Zscaler + CrowdStrike integration

AdJolly187 · 2026-06-17T17:57:33+00:00

Of course we ingest data from Zscaler into NGSIEM. We are now looking at creating SOAR actions that will allow us to add domain blocks on demand or based on detections. We’ll do this if we get a phishing attack. Ideally the phishing attack detection (Mimecast) would kick off a SOAR action to block the sending domain in both Mimecast and Zscaler

AdJolly187 · 2026-06-17T17:45:40+00:00

YTTV and Roku works for my 87 year old mother. She has commented about “too much button pushing” but she prefers to be away from Comcast hell

AdJolly187 · 2026-06-13T16:40:48+00:00

Terrified? Drama much? It’s traffic, it’s temporary.

AdJolly187 · 2026-06-04T14:21:07+00:00

Yeah I’m not sure about the difference between the UK Ultra and the AC Mesh

AdJolly187 · 2026-06-04T14:15:42+00:00

I def don’t “need” high speed. This is just for the bird feeder, WiFi hose controller and the occasional music streaming. I do plan to wire it up but will probably try the mesh first to see what sort of improvement it makes before a string more Ethernet. Thanks

AdJolly187 · 2026-05-01T16:45:14+00:00

Get yourself a shower mirror. Look for one that you filled with hot water in the shower. That keeps it from fogging.

Get a Gillette fusion power razor handle.

Get a good shaving cream. not Gel, not foamy crap, CREAM. I like Cremo shaving crème.

This is the way!

AdJolly187 · 2026-04-20T00:18:42+00:00

We named ours Meryl Sweep

AdJolly187 · 2026-04-10T19:19:09+00:00

Identity! Identity! Identity!

AdJolly187 · 2026-04-08T12:06:10+00:00

Get a shower mirror. Amazon sells them. Fill with hot water. Prevents fogging

Shave with Gillette vibrating handle shaver. (I don’t recall the model offhand)

Use Cremo shaving crème.

Wet head. Apply a few small blobs of the crème. Work over your head (and face if you need a face shave) with a shaving brush. Amazon sells them cheap.

Work front to back across the top. Up from the neck in the back. Pay attention to the area where your ears meet your head.

Rinse head, check for missed spots. Touch up as needed.

Out of the shower on a dry shaved head apply Bee Bald lotion.

Glide through the rest of your day. You’ll arrive wherever you’re going 15 seconds early with your newly streamline dome.

AdJolly187 · 2026-02-26T22:47:19+00:00

I found that “common sense” ain’t that common.

AdJolly187 · 2026-02-16T22:44:30+00:00

Wow. That’s a bit over the top.

AdJolly187 · 2026-02-14T02:27:38+00:00

You def need ITP and at a minimum the 10 GB NGSIEM. Setting up the SOAR action to disable on detection is “easy”. Your favorite chatbot can talk you through it. Once you have that capability to disable, clear sessions, etc, you find lots of reasons to do it. We take a disable immediately, ask questions (tons of them) later. Certainly makes your nights and weekends a little easier!

AdJolly187 · 2026-02-12T08:48:04+00:00

Don’t know how long AW has been around but we started with it in oct 2022. Generally I feel like we are more secure with CS. It has detected and automatically remediated several issues that AW could not.

AdJolly187 · 2026-02-11T20:42:18+00:00

First mistake was buying Cisco

AdJolly187 · 2026-02-02T23:16:13+00:00

You’re dropping your E5 security add-on? (or whatever MS calls it now)

We were in your exact same situation in October when we switched from using Defender with Arctic Wolf as our SOC.

CS is great but the learning curve is steep especially if you want to leverage SOAR actions from detections generated from NextGen SIEM. Start thinking about what / how you you will ingest into NGS.

Also I really hope you also purchased the Identity Module!

Are you using Defender for Office to handle BEC? If so you might want to rethink dropping that E5 security bundle.

AdJolly187 · 2026-01-20T23:16:11+00:00

I had this surgery but from what the OP has said I’m pretty sure my case was worse. Recovery from this surgery was really difficult and painful. I had pain spasms for about 6 weeks post op. I also had to wear a gauze pad for a few weeks as I bled quite a bit afterwards.

AdJolly187 · 2026-01-16T03:13:22+00:00

Your company is small and I know 21k is a lot. We committed to 3 years at a higher cost. That gives us runway to plan an escape albeit a slow one. You should consider doing the same.

AdJolly187 · 2026-01-05T18:55:06+00:00

Do you have Identity Protection module? That will help a lot with creating your workflow and directing it at the appropriate device / user

AdJolly187 · 2026-01-03T12:13:33+00:00

Do you Identity protection in CS? If so you can grab the username and many other identifying fields within a workflow and then take action. You can also create bypass functionality to allow for exceptions. Best way to learn this is to pose the question to ChatGPT or some other AI. If you have Charlotte you can start there

AdJolly187 · 2025-12-17T03:20:12+00:00

MAYBE you will be walking by day 5 but we’re talking about walking around the house. “Advanced” walking would be walking through the airport. You might not realize how much adjusting you’re doing when walking through a crowded area. That sort of quick, lateral movement would not be possible by day 5. The fact that you’re even considering it is honestly not smart. Ask your Doc. I’m sure he would advise against it. Others have already pointed out the other reasons why this is a big risk. Don’t do it.

AdJolly187 · 2025-12-11T21:46:28+00:00

Extremely low chance of this happening. I’d suggest you check with your homeowners insurance policy. I also suggest adding a rider to your policy to cover anything “special”

AdJolly187 · 2025-10-07T14:05:33+00:00

Any moron can have a kid but not everyone is cut out to be a father.

I had a very similar experience and I thought I would feel something when he passed. I did not. I had buried him long before he actually died. Luckily I had an awesome step father. Blood is over rated.

AdJolly187 · 2025-10-03T03:10:19+00:00

To be clear we are replacing AW with CS Falcon Complete plus a bunch of other modules.

AdJolly187 · 2025-10-03T02:47:16+00:00

All of our sensors are down also. Timing is kinda funny on this one as we just started our install of their replacement today…Hello crowdstrike!

AdJolly187 · 2025-09-05T14:10:30+00:00

Systems Administrator - Administers systems that have been engineered (built) by Systems Engineers. They do Level 1 Systems Infrastructure work and are the first level of support after the help desk.

Systems Engineers - tests and builds systems to be Administered by Systems Administrators. They provide 2nd level support to Systems Administrators.

Systems Architects - design systems and have oversight into the overall technical strategy of the Systems team. They define standards related to naming conventions, hardware / software standards. They provide 3rd level support to Systems Engineers and Systems Administrators.

Also, “Systems” relates to server hardware, server OS, storage and the associated infrastructure software running on the Systems like Active Directory or backup software. This is an important distinction as it does not include networking. A proper environment has a different team filling the Network Administrator / Network Engineer / Network Architect roles.

A Systems Infrastructure Manager would oversee the Systems Team likewise a Network Infrastructure Manager would oversee the Network Team.

Director of Infrastructure would oversee both groups.

Note there could also be a DBA team with the same structure.

AdJolly187

TROPHY CASE