Misc Updates

ClamAV notes.md

@@ -18,4 +18,9 @@ Logging is horrible.  Clamd by default writes to a logfile, but doesn't apparent
 log when a scan actually runs or what its results were, unless that scan finds
 something.
 
+See salt/fileroots/internal_splunk_forwarder/files/TA-clamav/default/inputs.conf for the locations splunk is looking for. 
+
+## Exceptions and False Positives
+
+See also: https://github.xdr.accenturefederalcyber.com/mdr-engineering/msoc-infrastructure/wiki/AV-Exceptions
 

Portal Notes.md

@@ -10,8 +10,7 @@ Portal is a custom application running on Django app in docker.
 ## Help! Portal is down!
 Start with a docker container restart
 salt 'customer-portal*' cmd.run 'docker container ls'
-salt 'customer-portal*' cmd.run 'docker restart nginx'
-salt 'customer-portal*' cmd.run 'docker restart portal'
+salt 'customer-portal*' cmd.run 'docker restart portal nginx'
 
 
 ## Deploy Process

Teleport Notes.md

@@ -13,3 +13,10 @@ tsh --proxy=teleport.xdr.accenturefederalcyber.com login
 tsh ls
 tsh --proxy=teleport.xdr.accenturefederalcyber.com ls
 ```
+
+
+## Compliance Notes
+https://goteleport.com/teleport/how-it-works/fedramp-ssh-kubernetes/
+https://goteleport.com/teleport/how-it-works/soc2-ssh-kubernetes/
+https://goteleport.com/docs/config-reference/
+