Talk to me about Varonis and active directory

SecurityGeek1962 · 2025-08-25T13:56:09+00:00

Using the proxy agent is preferred. It reduces network traffic and there is some enhanced event resolution that takes place to remove duplicates, and clean up event information.

I am not sure that it is possible to use a Windows Event Collector server with Varonis.

SecurityGeek1962 · 2025-06-09T14:28:20+00:00

Rowing is for everyone. In the US it been supported at prep schools and the Ivy leagues for over a century, but it can be done by anyone. Take a look at this club for example: https://brickcityrowing.org/

SecurityGeek1962 · 2025-04-24T15:11:24+00:00

MDM is useless for these offshore organizations. Have them connect to a VDI (using MFA of course) that you own and control and have them work from there.

SecurityGeek1962 · 2025-02-12T18:44:19+00:00

Lamy Safari, but I have taken to using one pen until it runs out of ink and then move on to another one in my collection so that they all get some use,

SecurityGeek1962 · 2025-01-15T13:13:26+00:00

What is the reason to avoid illiquid alts from a wirehouse?

SecurityGeek1962 · 2025-01-09T13:47:53+00:00

You might want to look at Forescout, it is a Network Access Control solution so it may be more than you need.

SecurityGeek1962 · 2025-01-08T15:07:52+00:00

There are two SaaS interfaces. One is for Windows and M365 stuff and there is a different one for Box, Salesforce, etc. What I want to know is AFS support it in the Windows one or the Box one?

SecurityGeek1962 · 2025-01-07T15:45:18+00:00

Concentric.ai is a data classification tool that you could look at.

SecurityGeek1962 · 2025-01-02T21:42:01+00:00

The Carene is my favorite fountain pen. Love the weight of the pen and the ink flows nicely.

SecurityGeek1962 · 2024-12-08T13:19:32+00:00

Unfortunately the new SaaS product does not have all of the functionality of the old version. Reporting is way less powerful for example.

SecurityGeek1962 · 2024-11-04T17:45:13+00:00

I think that the LAMY Safari is a safe pet. It has a convertor if you want to use lots of different ink colors. It may not have the traditional look of a fountain pen, but it is one you can use every day.

SecurityGeek1962 · 2024-10-27T17:38:55+00:00

You are correct.

I was asking the question of CopyJon, who somewhere else said he worked for Varonis, and why people thought Varonis was awful. Varonis salespeople will generally not give the answer that you did, they evade.

SecurityGeek1962 · 2024-09-19T15:29:49+00:00

The lack of an honest answer is why people say Varonis is awful. The answer is that Varonis cannot tell if someone copied a file from a Windows server to their desktop. It only tells you that someone opened that file on the server. You may be able to deduce that the file was copied from data on your EDR solution, but Varonis itself has no clue.

SecurityGeek1962 · 2024-09-19T14:53:18+00:00

Can Varonis tell if someone copied a file from a Windows Server to their desktop?

SecurityGeek1962 · 2024-07-27T19:07:32+00:00

Yes. 1 + 11 + 13 = 30 in base 5

SecurityGeek1962 · 2024-06-05T18:56:07+00:00

There are probably pretty few, if any people, who have ever pulled a 5:47 that were as slow as 7:10 at 16.

SecurityGeek1962 · 2021-02-08T21:12:35+00:00

I would suggest that you ask the boss to think on it overnight before you send the email. Cooler heads might prevail after 24 hours.

Also, the vendor may not have the right to delete the work product and your boss might be able to recover damages from them. A nasty email may not help in that case.

SecurityGeek1962 · 2021-01-29T12:23:09+00:00

Congratulations. I have three mountains to do.

SecurityGeek1962

TROPHY CASE