Setting up attack simulations for your EDRĬreation of automated actions to both enhance SIEM alert details and provide automated actions as a result of a given incident.Ĭloud Security Posture Planning and development Network and asset discovery discussions with a focus on attack surface mapping Red/Blue teaming activity with a focus on improving awareness of SOC security best practices. (perhaps I need to blog about this)Ĭhecklist of O365 and Azure security features to improve awareness of security features available with an E5 license. The ini file only gets read half the time with no pattern obvious to me.(in no particular order – includes both on-prem and cloud)Ĭonfigure test lab and simulate attacks to verify triggering of alertsĭocumented methodology for providing clear/concise implementation of SIEM use cases based on existing log sources and a focus on threat and compliance related detections.ĭocumented methodology for providing clear/concise implementation of log sources into SIEM for assured value.
Help=C:\Program Files\AutoHotkey\AutoHotkey.chmĭefault=::\SafariIco.exeĭefault=C:\Program Files\LimeWire\LimeWire.exeįolder=C:\Users\Owner\Downloads\Desktop\AHK Titans=C:\Program Files\Microsoft Games\Chess\Chess.exeĭefault=C:\Program Files\Microsoft Games\Chess\Chess.exe =C:\Users\Owner\Downloads\Desktop\AHK\Control Systemĭefault=C:\Program Files\Microsoft Games\Minesweeper\MineSweeper.exe If path != C:\Program Files\Common Files\ArcSoft\Bin C:\Windows\system32 C:\Windows C:\Windows\System32\Wbem C:\Program Files\ATI Technologies\ATI.ACE\Core-Static C:\Program Files\QuickTime\QTSystem\ IniRead, path, C:\Users\Owner\Downloads\Desktop\AHK\Control System.ini, %word2%, %word3%, chose If(word1 = "run" or word1 = "go" or word1 = "launch" or word1 = "sound") The script seperates words entered to an aray called word.
0 kommentar(er)
