Sen descrición

Brad Poulton 056aff9755 Additional Tweaks %!s(int64=4) %!d(string=hai) anos
files 3815d44548 Added mdr-root-ca accounts; Updated new account setup to include update_refs %!s(int64=4) %!d(string=hai) anos
images febf393c14 Latest notes. %!s(int64=5) %!d(string=hai) anos
ACM and PKI Notes.md 0d10018b7d notes %!s(int64=4) %!d(string=hai) anos
AFS Forcepoint Neuterage Notes.md ebbf36680a rename to match %!s(int64=5) %!d(string=hai) anos
AFS Macbook Notes.md 99739e4af0 SSL certificate %!s(int64=4) %!d(string=hai) anos
AFS POP Notes.md fda1952319 little here and little there %!s(int64=5) %!d(string=hai) anos
AFS ServiceNow AWS Account Request.pdf b9c6d3b6da init %!s(int64=5) %!d(string=hai) anos
AWS CloudWatch Insights.md 783322d3eb Minor Renaming %!s(int64=5) %!d(string=hai) anos
AWS ECR Notes.md 5a1bbcc30c Format Updates %!s(int64=4) %!d(string=hai) anos
AWS NVME Notes.md d53fe8445e Major Clean UP %!s(int64=5) %!d(string=hai) anos
AWS New Account Setup Notes.md 3815d44548 Added mdr-root-ca accounts; Updated new account setup to include update_refs %!s(int64=4) %!d(string=hai) anos
AWS Notes.md 7510eb61a4 URLs updated - AWS Notes %!s(int64=4) %!d(string=hai) anos
AWS Web Application Firewall Add-on Notes.md adf1790c9c Format Updates %!s(int64=4) %!d(string=hai) anos
Aide Notes.md 5a1bbcc30c Format Updates %!s(int64=4) %!d(string=hai) anos
Architecture Notes.md c628d51361 VMray has its own account %!s(int64=5) %!d(string=hai) anos
Asset Inventory Notes.md fb891d5af8 Merge branch 'master' of github.xdr.accenturefederalcyber.com:mdr-engineering/infrastructure-notes %!s(int64=4) %!d(string=hai) anos
Atlantis Notes.md d53fe8445e Major Clean UP %!s(int64=5) %!d(string=hai) anos
Bastion.md b986afbead Adds Bastion Notes %!s(int64=4) %!d(string=hai) anos
Break-Glass-Accounts.md a4e7a2f597 ACM %!s(int64=4) %!d(string=hai) anos
CIS Benchmark Notes.md 8ce32b7106 Format Updates %!s(int64=4) %!d(string=hai) anos
CIS Benchmarks Audit.md 32cb885a30 Small updates %!s(int64=4) %!d(string=hai) anos
ClamAV notes.md 721521b312 Misc Updates %!s(int64=4) %!d(string=hai) anos
Collectd Notes.md 5a1bbcc30c Format Updates %!s(int64=4) %!d(string=hai) anos
Customer Decommision Notes.md 9ad50bc88d Updates Customer Setup notes %!s(int64=4) %!d(string=hai) anos
DNSSEC Notes.md 4c771cde67 patching, salt, splunk %!s(int64=4) %!d(string=hai) anos
FedRAMP Notes.md 8557637aeb Migrates FedRAMP Notes to O365 %!s(int64=4) %!d(string=hai) anos
Fluentd Notes.md 5a1bbcc30c Format Updates %!s(int64=4) %!d(string=hai) anos
GitHub Server Notes.md 16a0de23b5 Format Updates %!s(int64=4) %!d(string=hai) anos
GnuPG (gpg) Notes.md f4a76e1e0c Format Updates %!s(int64=4) %!d(string=hai) anos
Interconnects Notes.md 1d9be78630 Format Updates %!s(int64=4) %!d(string=hai) anos
Jenkins Notes.md 9b61411e06 Removed XDR Prefix %!s(int64=5) %!d(string=hai) anos
Jira Notes.md f36b2fdc55 Notes from updating Jira and migrating NGA/AFS %!s(int64=4) %!d(string=hai) anos
Keycloak Notes.md 5d713238c4 Jira and Keycloak Notes Added %!s(int64=4) %!d(string=hai) anos
LCP in Azure.md 66eeefb4f5 Added notes on disk space %!s(int64=4) %!d(string=hai) anos
New Customer Setup Notes - GovCloud.md 056aff9755 Additional Tweaks %!s(int64=4) %!d(string=hai) anos
New Customer Setup Notes - Legacy.md 733309a5ac New customer setup added for GC %!s(int64=4) %!d(string=hai) anos
OSContext Notes.md 3fc4ff0c21 URLs updated - OScontext Notes %!s(int64=4) %!d(string=hai) anos
Okta Notes.md febf393c14 Latest notes. %!s(int64=5) %!d(string=hai) anos
OpenVPN Notes.md 231455cecd updates are fun! %!s(int64=4) %!d(string=hai) anos
OpenVPN Upgrade Notes.md a6036d10c3 Format updates %!s(int64=4) %!d(string=hai) anos
POP-LCP Node Notes.md 056aff9755 Additional Tweaks %!s(int64=4) %!d(string=hai) anos
Packer Notes.md 3eda556f64 Updates OpenVPN, sft, etc. Notes %!s(int64=4) %!d(string=hai) anos
Packer Salt Master FIPS Notes.md 3eda556f64 Updates OpenVPN, sft, etc. Notes %!s(int64=4) %!d(string=hai) anos
Patching Notes--CaaSP.md d897d7994a Formatting changes %!s(int64=4) %!d(string=hai) anos
Patching Notes.md 3f50c2cda3 Format and Process updates during June Patching %!s(int64=4) %!d(string=hai) anos
Phantom Notes.md 7037904e85 Init tenable, other changes %!s(int64=4) %!d(string=hai) anos
Phantom Upgrade Notes.md 7037904e85 Init tenable, other changes %!s(int64=4) %!d(string=hai) anos
Portal Lamba Notes.md 16dced5e2f Patching, Portal Notes %!s(int64=4) %!d(string=hai) anos
Portal Notes.md 32cb885a30 Small updates %!s(int64=4) %!d(string=hai) anos
Portal WAF Notes.md a2feef0b18 Format Updates %!s(int64=4) %!d(string=hai) anos
Proxy Notes.md c40d9896d3 Updates proxy notes %!s(int64=4) %!d(string=hai) anos
Qualys Notes.md e90e1b7da1 Format Update %!s(int64=4) %!d(string=hai) anos
RDS Notes.md afac49000d Added duanes jira notes %!s(int64=4) %!d(string=hai) anos
README.md 9fe6830ac7 cahnges %!s(int64=4) %!d(string=hai) anos
RedHat Full Drive Notes.md 92be7c8326 Updates patching notes, new customer setup %!s(int64=4) %!d(string=hai) anos
RedHat Notes.md d311c6b47f many changes %!s(int64=4) %!d(string=hai) anos
Reposerver Notes.md 158eb0674f Updates %!s(int64=4) %!d(string=hai) anos
SELinux Notes.md 4f6fe94ae9 some selinux notes %!s(int64=4) %!d(string=hai) anos
Salt Notes.md 8736ed2430 Format and verbiage updates %!s(int64=4) %!d(string=hai) anos
Salt Upgrade 2019 -> 3001 Notes.md 8ea9ba042f URL updates %!s(int64=4) %!d(string=hai) anos
Salt Upgrade 3001.2 -> 3001.6 Notes.md 4c771cde67 patching, salt, splunk %!s(int64=4) %!d(string=hai) anos
Salt Upgrade 3001.6 -> 3002.6 Notes.md b1f8b06289 Format Update %!s(int64=4) %!d(string=hai) anos
ScaleFT Notes.md 9f3a6bdc8e adds to scaleFT %!s(int64=4) %!d(string=hai) anos
Sensu Go Migration Notes.md 5a1bbcc30c Format Updates %!s(int64=4) %!d(string=hai) anos
Sensu Notes.md 328d65c05b Format Updates %!s(int64=4) %!d(string=hai) anos
Sensu Upgrade 5.21 -> 6.3 Notes.md 6f6910ddaa Sensu Upgrade Notes created %!s(int64=4) %!d(string=hai) anos
Sophos Notes.md 5a1bbcc30c Format Updates %!s(int64=4) %!d(string=hai) anos
Splunk AFS Thaw Request Notes.md c70188cc80 Updates patching notes %!s(int64=4) %!d(string=hai) anos
Splunk AWS App and Addon Notes.md 558731785f Splunk Migration Updates %!s(int64=4) %!d(string=hai) anos
Splunk MSCAS Notes.md 8ea9ba042f URL updates %!s(int64=4) %!d(string=hai) anos
Splunk Maxmind Notes.md 4fec480175 splunk maxmind %!s(int64=5) %!d(string=hai) anos
Splunk Migration from Commercial to GovCloud - 1. Prep and Indexer Cluster.md f36b2fdc55 Notes from updating Jira and migrating NGA/AFS %!s(int64=4) %!d(string=hai) anos
Splunk Migration from Commercial to GovCloud - 2. Search Head.md f36b2fdc55 Notes from updating Jira and migrating NGA/AFS %!s(int64=4) %!d(string=hai) anos
Splunk Migration from Commercial to GovCloud - 3. Remaining Servers.md ca57248b97 Splunk Migration Updates %!s(int64=4) %!d(string=hai) anos
Splunk NGA Data Pull Request Notes.md 8ea9ba042f URL updates %!s(int64=4) %!d(string=hai) anos
Splunk Notes.md 283e05d86f Adds improvements for new customer setup splunk vault %!s(int64=4) %!d(string=hai) anos
Splunk Process List Whitelisting FedRAMP Notes.md d53fe8445e Major Clean UP %!s(int64=5) %!d(string=hai) anos
Splunk SAF Offboarding Notes.md 9b61411e06 Removed XDR Prefix %!s(int64=5) %!d(string=hai) anos
Splunk Upgrade Notes.md 334f0db673 URLs updated - Splunk Upgrade notes %!s(int64=4) %!d(string=hai) anos
Sudo Replay Notes.md 157e432b13 sudo replay notes %!s(int64=4) %!d(string=hai) anos
Teleport Notes.md 231455cecd updates are fun! %!s(int64=4) %!d(string=hai) anos
Tenable Security Center Notes.md 7037904e85 Init tenable, other changes %!s(int64=4) %!d(string=hai) anos
Terraform Notes.md d9d526d047 Lots o' changes %!s(int64=4) %!d(string=hai) anos
Terraform Splunk ASG Notes.md 8675129403 More great changes %!s(int64=5) %!d(string=hai) anos
Terragrunt Notes.md 51d027aedd Removed recommendation for tf plugin cache %!s(int64=4) %!d(string=hai) anos
ThreatQ Notes.md 52292d7677 Minor Update %!s(int64=4) %!d(string=hai) anos
VMRay Notes.md d53fe8445e Major Clean UP %!s(int64=5) %!d(string=hai) anos
Vault Notes.md 8ea9ba042f URL updates %!s(int64=4) %!d(string=hai) anos
Vault Prod Refresh Notes.md 9b61411e06 Removed XDR Prefix %!s(int64=5) %!d(string=hai) anos
VictorOps Notes.md d53fe8445e Major Clean UP %!s(int64=5) %!d(string=hai) anos
VirtualBox Build Notes.md febf393c14 Latest notes. %!s(int64=5) %!d(string=hai) anos
Yubikey Notes.md 27ddebbb86 Additional, messy notes on Yubikey stuff.. Will clean up. %!s(int64=4) %!d(string=hai) anos
dnsmasq.md febf393c14 Latest notes. %!s(int64=5) %!d(string=hai) anos
duane-random.md dc3a22bbcf sigh %!s(int64=5) %!d(string=hai) anos
ePO Syslog Notes.md d53fe8445e Major Clean UP %!s(int64=5) %!d(string=hai) anos
jira-sucks.md 58be07a107 jira notes %!s(int64=5) %!d(string=hai) anos
salt_splunk_HEC Notes.md 9b61411e06 Removed XDR Prefix %!s(int64=5) %!d(string=hai) anos
sftp Notes.md 6c183bb3a9 URLs updated - SFTP notes %!s(int64=4) %!d(string=hai) anos

README.md

Brads All Encompassing Compendium of the Entirety of XDR Knowledge

BAECEXD (pronounced "bake ext") is a set of notes about how to actually get things done in XDR. Since XDR is a rapidly evolving landscape, some of these notes are likely to be out of date, flawed, or just outright wrong. Use at your own risk.

Rules

  1. All files MUST follow the naming scheme. <Major Topic> <Minor Topic> Notes.md e.g. Salt Upgrade Notes.md . The first letter of each word should be capitalized.

  2. All files MUST follow the proper markdown format. ( work in progress )

    # <filename>
    <Description of notes or project>
         
    ## <Section Title>
    <Today's date>
         
    <arbitrary notes>
         
    ## <Section Title>
    <Today's date>
         
    <arbitrary notes>
    
    # Salt Notes.md
    Salt is the configuration management tool
    
    ## Section 1
    02/28/2020
    
    Salt sucks and we should use puppet.
    
    ## Section 2
    03/15/2020
    
    Salt version 2019.2.3 should always be made public on the internet. 
    
  3. To add a newline that is visible in markdown on the github website, add two newlines to the .md file. DO NOT add <br> or \ to the ends of lines. The primary place to view these files is in a text editor not on github website!

  4. Use three backticks to indicate a section of code or terminal output and single backticks to indicate technical commands or terms.

  5. When referencing other files use a link in the format See <file name> for more details. e.g. See Salt Upgrade Notes.md for more details.

  6. For PRs, push directly to master unless they are major changes.

  7. Be kind and think about the engineer after you.