Jun 16, 2010
Group Policy Resource Guide
Group Policy Resource Guide: "Providing some links and information about tools and resources that exist for free, all pertaining to Group Policy."
Jun 14, 2010
Rogue facebook application acting like a worm, (Mon, Jun 14th)
Rogue facebook application acting like a worm, (Mon, Jun 14th): "Reader Freddie showed us a Sophos report of an application that has gone rogue by spamming your cont ..."
Text Editors
I've always been a vi man myself. I'll pull out emacs for heavy lifting but I always end up in a man page or my emacs hint sheet. But notepad, bleh.
Of course XKCD has regular updates on the subject as well.
Jun 12, 2010
Ipad Classic
iPad Gets Encased in a Macintosh Classic:
There are plenty of iPad stands to choose from, but none quite like this gutted Macintosh Classic that houses the futuristic iPad in its vintage case. Although the Mac's display area is almost the same size as the iPad's, the tablet's resolution totally clobbers that of the old computer from 1990. 1990 doesn't seem like that long ago, but look how far we've come! Obviously, this modded case is not the best idea for travel, but it is perfect for watching movies, or TV shows at home, since you can sit back, relax, and not have to hold the iPad yourself.
However, this isn't the only amazing iPad case mod that we've seen. Check out a few other notables - including a few DIY iBook and Macintosh Plus mods, a healthy kitchen cabinet project, and of course, the April Fool's joke heard 'round the world - in the gallery below!
There are plenty of iPad stands to choose from, but none quite like this gutted Macintosh Classic that houses the futuristic iPad in its vintage case. Although the Mac's display area is almost the same size as the iPad's, the tablet's resolution totally clobbers that of the old computer from 1990. 1990 doesn't seem like that long ago, but look how far we've come! Obviously, this modded case is not the best idea for travel, but it is perfect for watching movies, or TV shows at home, since you can sit back, relax, and not have to hold the iPad yourself.
However, this isn't the only amazing iPad case mod that we've seen. Check out a few other notables - including a few DIY iBook and Macintosh Plus mods, a healthy kitchen cabinet project, and of course, the April Fool's joke heard 'round the world - in the gallery below!
Jun 11, 2010
IT Audit Automation: Windows Baseline Audits
IT Audit Automation: Windows Baseline Audits:
"Managing the security of your Windows workstations is a fairly simple task when you leverage technologies like Group Policy. Even so, individual systems within the domain can change for a wide variety of reasons. It could be that we have users who are starting and stopping services, it may be that malware is finding its way in or any of a variety of other possibilities. How can we monitor how our workstations are changing?
I’ve long been a strong proponent of compliance automation. To this end, I’ve included a script at the end of this post that can be used as a starting point for pulling out any WMIC based information from Windows computers within your domain. In fact, the script will first pull a complete list of all of the domain computers and then work its way through that list, either creating a baseline or comparing each system to the pre-existing baseline for that system.
With a minimum of effort you can easily extend this script to send notifications to the domain administrators when changes are detected or new systems are identified. This is the perfect starting point not only for compliance management but even for early malware detection.
In a future article look forward to some tools and scripts that will allow you to perform zero day malware detection in your environment using the same scripting concepts explored here.
Download the script here: Windows_Baselines
For a comprehensive course on how to identify critical controls, validate that the correct controls are in place and validate processes, consider the SANS 6 day course, “Advanced System & Network Auditing“. David Hoelzer is the SANS IT Audit Curriculum Lead and the author of several SANS IT Audit related courses."
"Managing the security of your Windows workstations is a fairly simple task when you leverage technologies like Group Policy. Even so, individual systems within the domain can change for a wide variety of reasons. It could be that we have users who are starting and stopping services, it may be that malware is finding its way in or any of a variety of other possibilities. How can we monitor how our workstations are changing?
I’ve long been a strong proponent of compliance automation. To this end, I’ve included a script at the end of this post that can be used as a starting point for pulling out any WMIC based information from Windows computers within your domain. In fact, the script will first pull a complete list of all of the domain computers and then work its way through that list, either creating a baseline or comparing each system to the pre-existing baseline for that system.
With a minimum of effort you can easily extend this script to send notifications to the domain administrators when changes are detected or new systems are identified. This is the perfect starting point not only for compliance management but even for early malware detection.
In a future article look forward to some tools and scripts that will allow you to perform zero day malware detection in your environment using the same scripting concepts explored here.
Download the script here: Windows_Baselines
For a comprehensive course on how to identify critical controls, validate that the correct controls are in place and validate processes, consider the SANS 6 day course, “Advanced System & Network Auditing“. David Hoelzer is the SANS IT Audit Curriculum Lead and the author of several SANS IT Audit related courses."
Subscribe to:
Posts (Atom)