Systola GmbH

🔒 Secure Bits 💡 𝗗𝗼 𝘆𝗼𝘂 𝘂𝘀𝗲 𝗥𝗗𝗣? There’s a 𝘀𝘂𝗿𝗽𝗿𝗶𝘀𝗶𝗻𝗴 𝗿𝗶𝘀𝗸 you might not be thinking about — and it’s already on your machine. When you use Remote Desktop (𝗥𝗗𝗣) via the 𝗠𝗦𝗧𝗦𝗖 client, any credentials you enter can be retrieved in plaintext in the process 𝗺𝗲𝗺𝗼𝗿𝘆. That means your domain admin password could be sitting there, waiting to be pulled — no keylogger needed. 📌 You can’t just flip a setting to 𝗱𝗶𝘀𝗮𝗯𝗹𝗲 this. But there are some 𝘄𝗮𝘆𝘀 𝘁𝗼 𝗿𝗲𝗱𝘂𝗰𝗲 𝘁𝗵𝗲 𝗿𝗶𝘀𝗸: 1️⃣ 𝗨𝘀𝗲 𝗮 𝗣𝗿𝗶𝘃𝗶𝗹𝗲𝗴𝗲𝗱 𝗔𝗰𝗰𝗲𝘀𝘀 𝗪𝗼𝗿𝗸𝘀𝘁𝗮𝘁𝗶𝗼𝗻 (𝗣𝗔𝗪) — ideally a physical machine, even if you run a VM PAW on top of it. 2️⃣ 𝗔𝘃𝗼𝗶𝗱 𝗥𝗗𝗣 — not always practical in Windows environments. 3️⃣ 𝗨𝘀𝗲 𝗠𝗙𝗔 — if there’s no password typed, there’s no password to grab from memory. 🔐 That’s one reason I started 𝗰𝗼𝗹𝗹𝗮𝗯𝗼𝗿𝗮𝘁𝗶𝗻𝗴 𝘄𝗶𝘁𝗵 Systola. I tested their platform, 𝗦𝘆𝘀𝘁𝗼𝗟𝗢𝗖𝗞, which brings 𝗻𝗮𝘁𝗶𝘃𝗲 𝗽𝗮𝘀𝘀𝘄𝗼𝗿𝗱𝗹𝗲𝘀𝘀 𝗺𝘂𝗹𝘁𝗶-𝗳𝗮𝗰𝘁𝗼𝗿 𝗮𝘂𝘁𝗵𝗲𝗻𝘁𝗶𝗰𝗮𝘁𝗶𝗼𝗻 to the Windows ecosystem — including RDP, Windows login, SAML, Radius, and more. It’s simple, works as expected, and the pricing is very reasonable. 🧪 𝗪𝗮𝗻𝘁 𝘁𝗼 𝘁𝗿𝘆 𝗶𝘁? Link in comments. Here’s how it works: 1. Open the page → you’ll see the license options (one is free). 2. Click Request demo. 3. Systola will create your eval account and send access so you can install and test. If you give it a spin, 𝘁𝗲𝗹𝗹 𝗺𝗲 𝗵𝗼𝘄 𝗶𝘁 𝗴𝗼𝗲𝘀 — I can help and may be able to arrange a discount for paid tiers. Do you use MFA for RDP sessions? #WindowsSecurity #SecureBits #MFA #CyberSecurity #BlueTeam #HorizonSecured

🔒 Secure Bits 💡 𝗗𝗼 𝘆𝗼𝘂 𝘀𝘁𝗶𝗹𝗹 𝘂𝘀𝗲 𝗽𝗮𝘀𝘀𝘄𝗼𝗿𝗱𝘀? We all know the recommendation — 𝗺𝗼𝘃𝗲 𝗮𝘄𝗮𝘆 from passwords. But in most production environments I’ve seen, that’s easier said than done. 𝗦𝗼 𝘄𝗵𝗮𝘁’𝘀 𝘁𝗵𝗲 𝗿𝗲𝗮𝗹 𝗽𝗿𝗼𝗯𝗹𝗲𝗺 𝘄𝗶𝘁𝗵 𝗽𝗮𝘀𝘀𝘄𝗼𝗿𝗱𝘀? 1️⃣ 𝗧𝗵𝗲𝘆’𝗿𝗲 𝗵𝗮𝗿𝗱 𝘁𝗼 𝗺𝗮𝗸𝗲 𝘁𝗿𝘂𝗹𝘆 𝘀𝗲𝗰𝘂𝗿𝗲 You can define strong policies, check against leak databases… but you can’t change human behavior. If I create a long, complex password based on personal info (example): - Car - Toyota - Hobby - Cars - Daughter Emma born in 2015 It might 𝗽𝗮𝘀𝘀 𝗰𝗼𝗺𝗽𝗹𝗲𝘅𝗶𝘁𝘆 checks — but it’s still 𝗽𝗿𝗲𝗱𝗶𝗰𝘁𝗮𝗯𝗹𝗲 if someone targets me. 2️⃣ 𝗧𝗵𝗲𝘆’𝗿𝗲 𝗰𝗮𝗰𝗵𝗲𝗱 𝗶𝗻 𝘁𝗼𝗼 𝗺𝗮𝗻𝘆 𝗽𝗹𝗮𝗰𝗲𝘀 In the Windows world, credentials often end up stored somewhere and can be retrieved in 𝗽𝗹𝗮𝗶𝗻𝘁𝗲𝘅𝘁 (registry, MSTSC cache, Default Credentials, …,). Once someone gets local access, the secrets aren’t far behind. ⸻ The ideal solution? 𝗚𝗲𝘁 𝗿𝗶𝗱 𝗼𝗳 𝗽𝗮𝘀𝘀𝘄𝗼𝗿𝗱𝘀 𝘄𝗵𝗲𝗿𝗲 𝗽𝗼𝘀𝘀𝗶𝗯𝗹𝗲. For a few users, you might use something like YubiKeys + 𝗰𝗲𝗿𝘁𝗶𝗳𝗶𝗰𝗮𝘁𝗲𝘀 — but at scale, this quickly gets expensive and complex. That’s why I recently 𝘀𝘁𝗮𝗿𝘁𝗲𝗱 𝘄𝗼𝗿𝗸𝗶𝗻𝗴 𝘄𝗶𝘁𝗵 Systola (@systolan) — their platform 𝗦𝘆𝘀𝘁𝗼𝗟𝗢𝗖𝗞 adds 𝗻𝗮𝘁𝗶𝘃𝗲 𝗽𝗮𝘀𝘀𝘄𝗼𝗿𝗱𝗹𝗲𝘀𝘀 𝗺𝘂𝗹𝘁𝗶-𝗳𝗮𝗰𝘁𝗼𝗿 𝗮𝘂𝘁𝗵𝗲𝗻𝘁𝗶𝗰𝗮𝘁𝗶𝗼𝗻 to the Windows ecosystem at a reasonable cost. ✅ Works for: Windows Login, RDP, RD Gateway, SAML, Radius… ✅ Fully on-premise — no cloud dependencies ✅ Easy to deploy (Especially relevant for European regions where on-prem is often a legal & security requirement.) 🧪 𝗪𝗮𝗻𝘁 𝘁𝗼 𝘁𝗿𝘆 𝗶𝘁? Link in comments. Here’s how it works: 1. Open the page → you’ll see the license options (one is free). 2. Click Request demo. 3. Systola will create your eval account and send access so you can install and test. If you give it a spin, 𝘁𝗲𝗹𝗹 𝗺𝗲 𝗵𝗼𝘄 𝗶𝘁 𝗴𝗼𝗲𝘀 — I can help and may be able to arrange a discount for paid tiers. Let’s keep pushing toward safer authentication — step by step. #SecureBits #CyberSecurity #WindowsSecurity #MFA #BlueTeam #Infosec #HorizonSecured