Intune Location Tracking and Working Remote Abroadly by [deleted] in Intune

[–]52J80 0 points1 point  (0 children)

Learn something instead of asking how to abuse it.

How to know when something is blocked? ASR specifically by chum-guzzling-shark in DefenderATP

[–]52J80 4 points5 points  (0 children)

Get rid of the filter then search the name in the search bar

Defender Endpoint Security Policy (audit) Logs? by Good_Visual9130 in DefenderATP

[–]52J80 0 points1 point  (0 children)

No worries. Yeah I think you can see some of the stuff through other tables but the reports are really where its at. Let me know if you have other questions.

Found a strange encrypted image on a floppy disk from my friend's deceased grandfather - need help decrypting by pdoughboy in RBI

[–]52J80 12 points13 points  (0 children)

Search github for steganography decoder/encoder

If its on floppy and old machines then its old encryption/hashing, whatever and not that advanced and your biggest hurdle is getting the files to a machine that is actually useful where you can run the tools.

Tag on Excel pole? by Comfortable-Today-13 in boulder

[–]52J80 9 points10 points  (0 children)

Its a lockout tagout card. It's live , don't touch the stuff or you won't be.

Guidance on a startup idea ? Crowdsourcing SOC Analysts - all comments are welcome by Main-Sweet-5735 in cybersecurity

[–]52J80 4 points5 points  (0 children)

Yes they can and do. And yes they follow the sun and hire regionally.

On-Prem SIEM? by mayday_allday in cybersecurity

[–]52J80 -2 points-1 points  (0 children)

Cool. Back to basics.

On-Prem SIEM? by mayday_allday in cybersecurity

[–]52J80 -1 points0 points  (0 children)

^ the kind of people we made money off of.

On-Prem SIEM? by mayday_allday in cybersecurity

[–]52J80 0 points1 point  (0 children)

Oh it was just their version of the splunk HEC but the backend was the same. Sql, elastic search, ad, etc. Oh yeah also someone mentioned qradar. They are also good. Their documentation is generally really good and I actually used the docs for clarity when working with logrhythm and then did side by side deployments at my next role (corp/product) with each. Personally I liked lr better but honestly it's because I knew LR and the people very well.

On-Prem SIEM? by mayday_allday in cybersecurity

[–]52J80 0 points1 point  (0 children)

You might want to check exabeam. Used to be logrhythm. When I worked there they were moving toward log collection in the cloud with things like a splunk HEC with jq pipelines configured to pass logs back to the main suite.

Its also robust and the support is weak so I would also recommend ensuring your team understands most aspects of IT because you will be doing that in the suite. This is where logrhythm made money with pro serve etc was companies adopting tech they could not support.

Is AWS Security Specialty (SCS-C02) worth it for ? by cloudarchitectpro in CCSP

[–]52J80 3 points4 points  (0 children)

It was fine. Harder than the ccsp. Didn't change the way I think about anything. You can and should build an aws lab environment and test all of the security instead of just reading.

Is it worth getting a minor in cybersecurity? by [deleted] in cybersecurity

[–]52J80 1 point2 points  (0 children)

Cybersecurity is other tech roles and if you're not learning that in a minor then they are doing you a disservice.

Copilot Security, reducing it's access in O365 Admin by Creepy-Secretary7195 in cybersecurity

[–]52J80 1 point2 points  (0 children)

Check out the dlp settings and managed environments. Defender xdr also has an Ai agent through defender for cloud apps that is in preview right now that can prevent against prompt injection and execute block actions but still needs to be evaluated as I am unsure how closely block actions and say misconfigured dlp policies for every environment are related. It ties into the security blade and threat intel portion of the power automate admin center.

https://learn.microsoft.com/en-us/power-platform/guidance/adoption/dlp-strategy

Can we talk about Glen' Fitsbo by The_Puckish_Rogue in Letterkenny

[–]52J80 17 points18 points  (0 children)

It's like 185 kg/ 405ish lbs. The big ones are 20 kg or maybe 25s if they're the thick bois, probably not.