan: https://github.com/awakecoding/copilot-resources/blob/master/prompts/long-plan-orchestrator.prompt.md https://github.com/awakecoding/copilot-resources/blob/master/prompts/long-plan-orchestrator.prompt.md"
X Link 2026-02-09T22:23Z [----] followers, [--] engagements
"@haefeledev I then had a few more prompts to check for various things and it caught more problems. I cleaned it up today and submitted a pull request confident that it actually worked as I had GitHub Copilot make RDP connections and grab screenshots and logs for all compression levels"
X Link 2026-02-09T22:25Z [----] followers, [--] engagements
"@AvaloniaUI @shanselman your next vibe coded project could now be a desktop app written using C# and Avalonia UI ๐"
X Link 2026-02-10T12:38Z [----] followers, [---] engagements
"RDP WebAuthn redirection is implemented as a dynamic virtual channel plugin in C:WindowsSystem32webauthn.dll. For the fun of it I asked GitHub Copilot in VSCode to make a plan to implement the DVC COM APIs in Rust such that it could be loaded in IronRDP. Here it is working:"
X Link 2026-02-10T21:10Z [----] followers, [----] engagements
"@thdxr Everyone knows TUI stands for "Terrible UI" while GUI stands for "Great UI" ๐คช"
X Link 2026-02-10T21:15Z [----] followers, [----] engagements
"@steskalj this in plan mode. generating the plan literally took a good [--] minutes of Opus [---] analyzing everything. executing the plan took less than an hour followed by some manual testing and refinement"
X Link 2026-02-10T21:59Z [----] followers, [---] engagements
"@imog @NathanMcNulty In the end what matters the most is being able to develop the software with the features you want implemented according to your specifications. I don't really miss spending hours mindlessly writing code to test if it builds and runs only to make another edit to try again"
X Link 2026-02-11T02:20Z [----] followers, [--] engagements
"@dubeg_ @horizon_secured Kerberos is wrapped in CredSSP which still ends with the full credentials being delegated to the server for a remote interactive logon. The RDP server keeps that password in memory without clearing it after it is no longer needed basically waiting for mimikatz to grab it"
X Link 2026-02-11T03:59Z [----] followers, [--] engagements
"@dubeg_ @horizon_secured The restricted admin mode skips the delegation step but you end up with a network logon type like SMB. Remote Credential Guard skips the delegation step but does a remote interactive logon by doing RPC to expose the client LSA to the server over a virtual channel"
X Link 2026-02-11T04:02Z [----] followers, [--] engagements
"@burkeholland @hmorneau I don't know I like Opus [---] so far. It's hard to tell the difference with Opus [---] but I see no reason to dislike it it performs really well"
X Link 2026-02-11T04:04Z [----] followers, [---] engagements
"@thdxr Can we get Alt+V for image pasting enabled by default next This would really help for Windows support and align OpenCode to support the same shortcut supported by Claude Code and Copilot CLI: https://github.com/anomalyco/opencode/issues/8490 https://github.com/anomalyco/opencode/issues/8490"
X Link 2026-02-11T13:19Z [----] followers, [---] engagements
"@ibuildthecloud Yes install Remote Desktop Manager (Free) we have a real Apple Remote Desktop client the high-performance VNC variant used by the built-in macOS remote desktop server. The built-in macOS server supports vanilla VNC but with poor performance. https://devolutions.net/ https://devolutions.net/"
X Link 2026-02-11T15:57Z [----] followers, [---] engagements
"ICYMI there's a discussion right now about #PowerShell releases being so far behind the .NET runtime that we are unable to fully migrate to .NET [--] in all of our products at Devolutions. PowerShell [---] is lagging behind by several months: https://github.com/PowerShell/PowerShell/discussions/26754#discussioncomment-15770364 https://github.com/PowerShell/PowerShell/discussions/26754#discussioncomment-15770364"
X Link 2026-02-11T20:01Z [----] followers, [----] engagements
"@pierceboggan we're looking at converting all of our custom commands into skills. I just tried and slash completion for skills only works in VSCode Insiders for me. Got any idea if it's an optional feature that can be enabled in VSCode or if it's coming to VSCode soon"
X Link 2026-02-11T22:04Z [----] followers, [---] engagements
"@thdxr When would you use codex over opus Do you consider it a one-size-fits-all model or a model better suited for planning versus executing etc"
X Link 2026-02-12T01:06Z [----] followers, [---] engagements
"I mean they even managed to break it even more with the latest release: https://github.com/vercel-labs/agent-browser/issues/398 https://github.com/vercel-labs/agent-browser/issues/398"
X Link 2026-02-12T14:48Z [----] followers, [---] engagements
"Let's see how GPT-5.3 codex performs in GitHub Copilot"
X Link 2026-02-12T14:49Z [----] followers, [----] engagements
"@TheCodeMan__ Can you do this with Avalonia UI instead of the browser Let's say I have 1500+ WInForms dialogs to migrate"
X Link 2026-02-12T16:08Z [----] followers, [---] engagements
"@alexaka1 It's a problem when Claude Code needs to co-exist with other tools in a large monorepo. We have multiple nested files automatically synchronized with but they still need to be loaded properly when opening the monorepo root http://AGENTS.md http://CLAUDE.md http://AGENTS.md http://CLAUDE.md"
X Link 2026-02-13T19:17Z [----] followers, [---] engagements
"I just wish VSCode had a built-in agentic browser to rival the one in Cursor. I know there's the "simple browser" extension but maybe rename it to something that doesn't look basic and put a browser-use button in the GitHub Copilot chat"
X Link 2026-02-12T17:21Z [----] followers, [---] engagements
"@davidfowl Have you tried the Claude Code desktop app https://code.claude.com/docs/en/desktop https://code.claude.com/docs/en/desktop"
X Link 2026-02-12T21:26Z [----] followers, [---] engagements
"@navneet_rabdiya Did you submit a pull request I would really like dynamic account selection to be supported upstream so I opened a PR myself with my changes: https://github.com/cli/cli/pull/12681 https://github.com/cli/cli/pull/12681"
X Link 2026-02-14T01:44Z [----] followers, [--] engagements
"@SimonHolman You don't need to bulk-assign a few mapping rules should do the trick. anything under is mapped to my personal account and anything under is mapped to my work account. The rest uses my currently selected account. Problem solved http://github.com/Devolutions http://github.com/awakecoding http://github.com/Devolutions http://github.com/awakecoding"
X Link 2026-02-14T12:56Z [----] followers, [--] engagements
"@PrzemyslawKlys @ibuildthecloud The "adaptive" quality is really the one you want to use it's a form of progressive JPEG with two passes so if you drag stuff around it'll just skip sending the second pass to get a temporary higher frame rate"
X Link 2026-02-11T18:59Z [----] followers, [--] engagements
"@stefanolson @taurisjoe @davidfowl It's frankly a lot better than the terminal UI. There are still some missing things like slash completion for commands/skills but I'm crossing fingers they fix that soon"
X Link 2026-02-13T00:53Z [----] followers, [--] engagements
"@pierceboggan This is a really good move. Cursor doesn't have the distinction between stable and insiders and as a result lots of features are available much faster in Cursor than in VSCode stable even if they're in VSCode Insiders. This will help close the gap much faster"
X Link 2026-02-13T03:27Z [----] followers, [---] engagements
"Nested usage in VSCode doesn't work for me. I had to create explicit custom instructions in my .github/copilot-instructions.md to force it to read files when dealing with anything in related directories: http://AGENTS.md http://AGENTS.md"
X Link 2026-02-13T17:36Z [----] followers, [----] engagements
"@joeyeomanss If you want a patched version of GitHub CLI that supports dynamic account selection here it is: https://x.com/awakecoding/status/2022422114297651234s=20 Guess who now has a locally built GitHub CLI that does automatic account selection ๐ https://t.co/at29FyVVOt https://x.com/awakecoding/status/2022422114297651234s=20 Guess who now has a locally built GitHub CLI that does automatic account selection ๐ https://t.co/at29FyVVOt"
X Link 2026-02-13T21:33Z [----] followers, [---] engagements
"@jaredpalmer @github An alternative pattern with a couple of projects has been to enforce opening an issue first to link with the pull request that fixes it. Contributing a well documented issue is now often more valuable as a contribution than the code to fix the issue"
X Link 2026-02-14T02:06Z [----] followers, [---] engagements
"@amorriscode I've used this custom action in the past to expose SSH into a GitHub actions runner - someone could build a workflow just to get a clean dev env in the cloud and then connect to it: https://github.com/namespacelabs/breakpoint https://github.com/namespacelabs/breakpoint"
X Link 2026-02-14T03:48Z [----] followers, [---] engagements
"@SimonHolman But if you'd like a simple GUI tool to configure and use the GitHub CLI why not vibe code one using GitHub Copilot or else Maybe consider Avalonia UI in C# for a cross-platform desktop app. I never learned Go but I could still get the feature I wanted added to the GitHub CLI"
X Link 2026-02-14T12:59Z [----] followers, [--] engagements
"@blaken Or custom GitHub Copilot instructions it's the best way to ensure other devs will have it working out of the box. This just shows how important it is to regularly test assumptions about which markdown instructions are used and when"
X Link 2026-02-14T13:07Z [----] followers, [--] engagements
"@SwiftOnSecurity Fun fact: the dancing banana gif is small and has low entropy so it compresses well and can serve as a good animated sample for codec testing. I've recorded it in my Apple Remote Desktop reversing work to get an MVS codec message sequence that could be replayed to the client:"
X Link 2022-04-14T15:23Z [----] followers, [---] engagements
"@kelseyhightower It was already a problem [--] years ago and it's probably only worse now. I feel like most low-level developers coming out of school today learned it by themselves"
X Link 2022-05-03T22:57Z [----] followers, [--] engagements
"I found something a bit odd inside WsmSvc.dll (WinRM library). It appears to connect to http://127.0.0.1:80 for proxy auto-detection with a special user agent. Do all Windows machines have such a special localhost HTTP listener on port [--] How does that work exactly ๐ค"
X Link 2022-05-10T13:32Z [----] followers, [---] engagements
"sspi-rs is taking form: here's FreeRDP using a pure @rustlang Kerberos SSPI module on Linux to perform RDP NLA with Windows Server. This supports both TCP and HTTP(S) transports for Kerberos. KDC detection is still a work in progress but it's coming ๐ช https://github.com/Devolutions/sspi-rs https://github.com/Devolutions/sspi-rs"
X Link 2022-05-27T18:43Z [----] followers, [---] engagements
"If you think OAuth is hard wait until you see Windows authentication:"
X Link 2022-06-29T19:54Z [----] followers, [----] engagements
"Get-RdpLogonEvent: extract the list of recent RDP logons from the event viewer and become a magician ๐งโ that can answer impossible questions like "is it really using Kerberos (nope) or did it downgrade to NTLM (again)" ๐ https://gist.github.com/awakecoding/5fda938a5fd2d29ebffb31eb023fe51c https://gist.github.com/awakecoding/5fda938a5fd2d29ebffb31eb023fe51c"
X Link 2022-09-07T01:27Z [----] followers, [----] engagements
"Am I weird to like Rust as a language for which I mostly have other developers write the actual code I still feel vastly more comfortable in C/C++ myself but I would would take Rust deliverables any day over C/C++ deliverables. Code safety quality and stability is higher"
X Link 2022-09-09T21:01Z [----] followers, [--] engagements
"@ShawnWildermuth @markrussinovich It's very hard to unlearn C/C++ but it doesn't matter young developers can pick up Rust quite fast and that makes it vastly easier than trying to find talented C/C++ developers. https://x.com/awakecoding/status/1568343756335902721t=BDaRl6nF1ZRJcTInNZ3GZw&s=19 Am I weird to like Rust as a language for which I mostly have other developers write the actual code I still feel vastly more comfortable in C/C++ myself but I would would take Rust deliverables any day over C/C++ deliverables. Code safety quality and stability is higher"
X Link 2022-09-19T23:04Z [----] followers, [--] engagements
"@markrussinovich https://ohshitgit.com/ https://ohshitgit.com/"
X Link 2022-10-07T18:25Z [----] followers, [---] engagements
"@pati_gallardo Want to feel old When my colleague in the security team mentioned it was the biggest OpenSSL vulnerability in the last ten years I wanted to contradict him with heartbleed only to realize that was in [----]. It is literally [--] years ago already ๐ญ"
X Link 2022-11-01T11:58Z [----] followers, [--] engagements
"Do you want a FREE ARM server with [--] CPUs 24GB of RAM and 200GB storage in the cloud ๐ฎ It's possible using the Oracle Cloud Free Tier Here's how ๐ https://cohost.org/awakecoding/post/384627-free-arm-server-with https://cohost.org/awakecoding/post/384627-free-arm-server-with"
X Link 2022-11-24T01:55Z [----] followers, [---] engagements
"Do you need to create a local user account on a Windows [--] test VM Try using "no@thankyou.com" with password "nope" let it fail and then the installer will let you create a local user account ๐"
X Link 2022-11-29T18:49Z [----] followers, [---] engagements
"@bitfield Code is static a debugger gives you a dynamic view of the execution with real values in memory which you can't accurately predict otherwise. Good luck finding what's happening with your code at runtime without running it"
X Link 2022-12-12T16:42Z [----] followers, [---] engagements
"binwalk: the dream binary extraction tool I wish I knew about earlier. "binwalk -e firmimg.d7" found and extracted the embedded squashfs filesystem from an iDRAC firmware update file: https://github.com/ReFirmLabs/binwalk https://github.com/ReFirmLabs/binwalk"
X Link 2023-01-11T14:56Z [----] followers, 31.8K engagements
"๐ it looks like someone's working on macOS support for Hyper-V https://github.com/acidanthera/MacHyperVSupport https://github.com/acidanthera/MacHyperVSupport"
X Link 2023-01-16T16:11Z [----] followers, 31.5K engagements
"Something wrong with Azure AD registration on a device dsregcmd /status looks good but something's off DSRegTool.ps1 is the right diagnostic tool for the job it solved another issue today for me: https://learn.microsoft.com/en-us/samples/azure-samples/dsregtool/dsregtool/ https://learn.microsoft.com/en-us/samples/azure-samples/dsregtool/dsregtool/"
X Link 2023-01-19T17:14Z [----] followers, [----] engagements
"If you're a 7-Zip user I highly recommend trying NanaZip from @MouriNaruto instead: it's built on top of 7-Zip but adds more features like Windows [--] top-level context menu integration. I've been using it for a few weeks and I love it ๐ https://github.com/M2Team/NanaZip https://github.com/M2Team/NanaZip"
X Link 2023-02-04T13:45Z [----] followers, 36.8K engagements
"The complete guide to RDP with Security Keys by Jonas Markstrm https://link.medium.com/ZuLpgNqFxyb https://link.medium.com/ZuLpgNqFxyb"
X Link 2023-03-28T17:56Z [----] followers, 25.2K engagements
"Wow when I see a GitHub issue opened on a repository that hasn't seen an update in [--] years I expect spam not someone telling me how much my code is garbage and accusing me of filling GitHub with garbage ๐ I'm sorry for sharing code that was helpful to people other than you"
X Link 2023-04-01T14:28Z [----] followers, 92.3K engagements
"And here's my response to such garbage I think I've been polite enough and will not engage further ๐"
X Link 2023-04-01T14:41Z [----] followers, [----] engagements
"Would you like to know how to decrypt RDP traffic live in Wireshark Yes ๐ No ๐ ๐คท Yes ๐ No ๐ ๐คท"
X Link 2023-04-03T15:30Z [----] followers, 45.5K engagements
"Here's how to decrypt RDP live traffic in Wireshark I will keep expanding on these notes there are so many tips and tricks to know to get it right Shout-out to @BoreanJordan for his awesome script using PSDetour that I've imported and adapted https://github.com/awakecoding/wireshark-rdp Would you like to know how to decrypt RDP traffic live in Wireshark https://github.com/awakecoding/wireshark-rdp Would you like to know how to decrypt RDP traffic live in Wireshark"
X Link 2023-04-03T21:10Z [----] followers, 42.6K engagements
"Simply put the annoying mstsc certificate prompt users have ignored for years by habit has zero value since the CredSSP protocol not only doesn't care about it but the RDP client will begin NTLM authentication with the server before it even validates it - by design won't fix Our latest blog post is out. After years of RDP research I decided that it was time that googling "Is RDP safe to use over untrusted networks" had a good answer with the biggest risk clearly laid out. Spoiler: the answer is no. https://t.co/XNDjevI0Sb Our latest blog post is out. After years of RDP research I decided"
X Link 2023-04-26T15:09Z [----] followers, 33.1K engagements
"Did you know Remote Desktop Manager [------] added several RDP client security hardening options โ
Enforce Network Level Authentication (NLA) โ
Enforce Kerberos authentication (no NTLM) These are all options in FreeRDP as the first-party RDP client does not support them ๐"
X Link 2023-04-27T15:31Z [----] followers, 23.2K engagements
"I have just updated my Wireshark guide to decrypting RDP traffic with notes on FreeRDP IronRDP and instructions on how to export a .pcapng file with embedded TLS session keys such that it can easily be shared with other people https://github.com/awakecoding/wireshark-rdp https://github.com/awakecoding/wireshark-rdp"
X Link 2023-05-13T21:06Z [----] followers, 58K engagements
"New blog post ๐ฐ PowerShell Remoting Trusted Hosts: What does it even mean ๐ฑ Everything you need to know to make WinRM work properly without cryptic errors and more โ๐ป๐ https://awakecoding.com/posts/powershell-remoting-trusted-hosts-what-does-it-mean/ https://awakecoding.com/posts/powershell-remoting-trusted-hosts-what-does-it-mean/"
X Link 2023-06-17T21:56Z [----] followers, 15.5K engagements
"Why is it that every time I try to set up RDP smartcard authentication I hit a new error I didn't have before"
X Link 2023-08-02T14:03Z [----] followers, 18.2K engagements
"Windows smartcard authentication client certificate mapping is easy just refer to the following diagram Why is it that every time I try to set up RDP smartcard authentication I hit a new error I didn't have before https://t.co/iSmMsRxqBu Why is it that every time I try to set up RDP smartcard authentication I hit a new error I didn't have before https://t.co/iSmMsRxqBu"
X Link 2023-08-02T18:20Z [----] followers, 14.6K engagements
"New blog post ๐ฐ Active Directory LDAPS certificate selection deep dive ๐ The ULTIMATE guide to figuring out why your certificate isn't getting picked up for LDAPS and how to ensure it picks exactly the certificate you want โ๐ป๐ https://awakecoding.com/posts/active-directory-ldaps-certificate-selection-deep-dive/ https://awakecoding.com/posts/active-directory-ldaps-certificate-selection-deep-dive/"
X Link 2023-08-12T15:17Z [----] followers, 10.3K engagements
"I'm thrilled to announce that I've been promoted to Chief Technology Officer (CTO) at @DevolutionsInc ๐พ๐ฅณ After almost [--] years of hard work I can't wait to help take the company to the next level ๐ช๐"
X Link 2023-09-21T19:13Z [----] followers, 10.7K engagements
"TIL: Windows [--] 23H2 now makes it possible to uninstall mstsc.exe ๐ฑ @awakecoding @BurgerhoutJ @smoon_lee Is it uninstalled https://t.co/aoQUTOMNPJ @awakecoding @BurgerhoutJ @smoon_lee Is it uninstalled https://t.co/aoQUTOMNPJ"
X Link 2023-11-07T16:48Z [----] followers, 228.2K engagements
"Wait what If you launch vmconnect.exe without any parameters you get a simple connection dialog to select the Hyper-V server and target virtual machine from a drop-down list. I had no idea this was even there"
X Link 2023-11-12T23:51Z [----] followers, 24.1K engagements
"Remote Desktop Manager [------] includes revamped X.509 certificate support The new credential entry can import/export to/from PEM/PFX formats (no OpenSSL) but it can also link to the Windows certificate store and even automatically select an RDP smartcard with PIN injection๐"
X Link 2023-11-22T16:28Z [----] followers, 22.9K engagements
"Are you tired of manually downloading and installing the Windows SDK just so you can copy dbghelp.dll srcsrv.dll symsrv.dll from it and get clean stack traces in Process Monitor and Process Explorer I made a script to download and extract those https://gist.github.com/awakecoding/71ce70e7ac3b3058d4bfae250f69f54e https://gist.github.com/awakecoding/71ce70e7ac3b3058d4bfae250f69f54e"
X Link 2023-12-12T03:34Z [----] followers, 11.6K engagements
"New blog post ๐ฐ Decompiling Hyper-V Manager to rebuild it from source ๐จ Help me convince Microsoft to save Hyper-V Manager by open sourcing it Until then here's how to patch it locally from decompiled code https://awakecoding.com/posts/decompiling-hyper-v-manager-to-rebuild-it-from-source/ https://awakecoding.com/posts/decompiling-hyper-v-manager-to-rebuild-it-from-source/"
X Link 2024-01-02T22:21Z [----] followers, 21.3K engagements
"How can I skip the Microsoft Edge first run experience for all users in a lab environment I have to go through [--] () manual steps every single time I open Edge the first time in a test VM for a new user. The "HideFirstRunExperience" registry key doesn't even show up in ProcMon:"
X Link 2024-01-25T16:20Z [----] followers, 43.1K engagements
"Do you want to hide the Microsoft Edge first run experience and change the default tab to Google instead of random news Go under HKLM:SoftwarePoliciesMicrosoftEdge Then set: HideFirstRunExperience = [--] NewTabPageLocation = Enjoy http://google.com How can I skip the Microsoft Edge first run experience for all users in a lab environment I have to go through [--] () manual steps every single time I open Edge the first time in a test VM for a new user. The "HideFirstRunExperience" registry key doesn't even show up in ProcMon: https://t.co/iLhqKMBwC7 http://google.com How can I skip the Microsoft Edge"
X Link 2024-01-26T04:25Z [----] followers, 28.2K engagements
"New blog post ๐ฐ Enable PowerShell WinRM Remoting in PowerShell [--] ๐ฑ Yes you can use PowerShell [--] in the server without switching to SSH-based remoting and here's how to do it for WinRM and Hyper-V PowerShell Direct โ๐ป๐ https://awakecoding.com/posts/enable-powershell-winrm-remoting-in-powershell-7/ https://awakecoding.com/posts/enable-powershell-winrm-remoting-in-powershell-7/"
X Link 2024-02-07T21:41Z [----] followers, [----] engagements
"Remote Debugging 101: 1) Download winsdksetup.exe 2) Install "Debugging Tools for Windows" 3) Add dbgsrv.exe Windows Firewall exception 4) Go to "C:Program Files (x86)Windows Kits10Debuggersx64" 5) .dbgsrv.exe -t tcp:port=1234 6) From WinDBG: tcp:server=HOSTport=1234"
X Link 2024-02-12T19:10Z [----] followers, 10.6K engagements
"๐ Exciting world first ๐ True Kerberos support in an RDP web client ๐ก Devolutions: [--] Microsoft: [--] Here's a demo showing IronRDP with Devolutions Gateway connecting using an account member of the Protected Users group in Active Directory ๐"
X Link 2024-02-28T15:14Z [----] followers, 26.1K engagements
"Azure Bastion is Apache Guacamole in disguise"
X Link 2024-02-29T21:26Z [----] followers, 38.4K engagements
"I'm writing raw Win32 GUIs with ATL and ActiveX in [----] ask me anything"
X Link 2024-03-19T18:25Z [----] followers, 17.5K engagements
"RDP ActiveX host window in plain Win32 with C/C++ and COM without ATL and all that funky stuff that made everything so much harder to understand: I'm writing raw Win32 GUIs with ATL and ActiveX in [----] ask me anything I'm writing raw Win32 GUIs with ATL and ActiveX in [----] ask me anything"
X Link 2024-03-21T20:39Z [----] followers, 14.5K engagements
"New laptop new Hyper-V Active Directory lab environment all created with a bunch of scripts"
X Link 2024-03-27T15:07Z [----] followers, 23K engagements
"Dreaming of X.509 client certificate auth in RDP without dealing with smartcard limitations We've got you covered with application-level virtual smartcards that wrap X.509 certificates Here is MsRdpEx injecting sspi-rs into mstsc.exe instead of credssp.dll and winscard.dll ๐"
X Link 2024-04-11T13:48Z [----] followers, 40.9K engagements
"Wireshark now has an easy way to embed TLS pre-master secrets (SSLKEYLOGFILE) into a capture file from the GUI: Edit - Inject TLS Secrets This will make it MUCH easier to save decrypted TLS sessions in a .pcapng file to share with others"
X Link 2024-04-25T23:30Z [----] followers, 27.1K engagements
"@getwired "Do security" by pushing users to install random tools to remove built-in Windows [--] ads that shouldn't be there in the first place"
X Link 2024-05-04T13:47Z [----] followers, 19.9K engagements
"I have just updated my Wireshark RDP decryption instructions and included a first set of sample decrypted capture files to show different RDP authentication scenarios: https://github.com/awakecoding/wireshark-rdp https://github.com/awakecoding/wireshark-rdp"
X Link 2024-05-06T21:02Z [----] followers, 12.4K engagements
"@mikeroySoft With everything going on at Broadcom/VMware I had to read that [--] times just to be sure I understood it correctly. It's good news but where's the catch ๐ง"
X Link 2024-05-14T14:42Z [----] followers, 23.5K engagements
"@techspence There are three possible scenarios: 1) Admin is still logged in so you bump him and take over his session (very noticeable) 2) Admin is disconnected but RDP session is inactive you reactivate it and take over 3) Admin has signed out so you create a new RDP session"
X Link 2024-05-14T18:55Z [----] followers, [----] engagements
"PSA: the list of DNS servers in Windows is not supposed to be an ordered list of DNS servers to try - if you put 8.8.8.8 (Google) or 1.1.1.1 (Cloudflare) as a "fallback" after your internal DNS server you'll just cause random name resolution failures for internal DNS"
X Link 2024-05-17T21:06Z [----] followers, 127.7K engagements
"If you want to diagnose weird random internal DNS resolution failures I suggest you try the Nirsoft DNS Query Sniffer tool it's a real lifesaver ๐ much easier to use than Wireshark: https://www.nirsoft.net/utils/dns_query_sniffer.html https://www.nirsoft.net/utils/dns_query_sniffer.html"
X Link 2024-05-17T21:08Z [----] followers, 12.2K engagements
"@Spshulem @arcsincall Hum. if you're putting "new display type similar to eInk but with a high refresh rate something that's always been a limiting factor of eInk" in the same bucket as an AI pin you're officially living in a parallel universe"
X Link 2024-05-24T14:59Z [----] followers, [---] engagements
"RDP smartcard emulation is coming to Remote Desktop Manager [------] with support for mstsc Import your X.509 client certificate set a PIN associate it with your RDP connection entry enable emulated smartcards and then ๐ช watch the magic happen ๐ฅณ Dreaming of X.509 client certificate auth in RDP without dealing with smartcard limitations We've got you covered with application-level virtual smartcards that wrap X.509 certificates Here is MsRdpEx injecting sspi-rs into mstsc.exe instead of credssp.dll and winscard.dll ๐ https://t.co/CHS0msqQ98 Dreaming of X.509 client certificate auth in RDP"
X Link 2024-05-27T15:20Z [----] followers, 25.9K engagements
"Here's Recall capturing temporarily visible passwords from Remote Desktop Manager in a test Azure VM. It's less effective that I would have thought the search results are screenshots and it's unclear how one can obtain the full OCR text it used for the match"
X Link 2024-06-03T15:48Z [----] followers, 150.5K engagements
"The full OCR text with the temporarily visible password is available in the %LocalAppData%CoreAIPlatform.00UKPUUIDukg.db SQLite database nicely gift wrapped ๐ for infostealer malware to exfiltrate:"
X Link 2024-06-03T20:18Z [----] followers, 85.5K engagements
"@MalwareJake Recall is a melting pot of everything wrong with modern Windows: Per-user app and settings MSIX app setting virtualization Intune MDM per-user policies WinRT generated proxy code Enabled by default opt-out If you hate it it's in there I tell you"
X Link 2024-06-05T01:42Z [----] followers, 19.8K engagements
"@pavandavuluri "Secure by design and secure by default" the preview version of Recall was made without proper security so how can it be secure by design Security was an afterthought you're rushing to add security to Recall only after it's been pointed out how it was seriously lacking"
X Link 2024-06-07T18:09Z [----] followers, [----] engagements
"Do you sometimes use RDP through an SSH tunnel Are you aware that this specific use case is not properly covered by the current NTLM deprecation plan from Microsoft Even with IAKerb and the TryIPSPN solution connecting to "localhost:local port" will never work for Kerberos"
X Link 2024-06-10T14:08Z [----] followers, 19K engagements
"New blog post ๐ฐ Mac RDP Client: Kerberos and Protected Users Guide ๐ Are you trying to harden your Active Directory environment by eliminating NTLM usage but RDP from Macs stands in the way Read this โ๐ป๐ https://awakecoding.com/posts/mac-rdp-client-kerberos-and-protected-users-guide/ https://awakecoding.com/posts/mac-rdp-client-kerberos-and-protected-users-guide/"
X Link 2024-06-13T20:33Z [----] followers, 23.8K engagements
"Proxy servers edited through the Windows Settings app remain in the registry after being disabled and removed in the UI where it still gets picked up by WinHTTP APIs Remove-Item HKLM:SYSTEMCurrentControlSetServicesiphlpsvcParametersProxyMgr -Recurse -EA SilentlyContinue"
X Link 2024-07-16T13:57Z [----] followers, 10.4K engagements
"When all you did was add "-Parallel" to a #PowerShell foreach loop and the script runs 250% faster ๐ฅ If you are still using PowerShell [--] you are missing one of the greatest features In PowerShell [--] we have the option to do $something ForEach-Object -Parallel "do the thing" Read all about it here: https://t.co/40Ndu8wmum If you are still using PowerShell [--] you are missing one of the greatest features In PowerShell [--] we have the option to do $something ForEach-Object -Parallel "do the thing" Read all about it here: https://t.co/40Ndu8wmum"
X Link 2024-07-31T20:21Z [----] followers, 23.4K engagements
"I know Windows [--] is making it increasingly harder to create an initial local user account but I hadn't noticed the new dark patterns that make it harder to create additional local user accounts. This is just bad for testing:"
X Link 2024-08-14T19:45Z [----] followers, 15.8K engagements
"Remote Desktop Manager [------] is out Azure Privileged Identity Management (PIM) One Identity Safeguard Delinea Secret Server proxy for RDP and SSH HP iLO native console Proton Pass password manager Barracuda NAC VPN Add-on ServiceNow ticketing service https://blog.devolutions.net/2024/09/whats-new-in-remote-desktop-manager-20243 https://blog.devolutions.net/2024/09/whats-new-in-remote-desktop-manager-20243"
X Link 2024-09-24T15:26Z [----] followers, 19.8K engagements
"Why am I only finding out about RemoteSessionNamedPipeServer.CreateCustomNamedPipeServer() now Any .NET process can suddenly become a PowerShell Host server that you can connect to via named pipe from a regular PowerShell terminal: https://learn.microsoft.com/en-us/dotnet/api/system.management.automation.remoting.remotesessionnamedpipeserver.createcustomnamedpipeserverview=powershellsdk-7.4.0 https://learn.microsoft.com/en-us/dotnet/api/system.management.automation.remoting.remotesessionnamedpipeserver.createcustomnamedpipeserverview=powershellsdk-7.4.0"
X Link 2024-09-24T21:21Z [----] followers, 12.4K engagements
"Do you plan to fully decommission Active Directory within the next [--] years By this I mean getting rid of domain controllers entirely without hybrid-joined systems"
X Link 2024-10-03T02:13Z [----] followers, 46K engagements
"How to hide the Windows [--] 24H2 "Learn more about this picture" desktop icon: Set-ItemProperty -Path 'HKCU:SoftwareMicrosoftWindowsCurrentVersionExplorerHideDesktopIconsNewStartPanel' -Name '2cc5ca98-6485-489a-920e-b3e88a6ccce3' -Value [--] Right-click desktop + refresh"
X Link 2024-10-03T23:32Z [----] followers, 38K engagements
"RDP is designed to expose a LOT from the client machine to the server - now imagine what can be done if an attacker successfully gets a victim to connect to a malicious RDP server. Signing .RDP files provides a false sense of security that malicious actors use for their benefit The spear-phishing emails in this campaign were sent to thousands of targets in over [---] organizations and contained a signed Remote Desktop Protocol (RDP) configuration file that connected to an actor-controlled server. The spear-phishing emails in this campaign were sent to thousands of targets in over 100"
X Link 2024-10-29T20:03Z [----] followers, 28.5K engagements
"@SwiftOnSecurity Is it a good time to remind you that RDM Mac exists and that if you want to access your Mac from Windows RDM has an Apple Remote Desktop client that supports the full protocol (we reverse engineered it)"
X Link 2024-11-01T02:48Z [----] followers, 34.5K engagements
"Who would like to review my slides for my upcoming RDP IO Lab presentation on "Decrypting and Inspecting RDP traffic in Wireshark" I have finished my first draft but could use some feedback. It's supposed to be [--] minutes in total including Q&A. Just DM me with your email and I'll send you a copy"
X Link 2025-01-15T15:13Z [----] followers, 80.5K engagements
"TIL: virtual machine names in Azure apparently go through a trademark filter so my Windows lab VM can't be called "windows-lab" ๐คฆ "The name 'windows-lab' or a part of the name is a trademarked or reserved word.""
X Link 2025-01-17T19:05Z [----] followers, 12K engagements
"My RDP IO Lab presentation on "Decrypting and Inspecting RDP traffic in Wireshark" was just cancelled - apparently Microsoft decided they would only do internal presentations with no guest speakers ๐ What's the point of even trying when you get treated like this Who would like to review my slides for my upcoming RDP IO Lab presentation on "Decrypting and Inspecting RDP traffic in Wireshark" I have finished my first draft but could use some feedback. It's supposed to be [--] minutes in total including Q&A. Just DM me with your email and https://t.co/i6ymOdAu2q Who would like to review my"
X Link 2025-01-28T21:29Z [----] followers, 68.7K engagements
"Update: I have decided to cancel my attendance at the RDP IO Lab event and to make the presentation as a Devolutions webinar instead. Stay tuned for the registration link which will be coming up soon My RDP IO Lab presentation on "Decrypting and Inspecting RDP traffic in Wireshark" was just cancelled - apparently Microsoft decided they would only do internal presentations with no guest speakers ๐ What's the point of even trying when you get treated like this My RDP IO Lab presentation on "Decrypting and Inspecting RDP traffic in Wireshark" was just cancelled - apparently Microsoft"
X Link 2025-01-30T00:56Z [----] followers, 10.4K engagements
"๐ Webinar: Decrypting RDP Traffic in Wireshark ๐ ๐
Feb [--] 9:00 AM 10:00 AM EST Learn how to analyze and decrypt RDP traffic like a pro. Can't attend live No worries you'll get the slides & recording afterward if you register๐ https://events.ringcentral.com/events/decrypting-rdp-traffic-in-wireshark-e9e4e309-e90b-4c99-a742-325c00669fde/registration https://events.ringcentral.com/events/decrypting-rdp-traffic-in-wireshark-e9e4e309-e90b-4c99-a742-325c00669fde/registration"
X Link 2025-01-30T22:04Z [----] followers, [----] engagements
"๐ป Ever wondered what's happening inside your RDP sessions ๐ Join my webinar tomorrow (Feb [--] 9:00 AM EST) to learn how to decrypt RDP traffic in Wireshark and gain deeper visibility into your remote connections. ๐
Dont miss it Register now: https://devo-inc.net/4hnZyqX https://devo-inc.net/4hnZyqX"
X Link 2025-02-10T16:12Z [----] followers, 31.4K engagements
"My webinar "Decrypting RDP Traffic in Wireshark" went well this morning we had over [---] attendees out of [---] people registered. As promised here are the slides for the presentation: https://raw.githubusercontent.com/awakecoding/wireshark-rdp/master/documents/Devolutions_2025_Decrypting_RDP_Traffic_in_Wireshark.pdf ๐ป Ever wondered what's happening inside your RDP sessions ๐ Join my webinar tomorrow (Feb [--] 9:00 AM EST) to learn how to decrypt RDP traffic in Wireshark and gain deeper visibility into your remote connections. ๐
Dont miss it Register now: https://t.co/Kdmt1aIsYA"
X Link 2025-02-11T17:06Z [----] followers, 28.8K engagements
"I'm thinking of writing a 'Top [--] Things You Didn't Know About RDP' blog post. What would you be most interested in Obscure mstsc command-line options Lesser-known .RDP file settings I'm looking for bite-sized insights that can be explained in a single paragraph"
X Link 2025-02-18T21:25Z [----] followers, 11.1K engagements
"Need to use RDP without leaving traces Learn how to enable MSTSC public mode for more privacy and security in your remote sessions. Perfect for shared environments and enhanced confidentiality ๐๐ป ๐ Read my latest blog post: https://blog.devolutions.net/2025/03/using-rdp-without-leaving-traces-the-mstsc-public-mode/ https://blog.devolutions.net/2025/03/using-rdp-without-leaving-traces-the-mstsc-public-mode/"
X Link 2025-03-06T18:29Z [----] followers, 16.9K engagements
"Grammarly and UI Automation applications are commonly the cause of hard-to-diagnose problems - years after @SwiftOnSecurity's tweet we've identified Grammarly as the root cause behind Remote Desktop Manager instability after a long investigation: https://forum.devolutions.net/topics/43305/remote-desktop-manager-crashing-multiple-times-a-day#204620 https://forum.devolutions.net/topics/43305/remote-desktop-manager-crashing-multiple-times-a-day#204620"
X Link 2025-03-11T15:11Z [----] followers, 30.2K engagements
"๐คฃ excellent "MSTSC IS NOT GOING AWAY" message to fix what Microsoft can't communicate properly from https://techcommunity.microsoft.com/blog/Windows-ITPro-blog/windows-app-to-replace-remote-desktop-app-for-windows/4390893/replies/4394516 https://techcommunity.microsoft.com/blog/Windows-ITPro-blog/windows-app-to-replace-remote-desktop-app-for-windows/4390893/replies/4394516"
X Link 2025-03-18T15:12Z [----] followers, [----] engagements
"Cloudflare took my advice and built their web-based RDP client using IronRDP with the RDCleanPath protocol extension we pioneered in Devolutions Gateway. Apache Guacamole and Azure Bastion watch out: there's a superior design in town and it came from @DevolutionsInc. ๐ช๐ Cloudflare now provides clientless browser-based support for the Remote Desktop Protocol (RDP). https://t.co/wJ3eCz4smf #SecurityWeek Cloudflare now provides clientless browser-based support for the Remote Desktop Protocol (RDP). https://t.co/wJ3eCz4smf #SecurityWeek"
X Link 2025-03-21T14:44Z [----] followers, 18K engagements
"My Windows [--] start menu was unresponsive today unable to find local apps. I disabled Bing search "feature" and then it started working as expected: Set-ItemProperty -Path "HKCU:SOFTWAREMicrosoftWindowsCurrentVersionSearch" -Name "BingSearchEnabled" -Value 0"
X Link 2025-03-24T17:58Z [----] followers, 28.5K engagements
"Did you know that Remote Desktop Manager natively supports connecting to Macs using the Apple Remote Desktop (ARD) protocol which is significantly faster than standard VNC https://devolutions.net/integration-center/apple-remote-desktop/ https://devolutions.net/integration-center/apple-remote-desktop/"
X Link 2025-03-24T20:50Z [----] followers, [----] engagements
"New blog post ๐ฐ Isolating a Windows Service Process for Easier Debugging ๐ Find out which svchost.exe process hosts a service and how to make that service run in its own dedicated process ๐ ๐ฅ๐ https://awakecoding.com/posts/isolating-a-windows-service-process-for-easier-debugging/ https://awakecoding.com/posts/isolating-a-windows-service-process-for-easier-debugging/"
X Link 2025-04-06T20:43Z [----] followers, [----] engagements
"RDP Auth PSA: FIDO2 = smartcards. They use very different API layers and they're not the same. Smartcards: Kerberos with PKINIT and X.509 certificates requires a KDC line-of-sight FIDO2: doesn't use Kerberos requires RDP RDS AAD auth and being joined to Entra ID"
X Link 2025-04-08T15:00Z [----] followers, [----] engagements
"Helping someone use PowerShell every time: Set-ExecutionPolicy Unrestricted Helping someone use PowerShell Remoting every time: Set-Item 'WSMan:localhostClientTrustedHosts' -Value '*' -Force I've literally had to help with both today"
X Link 2025-04-15T14:43Z [----] followers, 12K engagements
"Im looking for on-demand virtual lab platforms that can spin up full Active Directory environments (8 vCPUs 64GB RAM nested virt). It needs to support complex enterprise scenarios to showcase Remote Desktop Manager with other Devolutions products. Any recommendations ๐"
X Link 2025-04-15T21:32Z [----] followers, 16.6K engagements
"@MicrosoftDesign UX designer: look at how all my app icons are so neatly organized Actual user: I just typed the name of my app I want to launch - not only is it sluggish to return results but sometimes it never returns them at all A Start menu that sometimes doesn't launch apps is useless"
X Link 2025-05-09T19:59Z [----] followers, [----] engagements
"If you're not using ChatGPT to generate #PowerShell cmdlets for just about anything you need in the moment you are seriously missing out ๐"
X Link 2025-05-09T20:26Z [----] followers, 30.7K engagements
"Do you want to feel like an RDP expert without reading thousands of pages of protocol specifications Decrypt TLS in Wireshark export your capture in a text file with all details upload it to ChatGPT and start asking questions"
X Link 2025-05-15T19:51Z [----] followers, [----] engagements
"๐ It's official I am now a Microsoft MVP in the PowerShell & Windows categories Years of digging โ into RDP and Windows internals and automating all the things with #PowerShell have finally paid off ๐ช I can't wait to meet everyone at the next MVP Summit #MVPBuzz"
X Link 2025-06-01T13:26Z [----] followers, 14.1K engagements
"The Winlogon registry keys for autologon don't work with the Hyper-V enhanced session mode so I undusted an old credential provider in C++ made it load default credentials from the registry and poof it works This will be very useful for lab environments ๐"
X Link 2025-06-16T23:13Z [----] followers, 36K engagements
"It's here - a first release of RdpCredProv a Windows credential provider with autologon capabilities better than the original ๐ Yes it works even with the Hyper-V enhanced session mode Grab a copy from and then follow the instructions from the readme ๐ https://github.com/Devolutions/RdpCredProv The Winlogon registry keys for autologon don't work with the Hyper-V enhanced session mode so I undusted an old credential provider in C++ made it load default credentials from the registry and poof it works This will be very useful for lab environments ๐ https://t.co/l0J3vBfKow"
X Link 2025-06-17T20:42Z [----] followers, [----] engagements
"I've got new shiny decoration for the office ๐๐"
X Link 2025-07-01T15:35Z [----] followers, [----] engagements
Limited data mode. Full metrics available with subscription: lunarcrush.com/pricing
/creator/x::awakecoding