ecklerwr1 · Sr. Network / Systems Architect · ✭✭✭✭✭

For sure! I went to RMF training and got a stack of books a foot high... the ultimate goal with RMF is continuous monitoring and logging everything so we're rethinking some of our logging now.

When everything is marked as a security relevant object it makes the windows security event logs grow massively in size. Then being required to maintain this raw log data for extended periods of time it becomes tedious to say the least!

Wow gotta scroll down a little more but it's all working! Welcome to thwack 3.0!!! I'm glad you got it all worked out Danielle! Bill

That's close!

We've even started some cloud now and considering the security ramifications it's most likely here to stay.

Also the idea of increasing sharing of intelligence, security, and moving to some "cloud" not in your control all sometimes conflict with each other... I know our customers wouldn't probably be ok with us outsourcing our infrastructure to anyone... It's the cloud not owned by you part I see a lot of problems with. Everyone…

I've got almost 4 trillion security events in my GFI EventsManager system right now... since all of the machines are hardened they gen like orders of magnitude more security events than normal default systems would so I get what your saying.

The video helped for sure!

Even though these have been multiple choice questions... they really haven't been... just sayin'.

Seems to show how seriously things fall apart when the network goes away!

I've never heard of MTTI... perfstack on the other hand. We know that!!!

Well at least you have more time for the computer now until you can drive again! Welcome back Jfrazier​... you were missed!

So far so good... security is pretty much everything these days!

They usually post the links to the videos shortly after the live video is shown... usually < 1 day and often minutes after the live version.

Many companies security is like an egg... hard on the outside but soft and squishy on the inside. Insider threat is a big part of current day security architecture.

So this will kinda be like an Orion (splunklike) log aggregation tied into our other Orion tools it sounds like?

Ok google! I have to admin I love android auto... it pretty awesome.

I thought the best part was the picture lololol... Nice shirt!!!! I could go for that kind of sack lunch some days!

Looks like and works like aren't the same thing. There were some known breaches as well.

Lol remember all those dang AOL cd's all over the place!!! I thought the same thing until a retired banker in my neighborhood, that's still on the board of a bunch of San Francisco banks btw, asked me to help him with his PC and I saw he is still using AOL email for just about everything! o.O

Nothing like normal regex o.O! I can't tell you how many times it's frustrated me how people try to reinvent the wheel! I've yet to see a really good subtitute either yet.

Yep... same here all done all finished... I figured out the prize after learning the bottom words and using the goog but as everyone knows you have to get all the letters and the phrase for the extra entry. Thanks Danielle for all your hard work on this again ;^}

We do virtualize our SQL Server too... it used to not be supported but with more powerful infrastructure and storage it's easily possible today. Our entire Orion environment including additional pollers and NTA noSQL database are all VM's.

You're right about the mini satellites Thomas.

I'm still running on 12.3 HF3 and I've had some issues with speed of the website and sometimes disconnecting from the SQL server... usually a reboot fixed it but the problem recurs after a week or two... I'm going to put HF4 on as soon as I can to see if that helps.

All the lab peeps and rest of the SW staff... even tdanner​ comes out usually too! It'll be different perhaps a lot of changes in the business it'll be interesting how this compares to last year! (Some of the executives joined in)

This is some of the kind of stuff that keeps me up at night thinking about.

To make it even worse... a LOT of marketing is being done using all these terms and is often basically vaporware.

I'm in count us in for sure!

Charlie is in the house!