PSY IT Runbooks

Author: GDanu

  • Microsoft Defender ASR via PowerShell: Audit → Warn/Block

    —

    by

    GDanu
    in

    Microsoft Defender ASR via PowerShell: Audit → Warn/Block (SAFE Method) Last updated: 2026-01-02 This guide shows a safe way to configure Microsoft Defender Attack Surface Reduction (ASR) rules with PowerShell while preserving your existing rule set. Microsoft explicitly warns that Set-MpPreference overwrites the existing set of rules, so we apply changes carefully. Microsoft Learn+1 0)…

  • RouterOS v7 Dual-WAN Failover Using Recursive Routing (No Scripts)

    —

    by

    GDanu
    in

    RouterOS v7 Dual-WAN Failover Using Recursive Routing (No Scripts) Last updated: 2026-01-02This is a stable, script-free dual-WAN failover method using recursive routing, scopes, and check-gateway=ping, based on official MikroTik guidance. MikroTik Help+1 1) Plan & variables (edit before applying) Replace these placeholders: WAN1_IF=ether1 (ISP1) WAN2_IF=ether2 (ISP2) WAN1_GW=10.111.0.1 (your ISP1 gatew_ WAN2_GW=10.112.0.1 (y_ M HOST1=8.8.8.8 HOST2=8.8.4.4…

  • WireGuard “Road Warrior” on MikroTik (RouterOS v7)

    —

    by

    GDanu
    in

    MikroTik WireGuard Remote Access (RouterOS v7): Secure “Road Warrior” Setup Last updated: 2026-01-02This guide shows a clean, secure WireGuard “road warrior” setup on MikroTik RouterOS v7 with step-by-step commands, validation, and rollback. Assumption: RouterOS v7+ is installed (WireGuard is RouterOS v7 feature). WireGuard configuration concepts and CLI paths follow official MikroTik docs. MikroTik Help 1)…