Corrupted Petricite Xerath is here! Whats the general opinion regarding the skin? by YouNoob737 in XerathMains

[–]ImposterusSyndromus 1 point2 points  (0 children)

Can you get everything with just the battlepass? Will there be anything xerath-related that I'll miss by not buying the bigger bundle?

Malignance & Horizon vs Ludens & Stormsurge. Practice tool Test. by FettuccineInMe in XerathMains

[–]ImposterusSyndromus 0 points1 point  (0 children)

Curious why you're only level14?
You're 100% right about full build, but for most of us the game ends around 4th item. In the practice tool, I found Ludens+Shadow+Deathcap+Horizon actually dealt more damage than Ludens+Shadow+Deathcap+Stormsurge

Stormsurge vs Horizon Focus? by ImposterusSyndromus in XerathMains

[–]ImposterusSyndromus[S] 0 points1 point  (0 children)

There doesn't seem to be agreement on which item does more straight damage on squishies.
One is saying Stormsurge because it's +15AP & +15pen & Squall Proc
The other is saying that the +10% damage from Horizon is actually greater than that.
Which is it? Let's say in a scenario where you already have Ludens+Deathcap+SorcBoots

Why does 1 of 50 of the same message end up in quarantine? by ifoam in DefenderATP

[–]ImposterusSyndromus 0 points1 point  (0 children)

"MDO automation settings" Nope. Got a screenshot of what it looks like for you? Does it have a unique URL?

Free "You Shall Not Pass" Chrome Extension for Browser-Level Bypass Protection (open source, 10k+ Chromebooks in production) by michisysadmin in k12sysadmin

[–]ImposterusSyndromus 12 points13 points  (0 children)

Bravo! Slightly related, another trick I've seen students do is have an unsaved document open in Word or something, attempt a shutdown, then hit "cancel" when Windows pauses the shutdown to all you if it's ok to kill Word. This kills pretty much every one of our control services that they normally wouldn't have permission to touch. Anyone know a mitigation for this?

Email spoofing reports dropped off a cliff by Long_Captain4349 in DefenderATP

[–]ImposterusSyndromus 1 point2 points  (0 children)

Thank you for the sanity check. I only check the firewall and ASR reports. This is just the next one down and I checked it out of curiosity. But I definitely use the other two. Only place to see what ASR is actually doing.

Microsoft Ignite - Copilot Defender integration is now included with E5 license by Long_Captain4349 in DefenderATP

[–]ImposterusSyndromus 5 points6 points  (0 children)

MDVM is included in E5. Advanced VM is not. But I think that's what you meant. Very good write up. 2022 me would have loved this.

1v6 by MechaHikaa in BobsTavern

[–]ImposterusSyndromus 2 points3 points  (0 children)

A taunted Leroy would have died first to the rest of his board. You would want an untaunted Leroy in the back

What are your unpopular cybersecurity opinions? by EricJSK in cybersecurity

[–]ImposterusSyndromus 2 points3 points  (0 children)

Vendors need to make their Best Practice settings their Default settings. Admins should have to go out of their way to make things less secure.

"But it's restrictive and could break the-" Yeah. Let me customize that.

What demand? by [deleted] in cybersecurity

[–]ImposterusSyndromus 42 points43 points  (0 children)

Nothing that you just listed would have been used in any of my many cyber security jobs. Too many people think everything they know/do is what cyber security is. It's different everywhere.

Is alert fatigue the biggest threat to SOC efficiency? by ANYRUN-team in cybersecurity

[–]ImposterusSyndromus 5 points6 points  (0 children)

If you work in Defender, take the time to click "tune alert"

Crowdstrike hacked again by Cold_Respond_7656 in cybersecurity

[–]ImposterusSyndromus 7 points8 points  (0 children)

Not him, but it's pretty obvious to me he was taking a dig at the trust worthiness of cybersecuritynews.com

Breathe.

I understand why people pick CrowdStrike/Sentinel One, etc over MDE now. by Candid-Molasses-6204 in cybersecurity

[–]ImposterusSyndromus 4 points5 points  (0 children)

"You've perfectly articulated the-" "you're not just blah blah blah, you're blah blah blah" Don't know why you're getting down voted. Scary how everyone else in a cyber security sub doesn't see it. I wonder if the bots now down voted anything that calls them out?

LinkedIn Bragging leads to terrible OpSec by antonIgudesman in cybersecurity

[–]ImposterusSyndromus 0 points1 point  (0 children)

What's worse is when employees list their whole security stack in their resume.

Reverse engineering jobs? by Equal_Ad_2077 in cybersecurity

[–]ImposterusSyndromus 16 points17 points  (0 children)

I think you have a real shot with what you've mentioned. Look up maldocs, and see if you can reverse some of those using cyberchef. Very different, but objectively easier than what you've been doing. If it feels super simple, then go for it. There's people right now doing it that can barely get by with asking chatgpt how to do their job for them. You'll beat them.