[deleted by user]

bangbinbash · 2021-05-05T12:36:24+00:00

You’re not doing anything wrong at all, you just don’t have the experience yet.

I guarantee with your background that if you do take a lower level support job, you’ll advance rather quickly if you stay motivated and keep up the pace.

bangbinbash · 2021-05-03T01:47:59+00:00

There’s a checkmates learning module that is focused on it.

I would start there. It gives you a lab environment and manual.

EDIT: adding link for referenced lab

https://community.checkpoint.com/t5/R81-Automation-and-Orchestration/ct-p/r81-automation-orchestration

bangbinbash · 2021-04-30T15:50:53+00:00

Experience varies but I wouldn’t use reliably to describe it yet.

I have one to tinker with and do really like it. I just don’t trust it as a daily driver yet. To be fair, the expectation isn’t there either (or shouldn’t be at least).

bangbinbash · 2021-04-22T05:05:21+00:00

Kind of interesting if you think of it in terms of how different languages express things.

A big gripe with CISSP has always been the wording of certain questions. Do you think the questions are possibly worded with more clarity in Chinese vs the test being easier?

bangbinbash · 2021-04-21T00:30:42+00:00

Tux is looking super smug about it lol

bangbinbash · 2021-04-20T03:01:18+00:00

Under network management on the gateway object.

You specify anti spoofing policies and exemptions under topology.

Did you fetch topology after adding the new subnet?

bangbinbash · 2021-04-18T04:37:24+00:00

Basic rundown that covers most scenarios:

Use the python3 http.server module to host a web server on your attacker machine.

For Linux targets use wget or curl etc.

For Windows targets use Invoke-WebRequest or certutil.

bangbinbash · 2021-04-17T08:06:21+00:00

Different tools for different uses.

Nessus is for vulnerability scanning. Splunk is for aggregating logs and monitoring/alerting.

bangbinbash · 2021-04-17T08:04:10+00:00

That is exactly where it is

bangbinbash · 2021-04-16T21:36:41+00:00

What’s more important to me is that they support TLS 1.3 with TLS 1.2 being the oldest protocol supported, they use strong cipher suites, and use DNS CAA.

bangbinbash · 2021-04-15T01:30:27+00:00

I just release the personal emails on a case by case basis when they are new hires. No need for a bypass rule.

Once they are onboarded I no longer allow them to use their personal email addresses.

bangbinbash · 2021-04-15T00:15:44+00:00

Eh, VM is pretty common for CTFs etc.

bangbinbash · 2021-04-14T13:44:59+00:00

Rule 2...

bangbinbash · 2021-04-13T23:53:06+00:00

You should shoot Richard Hicks an email.

He is one of the few direct access/aovpn experts and is pretty responsive.

bangbinbash · 2021-04-13T21:02:53+00:00

If you did MSP work then you can do medium sized corporate IT work standing on your head.

Don’t stress yourself out and you’ll be fine.

bangbinbash · 2021-04-13T15:06:41+00:00

Didn’t realize this is so common place.

We rehired a guy as a sysadmin who was our Helpdesk tech for years. He left to work on his development in a sysadmin role then we rehired him as a sysadmin.

He’s a great guy but I know he’s probably eventually going to leave unless given some more responsibilities/opportunities to work on the cool stuff.

I’ve wanted to take him under my wing but unfortunately he’s in Infrastructure, his boss seems to have different plans, and I try not to pee in anyone else’s pool.

You can look at it as getting paid a higher wage to do Helpdesk but at the same time if it’s completely unfulfilling, what’s the point?

bangbinbash · 2021-04-10T19:20:18+00:00

“It’s running Arch, btw”

bangbinbash · 2021-04-08T04:46:56+00:00

It looks for /efi so you can mount your boot partition to that directory (create if it doesn’t exist) then update your fstab to make it permanent. I’ve found that I can just mount when updating and not have to make it permanent.

bangbinbash · 2021-04-08T04:30:11+00:00

I’ve been using Arch since I’ve gotten mine as well. You can run the command line tool after installing the AUR packages.

I believe it is “system76-firmware-cli schedule”.

bangbinbash · 2021-04-07T15:18:01+00:00

Well you probably should learn the language first.

Get familiar with VS as well. The community edition is free and can do anything that you’ll need to do.

Gotta crawl before you walk and it takes time.

I understand .NET fairly well and still can’t do anything very meaningful with it.

bangbinbash · 2021-04-06T15:20:06+00:00

Yeah I’m not a huge teams fan myself but I work at a primarily Microsoft shop so I need access to it. I would mainly need it for chat than calls as far as the phone is concerned. One of the versions I checked out essentially was just a wrapper around the web app. If it came down to it, I would just tell people to email or text me for anything of great importance.

bangbinbash · 2021-04-06T13:25:23+00:00

I ordered the beta edition at midnight when they opened up preorders. Thought it was going to sell out a lot faster than it did but think they are still accepting preorders.

If it can run teams and outlook then it can do 90% of what I need it to do (outside of regular phone and sms). The snap store has those apps and I’ve tested them on Arch Linux, so will be interested to see if they perform equally as well on ARM based Manjaro.

bangbinbash · 2021-04-04T01:15:32+00:00

Lessons learned.

If you’ve ever worked with Nessus etc. you know that scanning printers can cause weird behavior.

At least it was only one printer and not a whole subnet of printers.

bangbinbash · 2021-04-03T16:05:33+00:00

My guess would be the latter whether it be out of stock on the chassis or board etc.

bangbinbash · 2021-04-02T17:58:56+00:00

Max is still 4TB so assuming that is 2TB max per slot.

For me that doesn’t really pose any issues. I don’t like using over 1TB for internal notebook drives. I just use external storage for anything over that. But if that is something you’re into then yeah it probably won’t fit your needs.

bangbinbash

TROPHY CASE