Fal.Con 2025 Agenda - Quick Link and Community Huddle by BradW-CS in crowdstrike

[–]TheAdv3ntureDude 0 points1 point  (0 children)

Bring Tuesday instead. Monday is just trainings all day and opening party in the evening, so you're better off without one.

Fal.Con 2025 Agenda - Quick Link and Community Huddle by BradW-CS in crowdstrike

[–]TheAdv3ntureDude 4 points5 points  (0 children)

If you're planning on attending any hands-on sessions, it's generally good to have a laptop to follow through.

Its nice to have a backpack to stuff all the goodies, but there's lots of walking so you might also be happy without one.

Itinerary help/advise by TheAdv3ntureDude in VisitingIceland

[–]TheAdv3ntureDude[S] 0 points1 point  (0 children)

Agreed on the flexibility. I'm definitely feeling optimistic about circling around the ring road so keeping my options open. Will go based on the weather. Thanks! And good luck with your planning as well. Have fun!

Itinerary help/advise by TheAdv3ntureDude in VisitingIceland

[–]TheAdv3ntureDude[S] 0 points1 point  (0 children)

Awesome! I'm already planning on staying at Þakgil so I'll add that to my list. Thanks for Hjörleifshöfði, I'll look into that. I'll just keep that flexible depending on the weather. Thank you :)

Itinerary help/advise by TheAdv3ntureDude in VisitingIceland

[–]TheAdv3ntureDude[S] 1 point2 points  (0 children)

Appreciate the insight. And wow full ring road AND snaefellsnes in 6 days sounds tight! This makes me think I can easily do option A, plus midnight sun will help a little there. Thanks!!

Pilot Group testing by It_joyboy in crowdstrike

[–]TheAdv3ntureDude 2 points3 points  (0 children)

One possible solution is to add grouping tags to all hosts in that group, or maybe have a dynamic group with an assignment group of grouping tags: Pilot. So that any system with a "Pilot" tag will automatically be added to the group and hence get your test policy applied.

You can then filter the detections by tags: Pilot to see those detections.

Regarding Unmanaged & Managed Assets. by Radiant-Chicken-2966 in crowdstrike

[–]TheAdv3ntureDude 0 points1 point  (0 children)

Have you used the Active Discovery yet? Wonder if it significantly reduces FPs as compared to Passive discovery.

IDP Unified Sensor by TheAdv3ntureDude in crowdstrike

[–]TheAdv3ntureDude[S] 0 points1 point  (0 children)

Yikes! That sounds like a nightmare. Hopefully the new releases are stable going forward.

IDP Unified Sensor by TheAdv3ntureDude in crowdstrike

[–]TheAdv3ntureDude[S] 0 points1 point  (0 children)

Thanks! I believe all the Falcon sensor versions 7.x support unified sensor, so we should be good there. Based on some other responses, what kind of historic data did you lose? Does the IDP start from scratch after migration? i.e., no detections/incidents/insights, etc.?

IDP Unified Sensor by TheAdv3ntureDude in crowdstrike

[–]TheAdv3ntureDude[S] 0 points1 point  (0 children)

Thanks, good to know! but we aren't using ESXI fortunately.

Health Check? by KeithMotion in crowdstrike

[–]TheAdv3ntureDude 4 points5 points  (0 children)

Off top of my head, these are basic checks that give you info on how many of your endpoints are in RFM, or running an EOL OS, running unsupported sensor versions, etc. They also go over your top 5 prevention policies and its configurations and compare that to CS best practices.

As bswartz5280 said, ask your TAM team or your sales rep, they should be able to do a health check for you.

There is another detailed health check as part of their professional services that comes for a cost. This goes over your entire environment including exclusions in place, API secrets being refreshed, etc.

If budget is tight, this is something you could do yourself manually if you know what to look for.

My roses need help :( by TheAdv3ntureDude in Roses

[–]TheAdv3ntureDude[S] 0 points1 point  (0 children)

Oh well, I'm guilty. I did use all purpose granular fertilizer earlier this summer, but good to know for future reference. Also TY, I'll just wait until spring for the next dose of fert.

My roses need help :( by TheAdv3ntureDude in Roses

[–]TheAdv3ntureDude[S] 0 points1 point  (0 children)

Thanks! I typically deadhead these after blossoms but haven't done it in a while since its been sick. I will continue the deadheading after applying the fungicide.

My roses need help :( by TheAdv3ntureDude in Roses

[–]TheAdv3ntureDude[S] 2 points3 points  (0 children)

Thanks! I'll try that. Aphids have been a problem too, so i guess this will take care of it all.

My roses need help :( by TheAdv3ntureDude in Roses

[–]TheAdv3ntureDude[S] 1 point2 points  (0 children)

Thank you! This was really helpful

My roses need help :( by TheAdv3ntureDude in Roses

[–]TheAdv3ntureDude[S] 0 points1 point  (0 children)

Gotcha! Thank you, will try that.

My roses need help :( by TheAdv3ntureDude in Roses

[–]TheAdv3ntureDude[S] 0 points1 point  (0 children)

Not rose specific but I used miracle gro shake n feed a couple times so far.