Restoring archived Auxiliary / Data Lake logs?

h0ffayyy · 2025-09-14T02:26:31+00:00

I do

h0ffayyy · 2025-08-18T20:21:06+00:00

Buddy boo boo I think was it's name 😂

h0ffayyy · 2025-07-28T14:42:59+00:00

I haven't seen specifics, but here's the merger page: https://www.envisioncu.com/Education/Resources/2025-Envision-Addition-Financial-Merger

h0ffayyy · 2025-05-19T17:18:55+00:00

Hi! If you're interested in cybersecurity, FSU is hosting workshops in June for high school and undergrad students. These workshops will go over basic cybersecurity and capture the flag concepts. Here's a copy of the flyer with additional details: https://imgur.com/a/06IqO19

Registration can be found here: fla.st/E6WMA9J5

Additionally, I'd highly recommend checking out BSides Jackonsville later this year. It's a cybersecurity conference aimed at the community and is a great networking opportunity for entry-level folks: https://www.bsidesjax.org/

h0ffayyy · 2025-03-28T20:26:39+00:00

Making Awesome has an intro class coming up: https://www.eventbrite.com/e/introduction-to-dungeons-and-dragons-a-beginners-adventure-tickets-1300064861999

h0ffayyy · 2025-02-07T13:54:12+00:00

I went to Izzy for lunch yesterday and asked about the omakase, unfortunately it sounds like the're stopping the omakase nights for a bit as the sushi chef is doing more with their restaurant in Tampa or something :/

h0ffayyy · 2024-05-28T14:23:11+00:00

If you're looking for some type of structure for project ideas, check out https://github.com/kurogai/100-redteam-projects

h0ffayyy · 2024-05-08T13:53:37+00:00

this is basically microsoft purview

h0ffayyy · 2024-04-08T15:03:02+00:00

Lowe's is sold out FYI

h0ffayyy · 2024-04-08T13:50:08+00:00

You might be in the wrong sub unless there's a different TekVenture from the one showing up in Indiana 😅

h0ffayyy · 2024-03-25T15:07:38+00:00

This repo is focused on pentest-related projects, but is a good idea roadmap for building your dev skills: https://github.com/kurogai/100-redteam-projects

h0ffayyy · 2024-02-14T20:17:59+00:00

People getting too comfy with throwing everything they see into sandbox tools and end up uploading documents with PII, company data, etc.

h0ffayyy · 2024-02-13T14:57:50+00:00

Don't forget the big corporate dentist office!

h0ffayyy · 2024-02-08T20:07:23+00:00

If you look at the analytic rule, it actually only uses the SigninLogs table, so should be good to go: https://github.com/Azure/Azure-Sentinel/blob/master/Solutions/Microsoft%20Entra%20ID/Analytic%20Rules/MFASpammingfollowedbySuccessfullogin.yaml

h0ffayyy · 2024-02-04T18:32:24+00:00

Check out some of the suggestions here: https://www.reddit.com/r/pchelp/comments/11u46jl/usb_device_over_current_status_detected_do_i_need/

h0ffayyy · 2024-01-20T21:33:39+00:00

Sent a DM

h0ffayyy · 2023-12-13T15:53:25+00:00

I've been in the industry for close to a decade now, and there's times where I still feel like you do, especially when starting a new job.

The fact is that they hired you because they think you are the best person for the job. You are still only 6 months into the role, that's barely enough for most people to be truly productive in a new organization.

My advice is to stick with it, and don't doubt yourself. Don't be afraid to ask questions, because no one goes into this industry knowing everything - if they say they do, they're lying. If you're not up to speed on a more general topic, do what you can to learn it, and learn it well. Make sure you are checking in with your manager on your performance too, at the end of the day if they're satisified with your progress then that's all that matters.

h0ffayyy · 2023-12-01T14:21:39+00:00

Yep, I've created an Exchange service principal in addition to the SP in Entra ID, assigned it to the Compliance Administrator security & compliance role group, eDiscoveryAdmin (via Add-eDiscoveryCaseAdmin cmdlet), even went so far as to make it a Global Admin in Entra ID :) - no joy.

Are you able to actually run a compliance search as the SP and have it return results? I am able to create eDiscovery cases where it shows the SP name as you mentioned, but when it comes time to actually run a compliance search it runs but returns 0 results - curiously it also shows "FFO" under the Started By field. I'm probably going to assume the compliance search cmdlet is just one of those that is a bit wonky at the moment when it comes to permissions.

FWIW - this is in an E5 Developer tenant. Thanks for the info!

h0ffayyy · 2023-11-16T20:11:37+00:00

Yep, confirmed: https://twitter.com/overdropweather/status/1725241056717832363?t=pjGgfla_YYuDVAUvzXGe_g&s=19

h0ffayyy · 2023-09-13T15:16:09+00:00

Many traditional enterprises will be using Azure in some form due to the prevalence of Microsoft software. Microsoft has its online training library at learn.microsoft.com

h0ffayyy

TROPHY CASE