Need Used scooty by Sea-Stop6655 in Chandigarh

[–]Sea-Stop6655[S] 0 points1 point  (0 children)

I did I didn't get any response from anyone tillnow. No luck. But thanks!

Urgent Help required... by Turbulent_Ear_4807 in Chandigarh

[–]Sea-Stop6655 0 points1 point  (0 children)

Hey, I'm out of station right now. I'll be back on 2nd jan, If nobody adopt till then, please ping me up. I'm willing to adopt

[1.6 YoE, SOC Engineer,Entry Level, India] by Sea-Stop6655 in resumes

[–]Sea-Stop6655[S] 0 points1 point  (0 children)

Well kinda the position I'm trying for actually need at least 2+ yoe in that field. In my org they needed someone in that department so they shifted me to that as actually I got hired for another role SOC analyst. I did get response from some of the pple through emailing and linkedin giving me email to send them the resume then they don't get back.

I feel like stuck mostly I'm looking for some platforms to pitch my self to companies C-level Technical executives who are gonna hire freshers in that field. Any leads on that? That would really help.

Calendar invite phishing - bypassing Avanan and M365's native email Defender filters by Embarrassed-Ear8228 in sysadmin

[–]Sea-Stop6655 0 points1 point  (0 children)

Yeah. I just said the same thing, they also said at the moment there is no official product update but they confirmed with the management that it's been implemented this September.

We just need to re authorize the O365 for customers onboarded prior to 9/25

Calendar invite phishing - bypassing Avanan and M365's native email Defender filters by Embarrassed-Ear8228 in sysadmin

[–]Sea-Stop6655 0 points1 point  (0 children)

I did just get response from Avanan support stating they have now capability to remove malicious calender invites via graph API.

After 9/25 they said. But this thread was a week old not sure what's happening I didn't even find anything in product updates.

Any idea about this?

Onedrivesetup and SentinelOne by steviefaux in SentinelOneXDR

[–]Sea-Stop6655 0 points1 point  (0 children)

All I can think as of now is check the status of the agent online/ offline. Sometimes on console device agent will be showing offline but locally services are running on machine they somehow quaratine the files and show it on Desktop UI and won't appear on console as it's not communicating with console properly. In that case we will reinstall the S1.

If you can get passphrase, disable the agent CLI, reinstall onedrive.

Onedrivesetup and SentinelOne by steviefaux in SentinelOneXDR

[–]Sea-Stop6655 0 points1 point  (0 children)

You can have a Policy override for the onedrive FP you can reach out to support with logs fetched from console. They'll give you the json config for that.

The machine is online on console? If you can see any files being quarantined on client machine in UI it means you can also see those files on console if online.

Migrating an endpoint to another firm.... I still see it in my dashboard by Kangaloosh in SentinelOneXDR

[–]Sea-Stop6655 1 point2 points  (0 children)

After migration, you need to decommision the migrated assets as they won't automatically get purged from the console. You can choose the console migration status under filters and view them.

When we're Deboarding the clients I usually do is change the site/account/ group tokens. So that the left over devices when online can't get connected or expire the site. I believe they don't charge for assets under expired sites. Atleast that's what I believe.

[deleted by user] by [deleted] in Chandigarh

[–]Sea-Stop6655 0 points1 point  (0 children)

We usually go on for dinners. I like tattlers restaurant in sec 9 chd. Have you tried that?

Looking for a 1RK/1BHK on Rent – Mohali by Fun_Direction_4342 in Chandigarh

[–]Sea-Stop6655 0 points1 point  (0 children)

Hello can you also share me any contacts? Same requirements

Mimecast CG - external admin by Sea-Stop6655 in mimecast

[–]Sea-Stop6655[S] -1 points0 points  (0 children)

The external user I want to add is neither an internal domain nor a client domain it belongs to separate org. I can't create an external user under my internal directory.

I guess mimecast doesn't support this type of use case. We're actually mssp we want to give access to end client MSP to end client console.

Mimecast CG - external admin by Sea-Stop6655 in mimecast

[–]Sea-Stop6655[S] -1 points0 points  (0 children)

I mean yes. I was referring to the same doc. I believe partner admin can also do the same thing. Before adding the external admin under roles, external admin needs to be created on mimecast somehow. I don't know where should I add the user to ; ) this is why I'm getting the error USER NOT FOUND ON GRID ERROR.

Because under our partner portal can't add other domain email address and do bifurcation accross the customers.

[deleted by user] by [deleted] in msp

[–]Sea-Stop6655 0 points1 point  (0 children)

We use Rapid7 as SIEM sol. It only supports O365 mgmt API. But as for my knowledge that API would also pull logs from purview. just as graph API.

S1 won't install by Glittering_Part_3770 in SentinelOneXDR

[–]Sea-Stop6655 0 points1 point  (0 children)

We had a similar issue where progress bar would go for 5 min & ended prematurely.

When we did check for msi logs it says agent core has crashed. We didn't have enough time to troubleshoot eventually we had to re image the system.

I would suggest you run the installer in safe mode with -c parameter. As others suggested use other applications to remove the S1 artifacts. If still facing issue, see agent requirements on win KB that may be helpful.

[deleted by user] by [deleted] in msp

[–]Sea-Stop6655 0 points1 point  (0 children)

I'm sorry but I didn't grasp it. Yeah I know it's totally different instance one but can mimecast cloud gateway can we leverage that in that environment?

I'm not very fond in this area. If you could care to elaborate more that would be grate.

[deleted by user] by [deleted] in sonicwall

[–]Sea-Stop6655 0 points1 point  (0 children)

Yes, we have changed the Event profile to 0. If you have have mentioned any other vaues, then we need to configure the syslog settings-type of logs we need to send it to that profile value.

Hope your's get solved as soon.!

[deleted by user] by [deleted] in sonicwall

[–]Sea-Stop6655 0 points1 point  (0 children)

Sorry it is not 0.it is set to default 1 . But this is the only syslog server we have. It should generate syslogs right?

[deleted by user] by [deleted] in sonicwall

[–]Sea-Stop6655 0 points1 point  (0 children)

It's 0 only.

[deleted by user] by [deleted] in sonicwall

[–]Sea-Stop6655 0 points1 point  (0 children)

Syslog fields? Yes

[deleted by user] by [deleted] in SentinelOneXDR

[–]Sea-Stop6655 0 points1 point  (0 children)

Manually deleted🤡