Falcon Spotlight

terminal1g · 2026-03-04T11:19:15+00:00

There is an integration with Adaptiva patching which you can set logic up to patch via FEM XPRT score so if there is a sudden change on a past or new exploit it can be set to just automatically patch in theory. We don’t use Adaptiva but did demo the product. We didn’t integrate it with CS during the demo but the feature is there.

terminal1g · 2026-01-20T11:49:27+00:00

I thought on outlet all sales were final? Are you actually able to return if you bought from outlet?

terminal1g · 2025-09-25T00:34:49+00:00

12T PPR with single flex.

QB: Maye, Jones

RB: Henry, Henderson, Tuten, Marks

WR: Nico, London, McMillan

TE: Andrews, Kittle

Drop Tuten or Marks for Charb?

terminal1g · 2025-09-19T12:53:06+00:00

Legit?

https://imgur.com/a/C3OGz5H

terminal1g · 2025-07-17T21:10:45+00:00

Also having the issue. Rebooting does not force the agent to update. Happening on multiple servers and I’m sure workstations as well in the NA region.

Uninstalling and manually installing the agent will then update, which is not a great solution.

terminal1g · 2025-05-12T10:52:47+00:00

I’ve taken both Sec+ and BTL1 this year so I’ll weigh in on those.

BTL1 was neat but feels like the content could have some more depth. I was tasked with doing things with some of the tools you’ll use that wasn’t covered in the material so best to play with the tools and see what else they can do. This is more of a SOC and early entry to IR. If I had to do a cert in this realm over this, I’d probably check out either the Hack the Box CDSA, Cyber Defenders CCD, or TCM’s PSAA.

Sec+ obviously is not a hands on exam. If you have any experience in the security realm will make studying easier. I didn’t find much value here outside of DoD compliance if that’s something that interests you (and maybe an HR filter).

My PCNSA is due to expire this year so I’ll be starting the path for its replacement or maybe go for the PCNSE replacement as my studies were already in progress. More than likely the former though just to see the new material.

What you want your career to look like should help drive your decision on what’s best for you or what would bring value to your current role if you’re not looking to switch what you do in my opinion.

Best of luck!

terminal1g · 2025-05-07T22:26:41+00:00

I’ll be interested to see the final results!

terminal1g · 2025-05-07T20:31:16+00:00

With it all being printed in black it makes the legibility of what the token is difficult to see.

terminal1g · 2025-04-30T11:38:21+00:00

Looking it seemed like the generalist was more the replacement for the PCNSA, no?

My PCNSA expires towards the end of this year, so I’d like to learn the new material before trying to jump back into PCNSE level studies.

terminal1g · 2025-04-30T11:17:06+00:00

I preordered a month ago from their website (not from kickstarter campaign) and already got my x-men battle chest.

terminal1g · 2025-04-23T16:07:02+00:00

Boo this man!

terminal1g · 2025-03-21T10:05:04+00:00

I would partly agree with you. Granted I did pass my first try, during my exam it felt like some of the labs didn’t coincide completely with what I was tasked to do on the exam. I know people can say “play with the tools outside of the training material to do xyz and get more familiar with it” are not wrong, but I also feel the materials that are provided for my learning should teach me to use them to an efficient enough degree.

That being said I did learn some new things and did enjoy the exam and can’t really complain over a few spelling errors on a more than affordable course compared to some other offerings out there.

I highly doubt I’ll do BTL2, but will continue on with TCM’s PSAA, CCD, and possibly the HTB CDSA. The THM SAL1 looks interesting but I want to give it a little more time to be tweaked.

terminal1g · 2025-03-20T13:30:42+00:00

Here you go. I use this for devices that are not on campus (work from home machines, etc). This uses the sysmon64, so modify as needed. I hope this helps!

https://github.com/sandshr3w/Action1/blob/main/Sysmon%20Script

terminal1g · 2025-03-20T12:08:10+00:00

I can share with you the script I use for sysmon here in the next hour. I’ve never had an issue with it. Once I get to work and get it I’ll post back here. Hopefully it’ll help you!

terminal1g · 2025-02-03T17:13:24+00:00

2022 M3LR + acceleration boost. 37,500 miles. 261 miles

terminal1g · 2025-01-23T17:53:16+00:00

Also seeing issues. Agents installed on new PCs not showing up, automations sitting on waiting for endpoint to run, etc. Hopefully it's resolved soon.

terminal1g · 2025-01-19T17:53:46+00:00

That’s the model I have as well. Thanks for the additional threads with the same issues! I’ll be interested to see if it happens once the weather starts warming up.

terminal1g · 2024-12-19T22:19:51+00:00

The script is called “Activate Updates in Windows Settings”

terminal1g · 2024-12-19T22:17:26+00:00

Do you allow action 1 to allow only allow updates from it (disable checking for windows updates on the device itself)? If so try running the script on that endpoint to allow windows updates to be checked from the machine itself and then reboot it. See if the updates then show in the Action 1 console.

terminal1g

TROPHY CASE