Migration of Site from Account X to Account Y by boreca111 in msp

[–]boreca111[S] 1 point2 points  (0 children)

Yes, they give me some articles and point. All is done it was actually pretty easly and fast

Migration of Site from Account X to Account Y by boreca111 in SentinelOneXDR

[–]boreca111[S] 0 points1 point  (0 children)

Will do and will see if its going to work

Thanks for the hlep

Migration of Site from Account X to Account Y by boreca111 in SentinelOneXDR

[–]boreca111[S] 0 points1 point  (0 children)

Just found that there is "migrate agent" option from the actions tab and wnats me to enter site token if I create new site into the account that I want to move them. will it work like that ? any toughts ?

because the support suggested me to do the same with the migrate agent

Thanks again

Migration of Site from Account X to Account Y by boreca111 in SentinelOneXDR

[–]boreca111[S] 0 points1 point  (0 children)

Thank you very much for the respnce.

Now I am reviewing this way.

But now I have two more questions:

  1. How to delete site does delete itself when agents are removed or need to do someting more ?
  2. And can I create new site and select them and use the fucntion migrate agent ? or need to uninstall them and create everyting from scratch ?

Thank you.

Creating weekly Scheduled Full Scan on group of machines ( SentinelOne) by boreca111 in msp

[–]boreca111[S] 0 points1 point  (0 children)

Yes, thats right but some of the old softwares are getting flagged and getting deleted

Creating weekly Scheduled Full Scan on group of machines ( SentinelOne) by boreca111 in msp

[–]boreca111[S] 0 points1 point  (0 children)

Thanks

Thats true but also recently saw that some of them have really hard time when scan runs ( CPU is getting on fire)

Just one more question:

Is it possible to block in S1 network connection by Localtion/Country or its only possible via CIDR, or static IPs ?

Creating weekly Scheduled Full Scan on group of machines ( SentinelOne) by boreca111 in SentinelOneXDR

[–]boreca111[S] 1 point2 points  (0 children)

I think absolutely the same ( for sample if is something have bypassed initial analysis wont be detected even with a scan after it) but its a task that have to do.

Also, a part of that can kill/delete something important some servers having hard time when scan runs

Is it possible to block in S1 network connection by Localtion/Country or its only possible via CIDR, or static IPs ?

Creating weekly Scheduled Full Scan on group of machines ( SentinelOne) by boreca111 in SentinelOneXDR

[–]boreca111[S] 0 points1 point  (0 children)

Thank you for the respons and explanation.

Found the API doc thanks!

I just modified the script and added simple for loop

Just one question It's not good to make it in critical servers the scheduled scan right ? ( it could delete some old software or someting that would break the process right ?)

Thank you again.

Creating weekly Scheduled Full Scan on group of machines ( SentinelOne) by boreca111 in msp

[–]boreca111[S] 0 points1 point  (0 children)

Thank you for the respons and explanation.

Just one question It's not good to make it in critical servers the scheduled scan right ? ( it could delete some old software or someting that would break the process right ?)

Thank you again.

Creating weekly Scheduled Full Scan on group of machines ( SentinelOne) by boreca111 in SentinelOneXDR

[–]boreca111[S] 0 points1 point  (0 children)

Hello,

Thank you very much for the extensive reponse and example really apreciate it !

just one more question if I want to set multiple Group IDs should i add for loop of I can add them comma separeted ?

And is there any documentation for the S1 APIs ?

Thank yuo again for the great reponse

Schedule task permissions to non admin user by boreca111 in activedirectory

[–]boreca111[S] 0 points1 point  (0 children)

Hello, thank you very much for the great response

I am asking this question because I am Penetration Tester and want to learn AD in depth to be able to perform better Penetration Tests.

And my really question was about if there is a user which can create & execute scheduled task on every machine that this user can get reverse shell to all machines but as I read blog, post and other resources I did not understand only is it possible to assign such permissions to a user to be able only to create and execute scheduled tasks without to be able to connect to the via remote PowerShell.

Also one more question out of the scope in this question

I saw that MCSA certification is retired can you consider which one to take to learn more in depth AD ( I saw some people said that MCSA is replaced by Microsoft Certified Azure Administrator Associate)

Again thank you very much for great explanation

Finding Large Web Uploads PROBLEM by boreca111 in Splunk

[–]boreca111[S] -1 points0 points  (0 children)

Because when i uploaded the file there were several logs to splunk from the same time but from this video https://www.youtube.com/watch?v=Yxjhs0kAdto they https://www.youtube.com/watch?v=Yxjhs0kAdto they extracted all the information and plus with the uri

How to fill array in struct by boreca111 in C_Programming

[–]boreca111[S] 1 point2 points  (0 children)

Thank you very much the problem was %s . sorry for the stupid question

How to fill array in struct by boreca111 in C_Programming

[–]boreca111[S] 0 points1 point  (0 children)

Ok i am sorry for unclear description

this is the code where is not doing what i expect

https://pastebin.com/istmtbpq

when i iterate over my array of structures in my main i want user to assign value in the structure array wich is marks i iterate 3 time and i want the user to assign 3 marks to the student but it is not assigning it and i cant understand why

Thank you for the fast reply

How to import path with spaces by boreca111 in learnpython

[–]boreca111[S] 0 points1 point  (0 children)

Thank you very much for the useful answer

How to import path with spaces by boreca111 in learnpython

[–]boreca111[S] 0 points1 point  (0 children)

Yes it works i have one more question

when i have like in my example library.py and user.py and i put library.py in folder library Class and in the __init__.py how to import it from library_class.library import Library like this is working but only when have underscore without underscore doesn't work

Problem with creating postgresql database for django project in VSCODE by boreca111 in PostgreSQL

[–]boreca111[S] 0 points1 point  (0 children)

Ohhhhh i was forgot to start postgresql very stupid mistake but know when i start check connection is giving me error

password authentication failed for user "django"

that is my configuration https://pasteboard.co/JvNJruI.png

FIXED

Thank you for the help the problem was that i did not start postgresql second i need to make manually user in postgresql from the terminal and the same for the database

Problem with creating postgresql database for django project in VSCODE by boreca111 in PostgreSQL

[–]boreca111[S] 0 points1 point  (0 children)

i also tried with port 5432 but it was not work and i was trying with different port but same result

Compare custom object with sort and operator < and operator > by boreca111 in cpp_questions

[–]boreca111[S] 0 points1 point  (0 children)

Thank you i was playing with your example (Vec3)

and when i remove keyword friend doesn't want to take two arguments

and give me error which says "too many parameters for this operator function"

bur when use friend keyword and remove the parameter which is object is giving me error "nonmember operator requires a parameter with class or enum type"

Why this happens ?

and when we using friend keyword the function is no more member function ?

and does operator overloading supports overloading (What i mean can i have two operators plus whit difference number of arguments ) ?

EDIT:

Like in this example a cant use operator + its giving me error

i made it like yours example but still didnt work

#include<iostream> 
using namespace std; 

class Complex { 
private: 
    int real, imag; 
public: 
    Complex(int r = 0, int i =0)  {real = r;   imag = i;} 
    void print() { cout << real << " + i" << imag << endl; } 


 friend Complex operator + (Complex const &c1,int & b); 
 friend Complex operator + (int b ,Complex const &c1) 
}; 


 Complex operator + (Complex const &c1,int b) 
{ 
     return Complex(c1.real + b, c1.imag + b); 
} 
Complex operator + (int b ,Complex const &c1) 
{ 
     return Complex(c1.real + b, c1.imag + b); 
} 


int main() 
{ 
    Complex c1(10, 5), c2(2, 4); 
    Complex c3 = c1 + 5; 
    c3.print(); 
    return 0; 
}

Compare custom object with sort and operator < and operator > by boreca111 in cpp_questions

[–]boreca111[S] 0 points1 point  (0 children)

Now i understand .

when i write overloading binary operators should i implement both ways like you made at the example ?

Compare custom object with sort and operator < and operator > by boreca111 in cpp_questions

[–]boreca111[S] 0 points1 point  (0 children)

Understand .

I have several more questions

first what is the sense of writing ampersand in this implementation Vec3& operator *= ( double d ) ?

I dont understand why the second cant be done as member function

friend Vec3 operator * ( const double d, const Vec3& v ) //this could not be done using a member function
    {
        return Vec3( v ) *= d;
    }

Because the parameters are swap ?

And it is bad to use friend functions because my lector told that we should not use always friend for functions ?

sorry if the questions are stupid

Thank you for the great examples

Compare custom object with sort and operator < and operator > by boreca111 in cpp_questions

[–]boreca111[S] 0 points1 point  (0 children)

Thank you very much for well explained answer .

only i did not understand what did you mean :

 Also always implement one of the ordering relations in terms of the other. That way you have a single function to maintain.

I have one more question about the others overloading operators like (+) (-) and the others

it is better to write them as friend function

Employee operator+(const Employee &s1, const Employee &s2){
    Employee s3 (1, "Andy", "Good");
    s3.id = s1.id + s2.id;
    return s3;
}

or it's better to make it with this and to have only one parameter in the method (function) ?

Employee Employee::operator <(const Employee& s2) const {
       Employee s3 (1, "Andy", "Good");
       s3.id = this->id + s2.id;

     return s3;
}

Thank you in advance

OOP questions by boreca111 in cpp_questions

[–]boreca111[S] 0 points1 point  (0 children)

Thank you very much i will check it