colesmj

Results 37 comments of colesmj

Also AA02 seems to cover DE02 (duplicate threat?)

I agree a Rules Engine will be necessary and important, if nothing else to manage the complexity as the threat list expands. We might consider a package like this: https://pypi.org/project/Intellect/

More than the description - when would someone set handlesCrashes to True?

Or if it handles all exceptions? On Tue, Oct 30, 2018, 14:46 Izar Tarandach wrote: > In a Process, if it knows how to clean up (no core files, no...

Either way it sounds like there is enough confusion that this threats needs an edit, or split into 2 - handles crashes, and exposes sensitive data on error. Adding metadata...

Just a reply to Rohit on complexity and barrier to entry - threats and condition logic can be complex without impacting the users who want to keep things simple in...

Might be best to split into 2 as I suggested earlier. A process that handles a crash may still expose data, and a process that avoids exposing data on crash...

Rather than creating mixed object types, can we finally fix (and then properly document) the object model? ~Matthew Coles~ On Tue, Apr 6, 2021, 16:38 nozmore ***@***.***> wrote: > I...

I started to document the object model in the wiki for this project ages ago. Please update it. ~Matthew Coles~ On Wed, Apr 7, 2021, 00:56 nozmore ***@***.***> wrote: >...

There are definitions for hardening - from sources like DISA and CIS, to individual component vendors. Patching is a part of hardening, add covers more than the OS. We should...