ecklerwr1 · Sr. Network / Systems Architect · ✭✭✭✭✭

The biggest new thing for us is also VMware NSX. We bought into the full monty with VMware this year. I'm also getting to goto Cisco Live next month which will be fun for a change. I'm also going to have to migrate from Cisco ACS to ISE this year like @Eric CourtesyIT.

I have a team... no way I could do this all so yeah... you're probably right but I'm swamped even trying to delegate some of the stuff...

Woohoo Danielle is up to Level 15! She almost has 50k points! Maria is coming up fast too at level 9 already o.O! Anyone remember the old ranking system with the effigy that got bigger and bigger till you were a little guy with all the energy around him??? I still see a lot of us around that were all the super effegy maxed…

Awe man this would be sweet!

Gotta love video transcripts!

Today's was a little tricky... I had to rule out the ones I knew were right to find the wrong one.

All the Avengers movies are great... period.

This was a tough call.

Lol that car park job looks pretty funny! I found another cool article about MS open sourcing a system to test drones and other things in a virtual environment to aid in testing of systems: Microsoft shares open source system for training drones, other gadgets to move safely on their own - Next at Microsoft Sounds like a…

I would like NTM to be part of NPM and replace the outdated network atlas that has changed little in a decade minus the connect now feature that took 3 revs to start working :^} It really seems like NTM is what network atlas should have been.

Isolated and large.

We build WIN-T.

EOC, NPM, NTA, SAM, and VMan (VCOps as well) plus splunk seems to get the job done for me. Also OpNet for DPI but I'm looking into using new NPM DPI to get rid of it maybe.

My next cert is going to be Certified Ethical Hacking v9. 2600 was also the name of a very popular hacking magazine: 2600: The Hacker Quarterly - Wikipedia

It nice to not have to use agents but have the option if you need them for some reason.

We're investigating the newer Azure O365 cloud for higher classification level traffic... it requires the direct connection to the cloud. Currently there's on POP in Virginia and the other in California. We're really hoping because MicroSoft has said they are opening a new one in Phoenix which would be ideal for us to…

I read many of those but... BH and DEFCON usually aren't on my list of events to attend. I attend more local and some training to maintain my CPE's for CISSP and soon CEH.

I wonder why you don't hear more about google's cloud... often AWS and Azure are always mentioned but not much is said about googles cloud?

Makes me think about Security Event ID 4656 and handle manipulation. When security policy is enabled it can blow up your security event log collector. So in this case such a small change in secpol ends up almost bringing the collection of Windows Security Event Logs to it's knees. I'm still working on way to capture the…

Event Correlation is where the real tricks and magic can happen but it's also a difficult problem and it why you don't see much of it done well.

Scooby Snacks FTW!!!

Easy choice... War Games. Don't get me wrong TRON was big when I was in school with all the SIGGRAPH computer graphics things going on at the time. If you don't know what it is it's part of the ACM: dl.acm.org/.../siggraph War Games was THE movie that reminded me of myself sitting at the Apple ][+ with my 300 baud modem…

And maybe your resume' if a big enough fine comes down on the company.

D&D you had me there! Bill

I like meatball sandwiches!

How much storage space they're taking up for sure is important!

They come up with some neat names for the botnet version at least... https://www.tripwire.com/state-of-security/security-data-protection/cyber-security/spam-campaign-enlists-victims-botnet-… “The encrypting malware then goes on to connect to a number of hard-coded IP addresses whose purpose is to enroll the affected…

Looks like a perfstack month to me! And look at SolarWinds on Gartner! I'm not sure why they aren't moving SolarWinds further to the right yet though!

Between the shift to RMF and these new clouds certified for processing classified information (AWS, Azure) there is a LOT going on right now in the Government with IT change right now. It's a lot to take in and attempt during 2018. This next year is going to be busier than 2017 I'm pretty certain.