Advanced Search
Search Results
86 total results found
Ignore when another rule matches
When a building block or rule matches it's specific fields, do not fire matched events and NOT when a subset of at least this number of these rules, in order, from the same|different source IP to the same destination IP, over this many seconds
Qradar expiring whitelist
Use AQL filter query username LIKE 'testUser' and LONG(DATEFORMAT(starttime, 'yyyyMMdd')) < 20190429
Qradar global whitelist
Use Routing Rules with forwarding > bypass correlation For IP ranges, use Network Hierarchy.
Reference Maps
[http://www.siem.su/docs/ibm/Technical_remarks/Reference_Data_Collections_Technical_Note.pdf]
Block combustion tester
https://www.napacanada.com/en/p/UVW560000 This tool will help detect what kind of leak that your engine might be facing, whether its coolant or oil.
Windows 10 Pro upgrade from Home
Below key should provide several days activation and upgrade to Pro from Home edition 8DVY4-NV2MW-3CGTG-XCBDB-2PQFM
Restart Policies
Use a restart policy To configure the restart policy for a container, use the --restart flag when using the docker run command. The value of the --restart flag can be any of the following: Flag Description no Do not automatically restart the...
WatchTower
https://containrrr.github.io/watchtower/ With watchtower you can update the running version of your containerized app simply by pushing a new image to the Docker Hub or your own image registry. Watchtower will pull down your new image, gracefully shut down yo...
Zerotier Openvz zt0 issue
Apparently the issue was a "rights issue"; adding the -U option as described down below fixed it. chmod 0666 /dev/net/tun /lib/systemd/system/zerotier-one.service: [Unit] Description=ZeroTier One After=network.target [Service] ExecStart=/usr/sbin/ze...
Samba Client CIFS
https://www.thomas-krenn.com/en/wiki/Mounting_a_Windows_Share_in_Linux sudo apt-get install cifs-utils mount -t cifs //192.168.1.100/freigabe /mnt -o user=testuser For permanent mount http://timlehr.com/auto-mount-samba-cifs-shares-via-fstab-on-linux/ .smb ...
tun enabled for lxc
/etc/pve/lxc/###.conf lxc.cgroup2.devices.allow: c 10:200 rwm lxc.hook.autodev: sh -c "modprobe tun; cd ${LXC_ROOTFS_MOUNT}/dev; mkdir net; mknod net/tun c 10 200; chmod 0666 net/tun"
Debian Update Release Distro
update to the next distro stretch buster apt update && apt upgrade -y && sed -i 's/stretch/buster/g' /etc/apt/*.list && sed -i 's/stretch/buster/g' /etc/apt/sources.list.d/*.list apt update && apt upgrade -y && apt d...
Bash Scripting Techniques
cat multiline cat <<EOF > /etc/apt/sources.list deb http://http.kali.org/kali kali-rolling main non-free contrib # deb-src http://http.kali.org/kali kali-rolling main non-free contrib EOF
EdgeRouter Conditional Forwarding Hostnames
Log in to CLI or SSH to Ubiquiti router configure set service dhcp-server hostfile-update enable commit exit This will now add names and IP of devices from your DHCP scope to the router's hosts file.
VMList
#All VMs install as one partition to root / [opnsense] 4 CPU 4 GB MEMORY 25 GB vmnet0 -> 142.55.32.252/24 SHERIDAN vmnet1 -> 192.168.10.1/24 CTF_DMZ vmnet2 -> 192.168.20.1/24 CTF_INTERNAL vmnet3 -> 192.168.30.1/24 CTF_MANAGEMENT ztnet0 -&g...
Insecure Registries
in /etc/docker/daemon.json add this (don't forget comma after existing lines) "insecure-registries":["192.168.10.110:5000"]
Operating Folder
In /etc/docker/daemon.js (don't forget to comma after existing lines) "data-root": "/data/docker"
Swap
sudo fallocate -l 2G /swapfile && sudo chmod 600 /swapfile && sudo mkswap /swapfile && sudo swapon /swapfile && free -h sudo cp /etc/fstab /etc/fstab.bak && \ echo '/swapfile none swap sw 0 0' | sudo tee -a /etc/fsta...
Useradd
useradd -m -s /bin/bash -d /home/madsprite -c "MadSprite" madsprite passwd madsprite usermod -G sudo madsprite
Recovery
NVRAM reset: Command+Alt(fn)+p+r Recovery: Command+Option+r Tool to burn installer.dmg files to USB on Windows https://www.acutesystems.com/scrtm.htm