Cleared SAA-C02

I started with acloud.guru AWS Certified Solutions Architect Associate course. https://acloudguru.com/course/aws-certified-solutions-architect-associate-saa-c02 If you get the pro subscription, you get access to labs without having to create your own AWS accounts. I think it’s 50 bucks a month, but you may be able to find this on Udemy for cheaper. AWS Read more

Open source security solutions

In today’s evolving threat landscape, large organizations must leverage the power of open-source security solutions to protect their networks. This post will explore a real-world example of how a security operations center (SOC) implemented several open-source tools and platforms to detect and respond to sophisticated threats. Deployment of Intrusion Detection Read more

AMDGPU Pro on Debian

Ubuntu, RHEL and Suse are now the only “supported” distros when it comes to the proprietary AMD GPU drivers. Historically, nvidia has always had the worst opensource driver for linux, but some would argue the best closed source driver. AMD has been the other way around. Opensource AMD GPU drivers Read more

Forensic Challenge

Information: A user reported strange computer activity to their support staff. Support was so good that the first thing they did was to snap a memory image before the computer was rebooted. Once the technical staff acquired the memory, they were also able to grab an image of the system Read more

Bro 2.5.1 and ELK

Software versions: Bro 2.5.1 – on Debian 8.9 bro server Logstash 2.2.4 on Debian 8.9 bro server Elasticsearch 2.4.6 on Debian 8.9 ELK server Kibana 4.3.0.9369 on Debian 8.9 ELK server   First install Java on both systems: sudo add-apt-repository -y ppa:webupd8team/java sudo apt-get update sudo apt-get -y install oracle-java8-installer   Read more

DNS over HTTPS

Google and others have been working on implementing DNS over HTTPS. https://tools.ietf.org/id/draft-hoffman-dns-over-https-00.html This allows bypass of things like RPZ, DNS blackholes, and other protections.  All the more reason to start thinking about SSL inspection.  The right to privacy is understandable, but protecting users, assets, and data is more important.  This Read more

Client Certificates for SSL Decryption

Here’s how to install the CA certificate on multiple platforms for MITM. For Linux you have to import certificates into individual browsers.  For Firefox, go to edit/preferences/advanced/certificates/view and import the cert under authorities. Check the box for “Identifies Websites.”  For Chrome, click settings, search for cert, and open ‘Manage Certificates.’  Read more

OpenELEC VPN

1. Install openvpn on OpenELEC: In Kodi select SYSTEM / File Manager Select Add Source / Select None Type http://fusion.tvaddons.ag and select Done Highlight the box underneath and type “fusion” Select OK Go back to your Home Screen and Select SYSTEM Select Add-Ons / Select Install from zip file / Read more

i3 Window Manager

i3 is a tiled window manager that allows some really cool functionality and customization.  Running on Debian 8. Installed the following: sudo apt-get install i3 suckless-tools scrot gmrun terminator nitrogen pip install i3menu set your wallpaper with nitrogen Grab this tray menu. git clone https://github.com/drakmail/snapfly.git $ cd snapfly/package $ ./make_packages.sh Read more

Python3 and Minecraft on Debian

Minecraft is great for learning Python.  Here’s how to get the client going on Debian. I’m using spigotMC for the Minecraft server. https://www.spigotmc.org/wiki/spigot-installation/#linux First install java, git and tar # apt-get install git openjdk-7-jre-headless tar Download BuildTools.jar from https://hub.spigotmc.org/jenkins/job/BuildTools/lastSuccessfulBuild/artifact/target/BuildTools.jar to /home/username/spigot/. Then run $ git config –global –unset core.autocrlf and Read more