Posts made by DustinB3403

Building out a VM for customer support work, nothing special.

@black3dynamite said in Miscellaneous Tech News:

https://arstechnica.com/security/2024/08/shocker-french-make-surprise-arrest-of-telegram-founder-at-paris-airport/

I saw that and just had to laugh, because these people and governments don't understand what encryption means and is meant to do.

@Obsolesce said in CrowdStrike blames kernel level access on last month Microsoft outage, claims to:

@DustinB3403 said in CrowdStrike blames kernel level access on last month Microsoft outage, claims to:

@Obsolesce said in CrowdStrike blames kernel level access on last month Microsoft outage, claims to:

@DustinB3403 said in CrowdStrike blames kernel level access on last month Microsoft outage, claims to:

want to find a non-kernel based solution and that the EU is at fault.

https://www.csoonline.com/article/3483641/crowdstrike-backs-microsofts-demand-for-reducing-kernel-level-access.html

I still say it could have been avoided if CrowdStrike had tested the change on a single device prior to releasing it publicly. It could have been a simple automated test as part of their release pipeline.

Even a better rollout strategy could have prevented it from going too far.

What's funny is that CS is now saying that they have decided to start testing their releases with the use of "besides showing interest in working with Microsoft to work on the “kernel-level restrictions” development, is also taking a new approach to certify each new sensor release through the “Windows Hardware Quality Labs."

Whats also funny is that if you look at almost any open source software of similar caliber, they do all that stuff in their build and release pipelines or other work flows before public releases.

Exactly!

@Obsolesce said in CrowdStrike blames kernel level access on last month Microsoft outage, claims to:

@DustinB3403 said in CrowdStrike blames kernel level access on last month Microsoft outage, claims to:

want to find a non-kernel based solution and that the EU is at fault.

https://www.csoonline.com/article/3483641/crowdstrike-backs-microsofts-demand-for-reducing-kernel-level-access.html

I still say it could have been avoided if CrowdStrike had tested the change on a single device prior to releasing it publicly. It could have been a simple automated test as part of their release pipeline.

Even a better rollout strategy could have prevented it from going too far.

What's funny is that CS is now saying that they have decided to start testing their releases with the use of "besides showing interest in working with Microsoft to work on the “kernel-level restrictions” development, is also taking a new approach to certify each new sensor release through the “Windows Hardware Quality Labs."

want to find a non-kernel based solution and that the EU is at fault.

https://www.csoonline.com/article/3483641/crowdstrike-backs-microsofts-demand-for-reducing-kernel-level-access.html

@dbeato Yeah it does it has a webpage that is native to the solution. I don't know that it's optimized for mobile, but I doubt it.

Hey all,

Looking to see if anyone has any recommendations for a hosted solution for Policy Compliance and Reporting.

Currently we use TugBoat Logic, and while it works, its way more focused on being a Vendor Risk management tool and is a wieldy tool that seems to just cover to much.

I'm looking for something that would integrate with AWS/Azure/Google along with a few other vendors to automate the collection of logs.

If you have any recommendations let me know.

@IRJ Yeah I've tried openVAS in the past, it wasn't bad, but it also wasn't great.

I've ended up making some changes to my firewall and using Wazuh to report on my endpoints that are remote to our datacenter.

Which works well enough for our needs

Call with new customer and support engineer who will be doing the work.

Nothing fancy

@gjacobse said in ReadyNAS314: likely failing:

@DustinB3403 said in ReadyNAS314: likely failing:

@gjacobse said in ReadyNAS314: likely failing:

I do have a “backup” but, looks like it’s a month or so old.

This is where you screwed up...

You know what they say about people and glass houses?

Hey I'm sure I'll have my own issue at some point.

lol

@gjacobse said in ReadyNAS314: likely failing:

I do have a “backup” but, looks like it’s a month or so old.

This is where you screwed up...

So I've used qualys when I worked for an MSP and actually liked it, besides of a few things.

Setting up networks sucked
The interface generally was a bit confusing to get used to (infrequent customers)

The reporting was incredibly in-depth, I can't say I ever saw remediated vulns being detected again

We settled on Wazuh for now as it at least covers our needs and lists different vulnerabilities.

@nadnerB said in Vulnerability Assessment and Alerting Solutions:

Have a look at Rapid7 InsightVM

Never heard of it, what makes it good?

Hey All,

I'm looking for a vulnerability assessment and alerting solution that is going to have to be agent based to alert for any OS vulnerabilities for a remote workforce.

Wazuh is the top item that comes to mind, but I'm not a huge fan of its presentation, likely I just need to sort out the views.

Does anyone else have any recommendations?

The target group is endpoint devices (workstations) and datacenter equipment.

TIA

@gjacobse glad I could help

@gjacobse If you open PM, select "Print Servers" > Expand the server > Select "Ports" and then select Export you'll get the port details (ip, WSD etc) into a txt file.

@Obsolesce so yes, Jupiter is at a 85% angle all of the time... right?

@Obsolesce Is Jupiter always at a 85% angle?

Thats crazy, I would love to be able to see that myself but lord knows I wouldn't have the patience to source a telescope/camera and to figure out where another planet is...

Good job man!

@scottalanmiller They aren't down here in the states as far as I can tell.

@gjacobse not off hand, but can you not make a new one of those with a 3d printer or just purchase a new printer... surely that zebra isn't more than the part alone...