SecopsMonkey

Background Continuing the theme of identity management, let’s take a look at [Get-AzureRoleAssignments].

During a recent conversation someone pointed out that my Github profile is somewhat dusty.

Hi.

A fellow Brakeing Down Security slacker, Ceafin asked a fun question question to the group at large.

The Setup Let’s paint a picture of a fun scenario.

During an infrastructure upgrade we decided to migrate from Observium to LibreNMS for our time-series graphs.

ServerFault user ewwhite describes a rather interesting situation regarding application distribution wherein code must be compiled in production.

A few things to keep in mind.

After going through the retention schedule exercise on our infrastructure log management system I ran into a bit of an interesting situation.

A while ago I wrote a post on how I managed to get my systems integrated with Office365 to send email notifications.

Earlier this week I saw this tweet.

Sometimes I feel like Records Retention is the red-headed step child.

My tool of choice for vulnerability scanning has always been Nessus, going all the way back to when it was properly OpenSource and the ‘Experimental Checks’ checkbox was a sure fire way to crash your target.

This is the sixth and final post in a multi-part series where I explore the process of transforming an existing Graylog install into a resilient and scalable multi-site installation.

This is the fifth in a multi-part series where I explore the process of transforming an existing Graylog install into a resilient and scalable multi-site installation.

This is the fourth in a multi-part series where I explore the process of transforming an existing Graylog install into a resilient and scalable multi-site installation.

This is the third in a multi-part series where I explore the process of transforming an existing Graylog install into a resilient and scalable multi-site installation.

Sometime in the early 1990s, for reasons I can’t remember, I made the switch from pico to vim and never looked back.

This is the second in a multi-part series where I explore the process of transforming an existing Graylog install into a resilient and scalable multi-site installation.

This is the first in a multi-part series where I explore the process of transforming an existing Graylog install into a resilient and scalable multi-site installation.

Pulling back from the archives this is a repost of a previous blog post.

Pulling back from the archives this is a repost of a previous blog post.

Pulling back from the archives this is a repost of a previous blog post, with minor edits to include a more revent version of the app.

Some few of us, primarily in consultancy and professional services, are in the position to work in a place surrounded by other Information Security people but for most of us the ratios are a little different.

For much of my professional career I have been what I like to call “health care adjacent”.

Since writing this post I’ve learned a better way.

Pulling back from the archives this is a repost of a previous blog post.

Some number of days ago my dear Wesley put out the call absolutely begging for our Best .screenrc Files.

Pulling back from the archives this is a repost of a previous blog post.

Pulling back from the archives this is a repost of a previous blog post.

Pulling back from the archives this is a repost of a previous blog post.

No matter how much we hope otherwise the foundation of any security program are consistent and used procedures.

Pulling back from the archives this is a repost of a previous blog post.

Simplistic Beginnings Whether using a preseed or a manual install the default partitioning setup is to use what Debian calls “atomic”.

While trying to implement the time changes discussed earlier I discovered that Windows time is a bit more complicated than I at first believed.

Keeping correct time is understandably pretty important.

I’ve had brief dalliances with both Windows and Linux as working environments but for the vast majority of my professional career I’ve used OSX as my desktop and laptop environment.

As old as it is RADIUS is still a pretty nice tool for getting non-Windows services to authenticate against Active Directory.

Way back in 2013 I was potentially going to be tagging along with my wife as she attended a work conference in Las Vegas.

#Selection and Installation Coming into a new environment is always interesting.