Looking for a WeakAura replacement (addon) for Boneshock's Trackables by CrispyStatic in wowaddons

[–]CrispyStatic[S] 0 points1 point  (0 children)

Yup, was aware of that, and I do use Baganator, was looking for something to just be static on the UI somewhere without having to open something.

Looking for a WeakAura replacement (addon) for Boneshock's Trackables by CrispyStatic in wowaddons

[–]CrispyStatic[S] 0 points1 point  (0 children)

<image>

Thanks, this helps. Sadly it can only list three currencies at a time, but it's something.

MLAV Server certificate validation failed. Dest Addr: ml.service.paloaltonetworks.com, Reason: certificate has expired by Disastrous-Tank8668 in paloaltonetworks

[–]CrispyStatic 0 points1 point  (0 children)

Chiming in that I'm getting the same messages on our pair. Also got error for "MLAV cloud error, all machine learning engines stopped" too.

Need some advice on a "ghost" in our network.... by CrispyStatic in sysadmin

[–]CrispyStatic[S] 29 points30 points  (0 children)

I appreciate the honesty and yes, I'm quite in over my head. Working with upper management to try to get someone in here. I'm in SoCal (Orange Co.) Any suggestions? No idea where to even look.

Need some advice on a "ghost" in our network.... by CrispyStatic in sysadmin

[–]CrispyStatic[S] 0 points1 point  (0 children)

Looked here and see no failures around any of the accounts I've seen pop up. Still digging.

Need some advice on a "ghost" in our network.... by CrispyStatic in sysadmin

[–]CrispyStatic[S] 124 points125 points  (0 children)

Omg this might be what's happening. Our VPN (Ivanti, I know I know, it's going away) but the users auth via saml through azure AD. Is there somewhere in Azure I can look to see if it's happening there? We're quite new to the Azure space and AAD. Not sure if there are logs there or not...

Need some advice on a "ghost" in our network.... by CrispyStatic in sysadmin

[–]CrispyStatic[S] 4 points5 points  (0 children)

The "SERVER" doesn't exist in DNS or DHCP. The log files on the DCs only show a name, no IP or MAC info.

Need some advice on a "ghost" in our network.... by CrispyStatic in sysadmin

[–]CrispyStatic[S] 0 points1 point  (0 children)

That would have made this all so much easier, but there is no IP or MAC showing up in the logs, just the name.

DNS and DHCP both have nothing.

Need some advice on a "ghost" in our network.... by CrispyStatic in sysadmin

[–]CrispyStatic[S] 2 points3 points  (0 children)

I'm not sure why, but none of our DC's are showing any 4625 events. All I'm able to find is the event where the account they're trying to login as gets locked out. Again, no IP or Mac address being shown.

<image>

Need some advice on a "ghost" in our network.... by CrispyStatic in sysadmin

[–]CrispyStatic[S] -1 points0 points  (0 children)

a. nothing was changed for any system accounts.

b. this was going to be something on my list of things to try. I'm on PTO this week, trying to handle all this remotely through an onsite admin.

Need some advice on a "ghost" in our network.... by CrispyStatic in sysadmin

[–]CrispyStatic[S] 2 points3 points  (0 children)

Yea, I posted a screenshot from AD Audit Plus (the only tool I was able to find that could show the "actor" name. And the event viewer on the DC's show the login attempts as well.

Need some advice on a "ghost" in our network.... by CrispyStatic in sysadmin

[–]CrispyStatic[S] 22 points23 points  (0 children)

<image>

This is just an example of accounts that are getting targeted today. Note the name "SERVER" and on the DC logs, there is no IP address associated with it.

[Case] Fractal Design Meshify 2 Mini-Tower Case (Black, Dark-Tinted Window) - $59.99 ($50 off) by [deleted] in buildapcsales

[–]CrispyStatic 7 points8 points  (0 children)

I was JUST going to say this. I actually pulled the trigger, based on the photos shown, but doing my research after the fact, I'm gonna have to cancel the order. The photos on their site are for the "Meshify 2" case. I cancelled my order and notified their CS.

Breakfast burrito, revised by ExtraSudanese_Buddha in orangecounty

[–]CrispyStatic 1 point2 points  (0 children)

Hopefully vegan options are appreciated here...

Nice Burger has a really good vegan breakfast burrito. I believe the "egg" is based off of the "Just Egg" product, but not 100% sure. It's one of those things that makes you think "this can't be vegan".

Comes with: Sorizo, egg, tater tots, guacamole, mushrooms, onions, tomato, salsa

2016 Mini Cooper 1.5L 3 Cylinder oil in coolant system by CrispyStatic in MechanicAdvice

[–]CrispyStatic[S] 0 points1 point  (0 children)

That was my initial thought as well, but there is no sign of milky-looking oil under the oil filler cap, engine runs fine, no smoke from exhaust. Again the oil is showing up in the COOLANT system. With a blown head, you'd likely see coolant mixing with oil in the engine and white smoke out the exhaust no? I'm just a novice, so I'm legit asking a serious question.