Elektrine lite

← Feed

Christopher Brumm

cbrhh@infosec.exchange

<p>Security and identity practicioner. <br />Cloud Security Architect.<br />MS Cloud sherpa.<br />🐻🐯🥷<br />In fresh ❤️ with 🐘</p>

Posts

  • View post

    Are you onboarding your DCs in Azure Arc? Why or why not?

  • View post

    Just found this nice list of useful event IDs for #AD monitoring: https://github.com/TonyPhipps/SIEM/blob/master/Notable-Event-IDs.md My next step is to figure out how to bring that list with low effort to a data collection rule for #Sentinel integration with the Azure Monitoring Agent. Do you have good sources / lists with Event IDs for AD monitoring or are you ingesting just everything?

  • View post

    As is so often the case when you deal a little more intensively with a topic, you find that someone has already been there and has completely played through the topic 😂 For all the RC4-hunters out there (in prep to AD patching) - use this #Sentinel workbook: https://techcommunity.microsoft.com/t5/microsoft-sentinel-blog/azure-sentinel-insecure-protocols-workbook-reimagined/ba-p/1558375

  • View post

    Spent half the day with @fabian_bader struggling with #Azure Arc and Azure Monitor Agent #AMA to connect DCs to #Sentinel. There are a lot of catches and pitfalls here. Hopefully one of us will have time to blog a bit about it.

  • View post

    Captain&amp;#39;s log ⛵🥷 Today I&amp;#39;ve learned about some #infosec topics: 1. the SCAP protocol: https://en.m.wikipedia.org/wiki/Security_Content_Automation_Protocol 2. Cross-site tracing: https://owasp.org/www-community/attacks/Cross_Site_Tracing 3. and (again) ACID 😵‍💫: https://www.geeksforgeeks.org/acid-properties-in-dbms/ #LifeLongLearning

  • View post

    Had some busy days. The CISSP exam was really tough - but I did it 🎂 Now I&amp;#39;m full focused on XMas with little distractions to Administrative Access concepts. @thomasnaunheim has built some mind-blowing stuff (watch out for his blog) and I have to learn about Entra Permission Management for a customer POC. Exciting Days 🍍

  • View post

    Very interesting! Game of Thrones in cybersecurity: data gravity, industry consolidation, platform play, private equity, and the great cyber gold rush https://ventureinsecurity.net/p/game-of-thrones-in-cybersecurity

  • View post

    Recommendation of the day: Know your editor! (VSCode edition) https://youtube.com/playlist?list=PLj6YeMhvp2S5UgiQnBfvD7XgOMKs3O_G6