Category: Deployment

CVE-2026-21509 | 0-day exploit mitigation Batch OF2016 + OF2019

Microsoft Office Security Feature Bypass Vulnerability | How to import into WSUS Server or deploy with Intune or Autopatch CVE-2026-21509, Security Vulnerability, Released: Jan 26, 2026, Last updated: Jan 26, 2026 Assigning CNA Microsoft CVE.org link CVE-2026-21509  Impact Security Feature Bypass Max Severity Important Weakness CWE-807: Reliance on Untrusted Inputs in a Security Decision CVSS […]

CRL Check – Certificate Revocation List Validation Freeware Tool

CRL Check for Windows Environments CRL check is a tool designed to collect executables from most used paths on your client. It checks whether they are digitally signed with a code certificate and then retrieves the Certificate Revocation Lists (CRL) and OCSP for each signed file it finds. It then automatic verifies if the client […]

image

Unable to migrate Trellix Endpoint ENS 10.7.19, Event 1000, MSVCP140.dll, mfeesp.exe, Error communicating with the Event Log

Unable to migrate to Trellix Trellix Endpoint Security ENS 10.7.19 and ENS GUI crash with event 1000 (Update/migration/upgrade) mfeesp.exe crashing GUI: Error communicating with the Event Log Application Event 1000 from MSVCP140.DLL, MSVCP140_1.DLL,MSVCP140_2.DLL, MSVCP140_atomic_wait.dll or MSVCP140_codecvt_ids.DLL Affected OS we have seen with error: Microsoft Windows W11 24H2 Microsoft Server 2016 Microsoft Server 2019 Terminal Server […]

Verify if you are affected from MS EX1181125, new M365 group member added wrongly had OWNER permission 03.10-31.10.2025

Error: Some users added as members to a Microsoft 365 group in Outlook on the web may be given “Owner” permissions by default   Important Security Notice for M365 Groups Between October 3 and October 31, 2025, Microsoft Exchange Online experienced an issue that affected Microsoft 365 (M365) Groups. During this period, when a new […]

image

WSUS Out of Band Patch Installer – CVE-2025-59287 for all OS automatic

Powershell skript to force the Out of band patches for WSUS Exploit fully automatic on WSUS. WSUS Out-of-Band Patch Installer – Overview (CVE-2025-59287) for all OS automatic Run our emergency skript direct on your WSUS Server. The 24.10.2025 emergency patches itself are in WSUS. If they are APROVED there our skript will install them from […]

Crl Check

Crl Check a Freeware tool to analyse start-up delay of an application because of Certificate Revocation lookup When you sign an executable in Windows with a code-signing certificate, there are certain registry settings that control how Windows behaves. As soon as an EXE or DLL is signed, a complex mechanism comes into play that checks […]

Crl Check Tool

Microsoft EDGE fails to Update from WSUS, from MSI-file or repair APPS because of GPO, 0x80070643, 1722

Microsoft EDGE fails to Update from WSUS, from MSI-file or repair APPS because of GPO, 0x80070643, 1722 Cause: GPO / EdgeUpdate Policies In this case, we have a GPO (Group Policy) created by or for a customer who uses Firefox as the default browser because a Citrix engineer advised them that this was the best […]

SignTool

Full Guide to SignTool — With a Better, Fully Automatic Alternative if you just want to verify signatures If you’re searching for SignTool, chances are you want to verify, sign, timestamp, or inspect digital signatures on executable files. Output from: signtool.exe verify /pa /all /d signtool.exe Before we dive into all the common signtool.exe commands […]

Check EXE Signature Online or Verify Code Signing Certificates for Executables

verify code sign certificates with our freeware tool to automatic If you’re searching for an easy way to check an EXE signature online or verify a code signing certificate on an executable, you’ve come to the right place. Over the last 20 years, we’ve seen how Certificate Revocation (CRL) issues on Windows systems—especially in enterprises—can […]

Crowdstrike Falcon, BSOD, VMWARE Server Recovery DEU

Es gibt einige Server, bei denen Sie nicht in den Wiederherstellungsmodus oder den abgesicherten Modus booten können. Wenn das Volume nicht verschlüsselt ist, haben Sie eine Möglichkeit, die fehlerhafte CrowdStrike-Def-Datei von der Festplatte zu löschen. Basisartikel von uns: https://www.butsch.ch/post/19-07-2024-bsod-blue-screen-crowdstrike/ Crowdstrike Falcon Sensor, Azure VM Repair paths   Um eine virtuelle Festplatte in einer VMware-Umgebung von […]

Proxy settings der Cryptography API bei Zertifikatswiderrufslisten (CRL) von einem CRL-Verteilungspunkt

Dieser Artikel zielt darauf ab, den Prozess zu erläutern, den die Crypto API durchläuft, um erfolgreich eine HTTP-basierte URL für den CRL-Verteilungspunkt herunterzuladen. Er dient auch der Fehlerbehebung in Situationen, die mit der Netzwerkrückgewinnung von CRLs verbunden sind. Zusätzlich wird unser kostenloses Tool, crlcheck.exe, erwähnt, das dazu beitragen soll, komplexe Probleme effektiver zu lösen. In […]