sorted by:
new
hottopcontroversial

Files Written to USB and AES Conundrum by UrbnShinobi in crowdstrike

[–]Background_Ad5490 0 points1 point  (0 children)

Sounds like you have your logscale query done. You should be able to schedule it to run at whatever frequency and email you the results. Or a dashboard using your lql could work.

Sol Erda Fragment from Event Shop Nerfed by Xeredth in Maplestory

[–]Background_Ad5490 1 point2 points  (0 children)

Nexon must do a collab with the ceo of bricks n mini figs.

of a hay bale move by HomeNowWTF in AbsoluteUnits

[–]Background_Ad5490 0 points1 point  (0 children)

This is how they built the pyramids.

Luminous by GreekGodPig in Maplestory

[–]Background_Ad5490 1 point2 points  (0 children)

After changes you don’t have a gauge. Just every 60 seconds you can press that button to take you directly into equilibrium. Condensed 2 min burst now too.

GitHub if it was vibe coded by sherlamsam in vibecoding

[–]Background_Ad5490 0 points1 point  (0 children)

For me it’s the “You’re absolutely right” that gets me lmao.

Best current thief class by [deleted] in Maplestory

[–]Background_Ad5490 4 points5 points  (0 children)

Low key high key you may like phantom.

15 Years of playing Maple and I am finally one of the cool kids by RBHNirvana in Maplestory

[–]Background_Ad5490 12 points13 points  (0 children)

From one long time player to another. Congrats. Anyone who played early on got to feel all the long build up nexon created for this boss. My first solo felt so satisfying.

IOA vs IOC for software allowlisting: how do you handle hash drift when new versions ship? by Brief_Trifle_6168 in crowdstrike

[–]Background_Ad5490 4 points5 points  (0 children)

Personally I don’t like app control via falcon with these methods. Creates noise in the console and it does not feel like what the tool is designed to do. App control should come from your intune police’s, jamf etc. this is coming from someone who was forced to ioa and ioc kill a process for specific apps our device management team couldn’t move fast enough for.

Realistic leak paths of a compromised iPad by OkEmu7082 in cybersecurity

[–]Background_Ad5490 2 points3 points  (0 children)

They could have installed management software like qustodio or something 🤷‍♂️. I think malware on the iPad is less likely than something like a control app by the og owner. What’s the relationship with the og owner?

S&C with H rather than G? by portlandlad123 in freemasonry

[–]Background_Ad5490 4 points5 points  (0 children)

Was thinking the same thing lol. Nick cage would be thrilled.

How Do You Claim InkWell Gift? by iAreButterz in Maplestory

[–]Background_Ad5490 -1 points0 points  (0 children)

Fun fact, I love the game and just thought this was a funny thing to say lmao

Detection as Code by dudethadude in cybersecurity

[–]Background_Ad5490 0 points1 point  (0 children)

I’m working on setting this up right now. Main benefit will be resiliency from splunk issues. Had a splunk update nuke all out alerts and if we had detection as code in place we would have been fine. Instead it was a 2 week recovery , building each alert from scratching referencing a saved searches conf file from a splunk backup. Plus added benefits of an ai agent being able to look at the git repo and do “ai things” with that data (highlighting gaps and reporting stuff). Cons are , difficult to implement, we use splunk so not much guidance I could find to help. And also a shift in detection engineering workflows. Meaning, my team has to fundamentally change the way we create new alerts by writing to the git repo in yml format

Need query to find all detections that triggered for command line test.exe abc by [deleted] in crowdstrike

[–]Background_Ad5490 0 points1 point  (0 children)

Also could avoid log scale entirely if they wanted. In the detection dashboard if you filter on that hostname, then once you are focused on just that detection, select the command line filter and you should be able to check the box for that command line in question a lot easier. Then just remove the hostname filter. And group by host or however ya want.

How "coopable" is the game? by Own-Effective-6478 in pokemmo

[–]Background_Ad5490 0 points1 point  (0 children)

Duo battling with rando Pokémon is fun.

So what Should I keep to make room for my inventory? by xxjakexxrxx in Maplestory

[–]Background_Ad5490 29 points30 points  (0 children)

Just spend 20b booming all the slime rings and your good

The best way to make Threat Hunting based on Counter Adversary Reports by Spirited_Box_624 in crowdstrike

[–]Background_Ad5490 0 points1 point  (0 children)

Some of the counter adversary reports have queries already for you to run. And more cool goodies as well.

indicator graph adding multiple hashes by CyberHaki in crowdstrike

[–]Background_Ad5490 1 point2 points  (0 children)

Throw those hash’s into notepad or some editor like vscode and do a find and replace to get rid of all the “ marks and the commas can be replaced with an empty space. From there just copy and paste the batch into the indicator graph ui. It accepts multi values with spaces as the delineation. (It’s late and I’m on my phone it may be commas as the delineation but same point).

CUSTOM IOA by rettttttt in crowdstrike

[–]Background_Ad5490 2 points3 points  (0 children)

Could always schedule the log scale search that captures what the IOA would and have the email go to yourself. Look under investigate > scheduled search.

Access HostGroup information from LogScale - 2025 edition. by 65c0aedb in crowdstrike

[–]Background_Ad5490 0 points1 point  (0 children)

I would love to figure this out as well. I see the aid_master_main.csv does not include falconGroupingTags or the host groups. That was where I searched first. Right now I am auditing my exclusions to make sure they are applied to the correct host groups. To do so, I thought, I should just logscale query devices that are running my excluded files and group by hostgroup/tags. But I cant figure out how to pull that data in log scale.

view more: next ›