chelmzy

11 ms·

61.
by chelmzy 7y ago
The logs they send to their cloud (which is just Splunk in AWS) seems pretty transparent. In fact you can pull the raw logs directly from them via S3 buckets to see exactly what data is uploaded. When you say it's a black box what port
62.
by chelmzy 7y ago
Log management. Specifically tracking what you are currently ingesting vs what you could be. Basically a visibility dashboard. Another is automated testing of detections on a regular basis. Although some people are doing this with the autom
63.
by chelmzy 7y ago
Just purchased their product as it is at the top of the EDR market. Could you explain your comment?
64.
by chelmzy 7y ago
What is the source of the gist you linked?
65.
by chelmzy 7y ago
From my experience corporate VPNs exist to allow employees to access internal resources remotely. They aren't typically used for security although they can provide some form of security for remote workers.
66.
by chelmzy 7y ago
Yes. You have to claim your race when applying for just about anything now.
67.
by chelmzy 7y ago
Gravity's Rainbow
68.
by chelmzy 7y ago
There is a human maze located in Panama City, FL that is built to be modular. They change the layout once every three months or so. Although I'm sure a modular escape room would be much more difficult to construct!
69.
by chelmzy 7y ago
How does the US know that they don't just have offline backups?
70.
by chelmzy 7y ago
Similar story here. I received no financial aid. Worked full 40 hours including weekends and it really impacted my ability to learn and explore new ideas with peers. Still graduated with about 15K student loans too. The people really gettin
71.
by chelmzy 7y ago
You would think so but it looks more and more like Facebook everyday.
72.
by chelmzy 7y ago
I agree but it can be almost impossible to scale efficiently. My organization has ~20,000 employees and at-least another 5000 contractors that use our email system.
73.
by chelmzy 7y ago
It would still trigger the fail. Typically the link contains an identifier and the landing page is hosted on a public facing web server.
74.
by chelmzy 7y ago
I understand the people that have been living there since before the boom. But what about the security guard and other such people that moved there knowing they would need to live in a van? There's 100s of cities to choose from so its
75.
by chelmzy 7y ago
I was under the impression that they already opened the code for X-Pack features.
76.
by chelmzy 7y ago
Why not just purchase 1 beer without the six pack?
77.
by chelmzy 8y ago
https://www.blackhat.com/docs/us-15/materials/us-15-Wilhoit-... They take commands to change certain values.
78.
by chelmzy 8y ago
Sweet. I'm going to get a demo from them. I've demoed Specops and nFront products but they were a tad out of my organization's price range.
79.
by chelmzy 8y ago
Here's a Shodan search that will net you 5K+ fuel tank controls. https://www.shodan.io/search?query=inventory+port%3A%2210001...
80.
by chelmzy 8y ago
You guys hiring?
81.
by chelmzy 8y ago
>Password blacklists Assuming the external app is using AD auth. What product do you use to blacklist? Currently I just audit the passwords by dumping the hashes from the DC and running them against HIBP NTLM database.
82.
by chelmzy 8y ago
The FBI/private companies have specialized tools for tracking Bitcoins throughout their lifespan. All the data is out in the open so there is no hiding unless he converted to Monero anonymously.
83.
by chelmzy 8y ago
Sounds like a mainframe-based limitation. Our mainframe behaves exactly like that.
84.
by chelmzy 8y ago
I have a script running weekly that dumps the NTLM hashes from our domain controller and compares them against the HIBP hash list. It will then automatically force a password reset on the user's account if found in the compromised hash
85.
by chelmzy 8y ago
Curious if they have this server segregated from the rest of the network or you can browse other internal resources through it.
86.
by chelmzy 8y ago
Damn I wish my apartment took credit cards for payment. That is the one single thing I don't put on my card.
87.
by chelmzy 8y ago
You can do this with a ton of other services as well. It's pretty common in the bug bounty scene. I did it with MoviePass domains awhile back.
88.
by chelmzy 8y ago
Can you tell me a bit more about your trip? I have been wanting to go to Georgia for a few years now.
89.
by chelmzy 8y ago
Security Operations Center
90.
by chelmzy 8y ago
Hotmail to use MSN Messenger in the fourth grade. Circa 2004/2005.

More ›