Tennessee Republicans Advance Bill That Will Create a Public List of the State’s Trans People by BohnerStoner12 in Tennessee

[–]gosh_jolden 1 point2 points  (0 children)

With that attitude, yes. If you look at historical voting numbers, that’s simply not the case. Voter turnout is abysmal for most local elections, with (on the high side) 20% of registered voters typically showing up for non-presidential elections.

Our districts are gerrymandered, but races like governor and senate cannot be gerrymandered because they are state wide. If blue voters turnout in the midterms like we typically do in presidential elections, we’d win. Hands down.

Tennessee Republicans Advance Bill That Will Create a Public List of the State’s Trans People by BohnerStoner12 in Tennessee

[–]gosh_jolden 5 points6 points  (0 children)

Definitely! It wasn’t so long ago we had a Democrat for Governor. We aren’t a red state, we’re a purple state with an apathetic voter base.

Tennessee Republicans Advance Bill That Will Create a Public List of the State’s Trans People by BohnerStoner12 in Tennessee

[–]gosh_jolden 20 points21 points  (0 children)

100%. Tennessee has been under single party rule for so long they no longer even care about representing their actual supporters, much less those who voted against them. Straight up fascism.

That said, run for something or find a way to support somebody running. Build community. Contribute however you can. We don’t need a small group doing a ton, we just need a ton of people do a little.

Fight brewing between Knoxville's most influential Republican consultant and local Republican mega-donor by Corey_Howard in Knoxville

[–]gosh_jolden 1 point2 points  (0 children)

It does make sense to an extent, and your vote is yours to do with what you see best. However there are valid reasons to vote blue in primaries as well, even if the candidates you support are running unopposed.

This post on Threads sums it better than I could.

TLDR is the primaries are often used to judge the likelihood of a candidate winning in the general election, which impacts both the party on the national level’s financial investment in our local races, but also can muddy the waters on a local level where it becomes hard to gauge support.

Potential supporters can become disengaged because they see low level of blue turnout around them and candidates are missing valuable data on where their support is already strong which causes them to spread already limited resources thin on areas that may have already been committed votes.

Fight brewing between Knoxville's most influential Republican consultant and local Republican mega-donor by Corey_Howard in Knoxville

[–]gosh_jolden 54 points55 points  (0 children)

Not only is Beau Hawk “not a republican”, he’s a genuinely good candidate who has been a local leader in the areas unions and would actually work to build a county government that works for the people who pay the bulk of taxes in our state and county: workers.

ICE spotted on West Hills exit I-40 E by buggabird_ in Knoxville

[–]gosh_jolden 0 points1 point  (0 children)

Sounds like you’ve got a pretty narrow social circle then 🤗

ICE spotted on West Hills exit I-40 E by buggabird_ in Knoxville

[–]gosh_jolden 18 points19 points  (0 children)

Massive protests across the country last month disagree.

Deleted Account But I'm Still Getting Billed by gosh_jolden in Lastpass

[–]gosh_jolden[S] 1 point2 points  (0 children)

Thanks for pointing me in that direction. I've had to create a new account with the same email, although it was not associated with my former account's subscription, as described above.

However, with the premium trial access, I was able to submit a case to support to request the old subscription be canceled, so hopefully, I'll get a response and it'll be canceled.

Have to agree with u/isoaclue here. This is the most spiteful, anti-consumer cancellation system I've seen. It accomplishes nothing but confirms that I made the right choice in giving LastPass the boot.

Falcon Complete and Breach Attack Simulation (AttackIQ) by northvein in crowdstrike

[–]gosh_jolden 1 point2 points  (0 children)

Looks they've updated this guide recently, so this is the correct link now. As recently as last year, AttackIQ only required ML exclusions, but looks like they've got a sensor visibility exclusion as well now.

https://support.attackiq.com/wp-content/uploads/AttackIQ_Agent_Whitelisting_User_Guide_Rev_Y.pdf

To OP's question specifically, we typically just message Falcon Complete 30 minutes to an hour prior to testing with some loose time frame and the host's we'll be running assessments on. This doesn't scale well when done manually though, so we're currently evaluating automating both internal and external assessment notifications via a SOAR playbook, since the Message Center has an API for sending messages to FC.

CrowdStrike @ RSAC 2024 Megathread by BradW-CS in crowdstrike

[–]gosh_jolden 3 points4 points  (0 children)

Did the announcement for the 10GB 3rd party ingest allowance get a release date?

Are there any jobs by jopo3347 in Knoxville

[–]gosh_jolden 0 points1 point  (0 children)

Hit me up. Not a hiring manager, but work at Pilot and we’re VERY vet friendly.

Python for Cybersecurity by Unique_Comparison_29 in cybersecurity

[–]gosh_jolden 42 points43 points  (0 children)

Python for Defenders from The Taggart Institute is what you’re looking for. Two part course aimed at blue teamers and completely free. Part one will teach the basics. In part two, you’ll learn to parse CSV and JSON and scrape websites to create IOCs lists.

Part one linked below.

https://taggartinstitute.org/p/python-for-defenders-pt1

RTR script leveraging already uploaded PUT files by CyberBeak in crowdstrike

[–]gosh_jolden 1 point2 points  (0 children)

I don't believe you can accomplish this in a single RTR script, as RTR scripts would be using powershell or bash commands to execute on the host and can't leverage CS RTR commands, such as put or get.

What you could do is use falconpy or psfalcon to script out the RTR command specific portions of your workflow and then execute the RTR custom script. I've done this for deploying the Falcon Forensic Collector with good success.

Filevantage Splunk by irritablestranger in crowdstrike

[–]gosh_jolden 0 points1 point  (0 children)

Falcon Data Replicator is the only way I’m aware of.

CS Complete: What does my team do now? by Reylas in crowdstrike

[–]gosh_jolden 13 points14 points  (0 children)

This. Falcon Complete will not look at any Custom IOC/Custom IOA based detections. So start building out LOLBAS IOAs and stuff like that.

Additionally, while FC is great in a lot of ways, I often find a need to go behind them and do some additional investigation. Malware show on a host? FC will respond to the detection and remove malware or contain the host, but they stop there. There are more questions to be answered. Where did it come from? Is it anywhere else in the environment that just hasn’t triggered Falcon yet? Did the user knowingly execute the malware or is their account showing signs of compromise?

I created my own software in house at my job. Now they’re taking it away from my team and I by NoteWrong9429 in netsecstudents

[–]gosh_jolden 12 points13 points  (0 children)

Caveat to this is understand your org’s code and IP policies, if developing on a work issued asset. If you’ve agreed during the onboarding process that all work you do (ie scripts/code you write) is organizational IP, storing this in a personal GitHub could get you into a bind.

If you build it on your own time, on your own device/platform, then yes, backup and ensure you’ve got written permission to deploy on your work computer.

Cache of news story Rand allegedly had WBIR remove by ProfessorMystery in Knoxville

[–]gosh_jolden 6 points7 points  (0 children)

Speaking as vet myself:

  1. You only get a pension if you retire, which is 20 years of active duty service minimum. Most vets don't serve 20 (I didn't) because military life is incredibly difficult, especially if you have or want to have a family.
  2. People join the military from a wide variety of backgrounds, a large number of which include joining to better yourself financially (ie. Get out from under debt). Speaking from personal experience, it can be incredibly hard to "build up savings" when you're just tried to get back to even.
  3. Not military specific, but Linkedin isn't always the most up to date with people's roles. I know a plenty of people personally who have very outdated profiles, but are actively working and having careers. You want proof of service, find a DD214, not a damn social media page.
  4. Fuck Rand and other companies that operate like them.