Michael Koch

Level 4 with one computer (Privileged Access Workstation)

7

Level four can be achieved with only one physical computer on your desktop. One can use virtual machines and call it a Privileged Access Workstation: https://techcommunity.microsoft.com/t5/data-center-security/privileged-access-workstation-paw/ba-p/372274 It hurts a little...

Parsing Cisco Extended Access Control Lists sometimes fails silently

2

I've written a grok pattern to parse Cisco Extended ACLs. Mostly this works fine, however for 0.2 % of my ACLs the resulting variable (`grok_line = grok.match(line)`) is None. I...

**Adjustments for Elasticsearch 6 compatibility (tested on Elasticsearch 6.3.2):** * Replace String data type by Keyword data type (fixes #6) * Do not set multiple document types **Other improvements:** -...

I'm trying to implement the following as a scheduled task: 1.) Approve all updates with status "Needed" for a given `ComputerTargetGroup` _test_group_ (this is the group with the test systems...