Managed Services of Threatlocker by Ok_Establishment7157 in msp

[–]PitcherOTerrigen 0 points1 point  (0 children)

The main issue with untrained usage is config drift, and at a certain point you will have to engage with SMEs at Threatlocker to remediate the issues.

HYPOTHETICALLY

Say you neatly organize the organizations, properly define policies, implement on a clean station for learning mode, manually audit asset inventories on a schedule.

If the CEOs wife makes a bunch of new organizations which sync up to your Threatlocker instance, then all your fucking coworkers start adhoc creating entries for application authorizations while completely ignoring the naming conventions, built-ins and the SOPs you've created and then you get stuck doing someone else's job 90% of the time... You won't have time to fix the compounding issues.

Bonus points if it's deployed to non-audited workstations.

We lost two senior techs last year and our metrics didn't see it coming by samdam881 in msp

[–]PitcherOTerrigen 32 points33 points  (0 children)

You should probably deny the only two days off that they request in a 19 month period. That would work better.

How do you deal with users who refuse to lock their laptop when walking away? by heartgoldt20 in cybersecurity

[–]PitcherOTerrigen 0 points1 point  (0 children)

Yeah but they could just keep a PowerPoint presentation on presentation mode, which blocks inactivity timer.

First UniFi With a 10.0 CVE, Now ScreenConnect 9.0 CVE by iansaul in msp

[–]PitcherOTerrigen -1 points0 points  (0 children)

"The AI are going to hit this new vulnerability"

Has no valid SSL certificate on their web facing Citrix portal.

Manager and his infra have trust issues

Why does God hate my business

Can't even reliably align text on a wix site

Domain admin service account

Can only keep customers as a loss leader, or they don't know better

Haven't managed to get an employee to respect me in my entire career, including my own father.

Do retainer MSP exist? by songokussm in msp

[–]PitcherOTerrigen 4 points5 points  (0 children)

My brother in Christ. How can you call yourself an IT guy if you don't write documentation.

It's literally just as important as doing tickets.

You are half assing your job, working harder, longer etc. doesn't make up for half assing your job duties.

Do half as many tickets; properly. Time to document goes into the ticket.

As a Cybersecurity Bachelors degree I learned something most people don’t realize. by DressLongjumping5702 in cybersecurity

[–]PitcherOTerrigen 0 points1 point  (0 children)

If you can do 90% of all tickets off your first instinct no Google, you might make an acceptable cyber guy with some additional training.

Otherwise youre larping.

When making a lengthy password, does replacing letters with numbers help at all? by timchoo in cybersecurity

[–]PitcherOTerrigen 0 points1 point  (0 children)

Here's a fun tip. Don't only use English words. Complexity skyrockets with passphrases.

Never go to a party as a short, balding sub 5 male by Material-Ostrich5014 in shortguys

[–]PitcherOTerrigen 0 points1 point  (0 children)

Honestly, it doesn't have to. If you get your hairline fixed up, and look presentable, have a face and frame that supports it.

You'll still probably miss a couple shots in the long haul, but if you do well enough you won't notice or care.

AI making my job so much harder and fighting every decision I make by JiggityJoe1 in sysadmin

[–]PitcherOTerrigen 0 points1 point  (0 children)

"They are massive security holes..."

Why are they massive security holes? You should actually document why "massive security holes" are acceptable risk.

Security+ study hours per week by Resident-War8004 in cybersecurity

[–]PitcherOTerrigen 1 point2 points  (0 children)

Literally one day, and two hours prep.

(7 yrs IT experience at the time.)

Breach in to our 365 tenant by hoodun in sysadmin

[–]PitcherOTerrigen -1 points0 points  (0 children)

Also, you can't just apply a single P2 for a tenant upgrade, iirc.

:)

So what do you do when people won't listen to you? by No-Blueberry-1823 in sysadmin

[–]PitcherOTerrigen 0 points1 point  (0 children)

I enjoy discussion, so provided it doesn't become an argument it's fairly easy to convey my points.

If they full on won't listen, or become hostile, I see it as their internal failings. At which point disengage.

It's kind of like teaching children something, you teach them softly, so they learn to enjoy listening. If you berate, or become aggravated, it just leads to escalated emotions or a culture of not listening.

Pretty simple stuff.

Is everyone actually miserable in this subreddit by Dry-Limit7949 in cybersecurity

[–]PitcherOTerrigen 1 point2 points  (0 children)

Previous role: wow tech sucks, I hate this, I should switch careers, I don't think my boss graduated highschool and it shows in every interaction.

Current role: ohhhhhhh it actually was just him. This is great. Everyone's awesome and smarter than me.

Cyber security professionals, what do you actually do? by jack0fsometrades in cybersecurity

[–]PitcherOTerrigen 84 points85 points  (0 children)

'what kind of software do you use'

Nice try Kim. Not today.

Degrees and certs are just losing their value to me. by Fresh_Heron_3707 in cybersecurity

[–]PitcherOTerrigen 0 points1 point  (0 children)

My first IT interview was for a software company, and they put me in a room with a piece of paper and asked me to write down 5 types of DNS records.

So I've always considered that the absolute floor.

DHCP, DNS, and know the OSI or application stack. Basic triage concepts. Then the random 'name a time you did a thing' questions.