@usr_local_share Birdsite behavior is like Catholic guilt; it gets in there good and deep and drives behavior even when you think it couldn't possible. :D
https://keybase.io/wishx
A word of advice for security pros today. Please boost.
Block execution of psexec.exe.
Block c:\windows\perfc.dat
Patch your shit.