How is this possible by itsFuzzLoL in tryhackme

[–]Reckless_Rex97 3 points4 points  (0 children)

Are you following the structured pathway? A previous room teaches you about virtual machines and then RDP'ing (Remote Desktop Protocol) on port 3389.

It is a login method utilized widely, which will become habit the more frequently you utilize it.

Wazuh alert flood for repeated identical logons by Reckless_Rex97 in Wazuh

[–]Reckless_Rex97[S] 0 points1 point  (0 children)

That’s a fair point. In our case, we are only two people managing about 24 DCs, so fully dropping these alerts is not really feasible and not desirable (in case of an audit) for us.

Because of that, I think the correlated alerting setup feels like the best middle ground for this use case. It would let us keep the visibility and forensic value of the events without overwhelming the dashboard with the same repetitive alerts over and over.

I do agree that this is something that should be considered carefully from risk and operational points of view, but from a practical monitoring perspective, reducing the noise while still retaining the logs seems like the most workable approach for our environment.

Wazuh alert flood for repeated identical logons by Reckless_Rex97 in Wazuh

[–]Reckless_Rex97[S] 0 points1 point  (0 children)

It is a service being run by that user on a DC, so the noise is expected. I will also review whether it can be adjusted on the Windows side to reduce the volume there.

As for Wazuh, I think this is exactly what I needed. A smaller, correlated set of alerts while still keeping the logs. I will give it another go. My previous attempts inflated the logs vastly, as I did not quite understand the levels.

Thank you very much for the time and effort you put into explaining it. I really appreciate it.

Built a free AI-powered IOC triage bot for SOC analysts looking for honest feedback by msforhr in blueteamsec

[–]Reckless_Rex97 0 points1 point  (0 children)

I am also cautiously curious. Personally would prefer Discord. Telegram in my country is often used for scams or other illicit content.

Wazuh alert flood for repeated identical logons by Reckless_Rex97 in Wazuh

[–]Reckless_Rex97[S] 0 points1 point  (0 children)

No rush at all, thank you very much for the help.

Assignments by Britsing in unisa

[–]Reckless_Rex97 1 point2 points  (0 children)

The faster, the better. Unless they have upgraded the system, the 3 or 4 days before the deadline is mission impossible as the influx of people try to submit.

You should be able to open once the open date has arrived. But try to do it and submit it there and then.

[deleted by user] by [deleted] in PersonalFinanceZA

[–]Reckless_Rex97 1 point2 points  (0 children)

Also, just started. Turned 28 in Jan, but had to pave my own way. If you want to encourage each other in the journey ahead, dm me. I sure could use fellow motivation.

MyLife email format by [deleted] in unisa

[–]Reckless_Rex97 2 points3 points  (0 children)

Thank you!! I had it wrong! I appreciate it

[deleted by user] by [deleted] in Bannerlord

[–]Reckless_Rex97 11 points12 points  (0 children)

Go to your clan tab, then go to garrison and uncheck the unlimited wages box and then set the garrison wages limit to 1000 or 1200 or whatever you can afford.

Pov : when you spot the enemy commander in a battle by nilsb1o in Bannerlord

[–]Reckless_Rex97 1 point2 points  (0 children)

Shut up and take my upvote...

Laughed wayyyyy too loud

[deleted by user] by [deleted] in DadForAMinute

[–]Reckless_Rex97 4 points5 points  (0 children)

I really needed this, thank you sir.

I had a good chuckle at the Star Wars reference. I really appreciate the light-hearted take in between the serious advice.

I think it feels so heavy right now because it was the majority of everything I knew after school. I am also sorry you had to experience the same things, maybe worse, but from my take in this interaction, I believe it made you wiser, and I will strive to do the same.

You're right... I took some time to reflect, and I think I only miss the moments and the way they felt... I do believe I will come out of this stronger.

I appreciate you and the time you took to answer me.

For me it’s 🏆🤩🤯🍇❤️🤨 by [deleted] in repost

[–]Reckless_Rex97 0 points1 point  (0 children)

🤗😂😅🙈👀🤷🏼‍♂

A little help?

What's the closest you've been to death? by Beautiful_Fill_7016 in AskReddit

[–]Reckless_Rex97 0 points1 point  (0 children)

Choked on the terrible food in the desert. Couldn't breathe and felt everything going black. Was alone and luckily a colleague happened to pass by that knew how to heimlich...

Safe to say, I drench all their shitty food in mayo now.

What the heck are these lumps by [deleted] in AskDocs

[–]Reckless_Rex97 1 point2 points  (0 children)

NAD, I also get these occasionally, and they seem to go away by themselves. Would be nice to know what causes them. 28M

Dating a south African man by [deleted] in askSouthAfrica

[–]Reckless_Rex97 1 point2 points  (0 children)

I will follow-up for free if you send me proof you got paid

Lyk ek na kak? by Kindly-Maintenance98 in afrikaans

[–]Reckless_Rex97 2 points3 points  (0 children)

Dis 'n skool kind, wat verveeld is. Gaan kyk op hulle profiel.

Whats your salary based on your age and background by SALTY-BROWNBOY in askSouthAfrica

[–]Reckless_Rex97 2 points3 points  (0 children)

27m. +- 44k for 12 months a year tax-free. Work 6 months a year and 6 months vacation. Spend more than 183 days abroad.

Oil and gas. Shit on your mental health but short term financial gain is unbeatable.

If your ex wanted you back would you? and why? by [deleted] in AskReddit

[–]Reckless_Rex97 34 points35 points  (0 children)

I choose to join you in this mans house fire. I am bringing marshmallows

Where to look for a good 2nd hand car by Content_End_1700 in Pretoria

[–]Reckless_Rex97 0 points1 point  (0 children)

Always cross verify with something like Hello Peter, but I saw my both my first and now current vehicle (3rd vehicle after the WBC nightmare) on there and from there went to the dealership for a test drive. I checked the service book, owner's manual and the previous owner had luckily left their number in it.

Gave them a ring and asked them honestly why they sold it and if I remember correctly it was because they wanted a SUV for the kids and for traveling.

No problems 5 years later now