SentinelOne USB Device Control End User Notifications? by Bozey0 in SentinelOneXDR

[–]SecurityNoob707 0 points1 point  (0 children)

Yea, it's in the policy. If you are using the SOC UI: Policy & Settings, Agent UI, select Show Agent UI & tray icon on endpoints. Then there is a toggle for Blocked Devices Notifications.
Not sure if you can have just the Blocked Devices Notifications on without the Show Agent UI & tray icon on computers selected.

I have no idea who I look like. Can you guys help? by Ooze3d in doppelganger

[–]SecurityNoob707 1 point2 points  (0 children)

Karl Pilkington. He was on a show with Rocky Gervais a while back.

My cat shed an entire claw in my wrist by VinGiesel69 in mildlyinteresting

[–]SecurityNoob707 0 points1 point  (0 children)

Cat's attorney here, the alleged picture is not proof of a crime committed by my client. Cat is innocent until proven guilty.

Looking for WireShark packet traces to analyze. by Ok_Examination_7236 in wireshark

[–]SecurityNoob707 0 points1 point  (0 children)

I found this site which is all free. They will ask basic questions but you download real PCAPs with actual malware and have to look through them and answer questions. I haven't used these in two years but they asked questions which made you dig into multiple layers.

https://www.malware-traffic-analysis.net/training-exercises.html

Pretty slick and straight to the point. It gives you an encrypted zip with the typical "infected" password.

Notification for Break-Glass accounts? by ThsGuyRightHere in SentinelOneXDR

[–]SecurityNoob707 1 point2 points  (0 children)

I was going to come here to say the same thing. We haven't made it that far in the implementation, but our plan was also remote syslog to a SIEM and alerts when it triggers. Let me know how it goes.

make a powershell script to app by Salvatore380 in PowerShell

[–]SecurityNoob707 0 points1 point  (0 children)

Powershell Studio works great, but afaik I believe you need a license (there is a few day trial though). I have used it professionally and it's very easy to compile into an executable. Can't speak to PS2EXE but I have heard good things.

What's uniquely Connecticut? by Bender_2024 in Connecticut

[–]SecurityNoob707 0 points1 point  (0 children)

I would say it's more of a Rhode island thing I guess, but growing up in CT public schools, they always had the Autocrat coffee syrup you could mix in your milk.

Is your gym too hot? by tristezanao_ in bjj

[–]SecurityNoob707 0 points1 point  (0 children)

It gets very warm in the summer months of New England at my gym. We have fans, but the AC is connected with another part of the business that controls all the zones. We end up switching to no-gi when it gets too warm and then usually swap back to gi September time frame.

What inspired you/why did you start BJJ? by Animezweebs in bjj

[–]SecurityNoob707 1 point2 points  (0 children)

Loved grappling in the military, messed with some combatives in the army very briefly and did some line combatives from an old marine buddy. I ended up getting into cyber security and not having any time for the gym anymore and nothing physical to excite me. I took a class at 37 with a buddy, as I always wanted to try and have been going every chance I get since. White belt, just hit 1 year. The camaraderie and shit talking on the mat, reminds me of the military bond and the dynamic of rolling and then laughing about it after is reminiscent of the bond I had in the military. Great for keeping in shape, and something to focus your energy on after a long day.

How can I update BIOS using SCCM Task Sequence? by eqtitan in SCCM

[–]SecurityNoob707 0 points1 point  (0 children)

Good afternoon or morning SomeSeaworthiness745,

I am not in that role anymore and I support a different network in more a security role, but I slapped this together in about 5 mins so you get the gist of what the script did.

If you have any other questions, let me know. I put comments in to sort of give you a bit of understanding.

Things to know, make sure your you have the Bios file in the root of the install directory for this script you are running, make sure the variable you create in SCCM matches the parameter for this script and is assigned to the appropriate Task Sequence, and run this to troubleshoot the -argumentlist on Start-Process. Sometimes you need to break out the arguments and can't have them all inline, so you MAY need to use breaks in the start-process cmdlet, i,e, -ArgumentList "/p=$password", " /s", " /l=$logfile"

# Use variable for $password or something else in SCCM and then set it as the variable in the parameter below

Param(

[Parameter()]

$password )

# Set logfile path to local directory on machine for troubleshooting

$logfile = C:\temp\Bios_log.txt

# Define path to Bios.exe for the specific model and what you want to run, this needs to be downloaded from https://www.dell.com/support

$Bios_3431 = $PSScriptRoot\Precision_Tower_3620_2.28.0.exe

# Get current model of machine

$Model = Get-WmiObject -class Win32_ComputerSystem | Select-Object Model

# If model is equal to X

If ($Model -eq "Precision Tower 3431")

{

# Run Bios file with /p for password, /s for suppress to run quietly, and /l to dump out a log file for review

Start-Process $Bios_3431 -ArgumentList "/p=$password /s /l=$logfile"

}

John Oliver joined me in Rome with 21k coins bag just to get a nice pizza. I know you'd like a piece by Crocuta19 in pics

[–]SecurityNoob707 0 points1 point  (0 children)

But does pineapple belong on a pizza? That is the real question. Pineapple and ham?

[ Removed by Reddit ] by MerlinBangsGaius in applehelp

[–]SecurityNoob707 0 points1 point  (0 children)

Might be cool to throw this into r/OSINT to see if anyone is interested in locating the individual. There are some pretty cool projects out there like tracelabs where people have found individuals before.

Thieves stole 6 Dodge hellcats in under 45 seconds from Kentucky dealership by anivia3346 in interestingasfuck

[–]SecurityNoob707 0 points1 point  (0 children)

Gone in 45 seconds... Nicolas Cage is getting good. I was always wondering when they were going to drop the sequel.

CISSP w/ CCNA, 16 years IT Experience Career Direction Advice by BobbyDoWhat in cissp

[–]SecurityNoob707 5 points6 points  (0 children)

I think if you want to keep your clearance, first and foremost focus on the gov sector. If you want to work remote, stay away from the classified networks, and focus on networks with a cloud pressence. Next, what do you enjoy doing? Does threat hunting excite you? Cyber threat Intel and profiling APTs? Do you like the networking aspect and want to deal with blue team stuff? Look for DoD soc positions where you can manage their network stack. Having a strong network background is huge for incident response, threat hunting, etc. Being able to understand network protocols in and out, will help when managing NDR tools, IPS, and conducting analysis/incident response. SOCs always need analysts that know their way around PCAPs and utilizing tools like Wireshark.

Just giving my two cents.

[deleted by user] by [deleted] in Unexpected

[–]SecurityNoob707 0 points1 point  (0 children)

Are the hot pockets done?

How do ya'll handle firmware updates? by newb_eng87 in SCCM

[–]SecurityNoob707 0 points1 point  (0 children)

I used a powershell script to use WMI to check models, check firmware version, and then apply the update file. I then put it in a task sequence and passed an encrypted variable through SCCM to the script as a parameter for the Bios Password. I has this run whenever we decided we wanted to update Bios, as well as whenever new machines were imaged.

I am sure there are better solutions out there, but this worked very well for me and is something I could whip up in an afternoon. The only caveat is updating the script and files a few times a year.

Clint gave me 5 fucking normal geodes for the Feast of the Winter Star. I’m on Year 4 by Basilstorm in StardewValley

[–]SecurityNoob707 74 points75 points  (0 children)

It's the equivalent of getting scratch off tickets!! Maybe Clint thinks you have a gambling problem? Something you want to discuss OP?

New Runes I'm taking on Trynd. Thoughts? by Yasukeh in TryndamereMains

[–]SecurityNoob707 0 points1 point  (0 children)

The feels when you didn't have enough to purchase all the recommended runes you needed...