No Description

Jeremy Cooper [AFS MBP] b96146e0b2 Re-commit due to Git merge error 4 years ago
archive 7d48bfe00b Streamlined Yubikey Notes 4 years ago
files 6707f54895 Updated CA 4 years ago
images febf393c14 Latest notes. 5 years ago
.gitignore b96146e0b2 Re-commit due to Git merge error 4 years ago
ACM and PKI Notes.md 0d10018b7d notes 4 years ago
AFS Forcepoint Neuterage Notes.md ebbf36680a rename to match 5 years ago
AFS Macbook Notes.md 99739e4af0 SSL certificate 4 years ago
AFS POP Notes.md fda1952319 little here and little there 5 years ago
AFS ServiceNow AWS Account Request.pdf b9c6d3b6da init 5 years ago
AWS CloudWatch Insights.md 783322d3eb Minor Renaming 4 years ago
AWS ECR Notes.md 5a1bbcc30c Format Updates 4 years ago
AWS NVME Notes.md d53fe8445e Major Clean UP 4 years ago
AWS New Account Setup Notes.md 3815d44548 Added mdr-root-ca accounts; Updated new account setup to include update_refs 4 years ago
AWS Notes.md 7510eb61a4 URLs updated - AWS Notes 4 years ago
AWS Web Application Firewall Add-on Notes.md adf1790c9c Format Updates 4 years ago
Aide Notes.md 5a1bbcc30c Format Updates 4 years ago
Architecture Notes.md c628d51361 VMray has its own account 4 years ago
Asset Inventory Notes.md fb891d5af8 Merge branch 'master' of github.xdr.accenturefederalcyber.com:mdr-engineering/infrastructure-notes 4 years ago
Atlantis Notes.md d53fe8445e Major Clean UP 4 years ago
Bastion.md b986afbead Adds Bastion Notes 4 years ago
Break-Glass-Accounts.md a4e7a2f597 ACM 4 years ago
CA Notes.md b36675518e Format Updates 4 years ago
CIS Benchmark Notes.md 9376838945 CIS updates 4 years ago
CIS Benchmarks Audit.md 7dbb8e4045 Format updates 4 years ago
ClamAV notes.md b36675518e Format Updates 4 years ago
Collectd Notes.md b36675518e Format Updates 4 years ago
Customer Decommision Notes.md 9ad50bc88d Updates Customer Setup notes 4 years ago
DNSSEC Notes.md 4c771cde67 patching, salt, splunk 4 years ago
FedRAMP Notes.md 8557637aeb Migrates FedRAMP Notes to O365 4 years ago
Fluentd Notes.md 5a1bbcc30c Format Updates 4 years ago
GitHub Server Notes.md 16a0de23b5 Format Updates 4 years ago
GnuPG (gpg) Notes.md f4a76e1e0c Format Updates 4 years ago
Interconnects Notes.md 1d9be78630 Format Updates 4 years ago
Jenkins Notes.md 9b61411e06 Removed XDR Prefix 5 years ago
Jira Notes.md f36b2fdc55 Notes from updating Jira and migrating NGA/AFS 4 years ago
Keycloak Notes.md 6707f54895 Updated CA 4 years ago
LCP in Azure.md 66eeefb4f5 Added notes on disk space 4 years ago
New Customer Setup Notes - GovCloud.md 7555eb5e8d Re-commit due to git merge issue 4 years ago
New Customer Setup Notes - Legacy.md 733309a5ac New customer setup added for GC 4 years ago
OSContext Notes.md 3fc4ff0c21 URLs updated - OScontext Notes 4 years ago
Okta Notes.md febf393c14 Latest notes. 5 years ago
OpenSSL Notes.md 12be25f340 Updated YubiKey for Changes with New CA 4 years ago
OpenVPN Notes.md df8153365f Updates Patching email 4 years ago
OpenVPN Upgrade Notes.md a6036d10c3 Format updates 4 years ago
POP-LCP Node Notes.md 056aff9755 Additional Tweaks 4 years ago
Packer Notes.md 3eda556f64 Updates OpenVPN, sft, etc. Notes 4 years ago
Packer Salt Master FIPS Notes.md 3eda556f64 Updates OpenVPN, sft, etc. Notes 4 years ago
Patching Notes--CaaSP.md d897d7994a Formatting changes 4 years ago
Patching Notes.md 5d56d29608 Patching improvements 4 years ago
Phantom Notes.md 7037904e85 Init tenable, other changes 4 years ago
Phantom Upgrade Notes.md 43a61f3521 Updates patching, phantom, etc notes 4 years ago
Portal Lamba Notes.md 16dced5e2f Patching, Portal Notes 4 years ago
Portal Notes.md b36675518e Format Updates 4 years ago
Portal WAF Notes.md b36675518e Format Updates 4 years ago
Proxy Notes.md c40d9896d3 Updates proxy notes 4 years ago
Qualys Notes.md e90e1b7da1 Format Update 4 years ago
RDS Notes.md afac49000d Added duanes jira notes 4 years ago
README.md 9fe6830ac7 cahnges 4 years ago
RedHat Full Drive Notes.md 92be7c8326 Updates patching notes, new customer setup 4 years ago
RedHat Notes.md d311c6b47f many changes 4 years ago
Reposerver Notes.md b36675518e Format Updates 4 years ago
SELinux Notes.md 4f6fe94ae9 some selinux notes 4 years ago
Salt Notes.md 8736ed2430 Format and verbiage updates 4 years ago
Salt Upgrade 2019 -> 3001 Notes.md 8ea9ba042f URL updates 4 years ago
Salt Upgrade 3001.2 -> 3001.6 Notes.md 4c771cde67 patching, salt, splunk 4 years ago
Salt Upgrade 3001.6 -> 3002.6 Notes.md 7555eb5e8d Re-commit due to git merge issue 4 years ago
ScaleFT Notes.md 43a61f3521 Updates patching, phantom, etc notes 4 years ago
Sensu Go Migration Notes.md b36675518e Format Updates 4 years ago
Sensu Notes.md b36675518e Format Updates 4 years ago
Sensu Upgrade 5.21 -> 6.3 Notes.md b36675518e Format Updates 4 years ago
Sophos Notes.md b36675518e Format Updates 4 years ago
Splunk AFS Thaw Request Notes.md c70188cc80 Updates patching notes 4 years ago
Splunk AWS App and Addon Notes.md d21e4de773 Updated yubikey/CA notes 4 years ago
Splunk MSCAS Notes.md 8ea9ba042f URL updates 4 years ago
Splunk Maxmind Notes.md 4fec480175 splunk maxmind 5 years ago
Splunk Migration from Commercial to GovCloud - 1. Prep and Indexer Cluster.md f36b2fdc55 Notes from updating Jira and migrating NGA/AFS 4 years ago
Splunk Migration from Commercial to GovCloud - 2. Search Head.md f36b2fdc55 Notes from updating Jira and migrating NGA/AFS 4 years ago
Splunk Migration from Commercial to GovCloud - 3. Remaining Servers.md ca57248b97 Splunk Migration Updates 4 years ago
Splunk NGA Data Pull Request Notes.md 8ea9ba042f URL updates 4 years ago
Splunk Notes.md 283e05d86f Adds improvements for new customer setup splunk vault 4 years ago
Splunk Process List Whitelisting FedRAMP Notes.md d53fe8445e Major Clean UP 4 years ago
Splunk SAF Offboarding Notes.md 9b61411e06 Removed XDR Prefix 5 years ago
Splunk Upgrade Notes.md 334f0db673 URLs updated - Splunk Upgrade notes 4 years ago
Sudo Replay Notes.md 157e432b13 sudo replay notes 4 years ago
Teleport Notes.md 6707f54895 Updated CA 4 years ago
Tenable Security Center Notes.md 7037904e85 Init tenable, other changes 4 years ago
Terraform Notes.md d9d526d047 Lots o' changes 4 years ago
Terraform Splunk ASG Notes.md 8675129403 More great changes 5 years ago
Terragrunt Notes.md 51d027aedd Removed recommendation for tf plugin cache 4 years ago
ThreatQ Notes.md 52292d7677 Minor Update 4 years ago
VMRay Notes.md d53fe8445e Major Clean UP 4 years ago
Vault Notes.md 8ea9ba042f URL updates 4 years ago
Vault Prod Refresh Notes.md 9b61411e06 Removed XDR Prefix 5 years ago
VictorOps Notes.md d53fe8445e Major Clean UP 4 years ago
VirtualBox Build Notes.md febf393c14 Latest notes. 5 years ago
Yubikey Notes.md ca00367cdb Adds gitignore, yubikey notes, CIS audit 4 years ago
dnsmasq.md febf393c14 Latest notes. 5 years ago
duane-random.md dc3a22bbcf sigh 5 years ago
ePO Syslog Notes.md d53fe8445e Major Clean UP 4 years ago
jira-sucks.md 58be07a107 jira notes 5 years ago
salt_splunk_HEC Notes.md 9b61411e06 Removed XDR Prefix 5 years ago
sftp Notes.md b36675518e Format Updates 4 years ago

README.md

Brads All Encompassing Compendium of the Entirety of XDR Knowledge

BAECEXD (pronounced "bake ext") is a set of notes about how to actually get things done in XDR. Since XDR is a rapidly evolving landscape, some of these notes are likely to be out of date, flawed, or just outright wrong. Use at your own risk.

Rules

  1. All files MUST follow the naming scheme. <Major Topic> <Minor Topic> Notes.md e.g. Salt Upgrade Notes.md . The first letter of each word should be capitalized.

  2. All files MUST follow the proper markdown format. ( work in progress )

    # <filename>
    <Description of notes or project>
         
    ## <Section Title>
    <Today's date>
         
    <arbitrary notes>
         
    ## <Section Title>
    <Today's date>
         
    <arbitrary notes>
    
    # Salt Notes.md
    Salt is the configuration management tool
    
    ## Section 1
    02/28/2020
    
    Salt sucks and we should use puppet.
    
    ## Section 2
    03/15/2020
    
    Salt version 2019.2.3 should always be made public on the internet. 
    
  3. To add a newline that is visible in markdown on the github website, add two newlines to the .md file. DO NOT add <br> or \ to the ends of lines. The primary place to view these files is in a text editor not on github website!

  4. Use three backticks to indicate a section of code or terminal output and single backticks to indicate technical commands or terms.

  5. When referencing other files use a link in the format See <file name> for more details. e.g. See Salt Upgrade Notes.md for more details.

  6. For PRs, push directly to master unless they are major changes.

  7. Be kind and think about the engineer after you.