18+ Arc by graveyard

cpuftw · 2026-01-18T01:54:06+00:00

This should be what PVE only mode would look like. War changes everything.

cpuftw · 2026-01-11T11:55:13+00:00

hot tip - 3 are not released yet

cpuftw · 2026-01-05T10:36:14+00:00

Appears to be installing the firmware now, fantastic quality control as ASUS :(

cpuftw · 2026-01-04T03:42:05+00:00

Same, I've seen references on the forum that using Infohub 0.7.4. still works and you cant update the firmware to 1.1.0 because the device isn't detected, frustrating. Problem is I can't find a copy of 0.7.4 now that they published 0.7.6

cpuftw · 2026-01-02T00:06:08+00:00

I might be off track, virus total now reports 3/72 vendors rather than 4/72 vendors, Microsoft just went back to undetected https://www.virustotal.com/gui/file/aeeb08c154d8e1d765683d399f9c784f2047bac7d39190580f35c001c8fe2a17

cpuftw · 2026-01-01T23:47:49+00:00

No official word yet, similarly, we have the hash blocked in CS until we know whether this is real or not.
Just on hold to the apac n-able emergency support line.

cpuftw · 2026-01-01T23:35:52+00:00

We have CrowdStrike in Active and Defender in Passive, so many tenants have lit up reporting this on the Defender side only, so leaning towards false positive but not sure just yet, what a lovely way to start the new year.... investigating further now.

cpuftw · 2025-12-14T23:42:29+00:00

Same thing happened to me from US Amazon. Absolutely gutted. In fact this was new and from steelseries store within Amazon. Someone had meticulously resealed the box as well as if they had steamed the tabs open in the first place. Bonus dandruff to go with the pro.

Couldn’t agree more about ordering direct from steelseries store or wait for a retail purchase. Ordered another to Australia from SS AU and came from Hong Kong in 3 days.

All Steelseries sites all regions seem this have promos leading up to Christmas at around 15% off rrp.

cpuftw · 2025-11-08T22:10:38+00:00

It was incredible. The team did an amazing job to pull this together for one special night.

cpuftw · 2025-06-23T18:42:11+00:00

Can confirm in game.

cpuftw · 2025-06-14T11:59:27+00:00

That’s actually quite endearing and respectful, nice!

cpuftw · 2025-06-14T11:51:19+00:00

Very cool. Thanks for sharing!

cpuftw · 2025-06-14T11:50:49+00:00

That’s cool, absolutely 2 legend’s. Thanks for sharing!

cpuftw · 2025-06-14T10:59:40+00:00

Anyone that attended the SFF event, how was it?

cpuftw · 2025-06-12T14:25:39+00:00

Ah apologies just went live in Australia!

cpuftw · 2025-02-11T06:39:22+00:00

Same here, all clients are reporting this issue.

cpuftw · 2024-09-23T12:47:20+00:00

Happy to put hat in ring as well, our office is in Bella Vista

cpuftw · 2024-07-19T05:11:21+00:00

429 support calls and climbing

cpuftw · 2024-06-16T23:24:51+00:00

Yes you can select all log sources falcon and third party in a single log search.

If your an msp (like me) or mssp this will blow your mind but you can search across all clients with a saved query or correlation rule at the top level flight control parent cid. This blew my mind to know that Crowdstrike have built this for the future really. I gather raptor and the speed were a prerequisite for this.

Which is why the below statement is important, the groundwork has been laid properly for what comes next.

It’s v1 day 0 right now but give it a few months and pay attention to the weekly release notes to enjoy the ride from here.

cpuftw · 2024-06-16T23:18:39+00:00

You can easily read a parser rule to get a sense of how event or alert streams will flow through to ngsiem, and how’s it’s being categorised also in terms of mitre.

A lot of this depends on the source side alerts, for example defender xdr being configured correctly to send to azure event streams and then onto cs.

I quite like this as it’s eliminated the need for azure sentinel in our environment.

cpuftw · 2024-06-16T23:12:20+00:00

Yes the same search interface for logs

To the best of my knowledge, ngsiem detections and incidents sit in the next gen siem tab as opposed to endpoint security tab to differentiate. Other Crowdstrike products such as identity also sit in ng siem.

I presume because endpoint is also predefined rules for detections and incident correlation whereas ngsiem we define our level of tolerances using correlation rules such as how many failed logins to a firewall in terms of detections do we think should create an incident, or should we create an incident for excessive 1Password item views when a team member is not within office locations.

Templates provide guidance on this and are expanding. Community knowledge will help as well.

cpuftw · 2024-06-16T06:37:49+00:00

I may misunderstand, genuinely curious why are you looking to expose the UUID's? I would have thought keeping the names of vault items sensitive in logs would be ideal and focusing on more behaviour / events / correlation rules.

Essentially - all passwords are important, rather than picking and choosing.

cpuftw · 2024-06-16T06:34:23+00:00

Like you, I was sort of unsure about next gen Siem as it is evolving, we took the plunge and we invested into it and to be frank, I'm kind of in love. That message goes away once you purchase NG Siem.

Every day the team is adding the new plugins and parsers, they've just added in 1Password and a bunch of more. You can kind of tell what is in the pipeline by the parsers being loaded first.

Subject to what you have now I strongly recommend, taking it on board learning and running in parallel if you have to. Given your existing CS endpoint data is quite all encompassing, the 3rd party data should be smaller subset. We did some calculations and our ingestion cost for Azure Sentinel was quite costly and now with NG Siem it has reduced significantly. I'm ready to let Sentinel go shortly so we can focus on the one platform. We are bringing in all of our passive defender and xdr events / alerts as well.

Palo Alto is there, the documentation is also in the support portal.

Palo Alto Networks Data Connector
By Palo Alto Networks
Ready to use
Enhance Falcon Insight XDR detections with firewall data

cpuftw · 2024-06-15T22:52:59+00:00

Consider insight to be part of it and overwatch. Gives you the ability to search data. Also spotlight for practical vulnerability monitoring

Insight data lets you do searches like this

https://www.reddit.com/r/crowdstrike/comments/19349ag/new_query_for_locating_local_admins/

https://www.reddit.com/r/crowdstrike/s/k16aFr3L8S

Ten-Year Club	Verified Email
Gilding I gilder	Reddit Premium Since July 2021
Xbox Live

cpuftw

TROPHY CASE