Chris Grams’ Post

CSCEC ME successfully asserts full control over its content environment by transitioning to Egnyte. This move from paper and local servers has empowered the engineering and construction firm to enhance collaboration and bolster data security. #CSCECME #ContentControl #DataSecurity

Exciting news for anyone who has learned (the hard way) about the limit within Entra ID cross-tenant settings! There is/was a "25k charachter limit" which was sonmewhat cryptic documdented under the block/allow list feature. But it was actually applicable for the entire cross-tenant configuration policy. Hitting the policy limit resulted in a misleading generic error and prevented adding additional organizations. But....this is all going away. The limit will be remomved from all tenants the coming weeks (Q3 CY2023)!! Check the announcement for details and more cross-tenant access improvements: https://lnkd.in/ex7FMpga #AzureAD #EntraID #CrossTenantAccess

An organization typically manages thousands of websites, team chats, servers, and apps, with data flowing in what appears to be an uncontrollable manner. But the fundamental questions arise: * Who has access to what data? * Are you certain that those with access are allowed to share the data? * Has someone left the company and left "orphaned" data behind? * Do administrators receive just-in-time access to all services? * Many companies have teams in different countries subject to varying data laws. How does this affect team workflow? * How can this be addressed without breaking the budget? The implementation of effective Identity and Access Management systems poses unique challenges for both large and small companies. Large companies often struggle due to their size and the slow pace of organizational change, small companies face challenges due to high costs and a lack of clear direction. Knowing a tool and selecting the right one is just the beginning of the journey in Identity and Access Management. There may be many tools and cloud providers, but understanding which direction to take is another story. It involves having a vision of what to accomplish, and given the cyber risk and economic situation in many areas, time is of the essence. Considerations include: * Job functions, business roles. * Deviation reports and access reviews can reveal surprising details that are often overlooked. * Segregation of duties, for instance, between compliance offices and IT, each with different job functions. * Integrations, typical for a company ranging from one to several cloud providers, plus systems on-premises. * Legacy applications that are hard to maintain and secure. Running on Linux, Windows, Cloud Native or any other platform, all need to be secured. Don't forget to subscribe; we publish interesting articles.

🔐 Sharing my NetSec-Automation repository, collection of advanced scripts and tools tailored for network security, automation, and seamless integration with diverse network devices and security platforms. 🌐 In today's ever-evolving landscape of network security, automation plays a pivotal role. These meticulously crafted scripts are designed to bolster efficiency, minimize errors, and fortify overall network security. 🚀 Featuring projects like: Network Monitoring-Alerting System Network Traffic Analysis-Visualization Network Device Configuration Automation Security Automation with Ansible Each project is self-contained with detailed documentation, ensuring adaptability across various network environments and security frameworks. 🛠️ Getting Started: Basic knowledge of network security and automation concepts, along with Python proficiency, is required. Python serves as the foundation for most scripts within the repository. 🤝 Open to collaboration! If you have scripts or tools aligning with these objectives, your contributions via pull requests are highly encouraged. License: This repository operates under the MIT license, promoting accessibility and collaboration. Disclaimer: Emphasizing that these resources are meant for educational purposes and advise users to conduct proper testing and seek organizational approval before implementation in production environments. 🔗 Link to repository: https://lnkd.in/ggCNSAmy Seeking Opportunities: Eager to contribute my expertise in network security and automation. Explore this repository for an in-depth view of my capabilities and let's connect! Let's strengthen network security through automation! Feel free to share or connect for further discussions. #NetworkSecurity #Automation #GitHub #CyberSecurity

IT Security Tools: you should always learn the manual way before using tools. I was exploring more about a C2 red teaming Framework and realized that It really makes the life of red teamers easier. I used to bypass UAC manually after gaining access to a machine, but with a C2 framework, a simple command like "elevate uac-schtasks tcp-local" and UAC is bypassed. BUT, all the time spent learning and doing stuff manually is not wasted. The tools are there to make your life easier but remember, you still HAVE to understand what's going on under the hood. When you understand the behind the scenes of the tool you use, you have more options. Meaning, if it shows an unexpected behaviour or maybe the tool is too noisy (for red teaming engagement), you can always switch to some other alternatives. You use tools because there is no need to reinvent the wheel. Just make sure to know how the wheel operates.

Reaper, which is designed to enhance information security by providing a modern, lightweight, and efficient alternative to Burp Suite/ZAP. With a focus on automation and collaboration, Reaper aims to streamline workflows and enable universally distributable tasks. Among its features, Reaper allows users to intercept and modify HTTP requests and responses, making it easier to identify potential vulnerabilities. Additionally, it offers the ability to save and categorize HTTP requests/responses for future examination or reuse. This feature is particularly valuable for conducting comprehensive security audits and penetration testing. One of Reaper's standout capabilities is its capacity to manage multiple projects and project-specific settings using workspaces. This functionality enables users to maintain organization and efficiency when working on different tasks simultaneously. Reaper is still a work in progress, but it already boasts a wide range of capabilities. The team behind the tool is continuously working to enhance its functionality and add new features. By open-sourcing Reaper, they aim to foster collaboration within the information security community and encourage contributions that can lead to further improvements. https://lnkd.in/dd3Zsfje #informationsecurity #automation #Reaper #BurpSuite #ZAP #collaboration #opensource #proxy #workflowautomation 

Zimbra is an example of why I call for NIST's definition of critical software to be expanded to include what I call 'Systemically Critical Software' (see, eg, my 2023 cybercon preso). Including stuff vital to economic functions. Like all popular workplace collaboration software. https://lnkd.in/gcx2JSgE

https://lnkd.in/gze2mybQ Atomic Red Team is an open-source project designed to help organizations test and validate their security defenses by simulating various adversary techniques and tactics. It provides a framework for creating and executing small, discrete test cases called "atomic tests" that mimic real-world attacker behaviors. Here are some key aspects of Atomic Red Team: Atomic Tests: Atomic Red Team consists of a collection of small, focused, and modular test cases that represent specific adversary techniques. Each test is designed to be executed independently and can be used to evaluate the effectiveness of specific security controls. Mapping to MITRE ATT&CK: Atomic Red Team maps its atomic tests to the MITRE ATT&CK framework, which is a widely used knowledge base of adversary tactics, techniques, and procedures (TTPs). This mapping helps organizations align their testing with real-world threat scenarios. Customization: Users can customize and create their own atomic tests to suit their specific security testing needs. This allows organizations to tailor their testing to their unique environments and threat profiles. Automation: Atomic Red Team supports automation through various scripting and execution tools, making it easier to run and manage tests at scale. Community Contributions: It's an open-source project, so the security community can contribute to the project by adding new tests, improving existing ones, or enhancing the framework's capabilities. By using Atomic Red Team, organizations can gain insights into the effectiveness of their security controls, identify potential weaknesses, and improve their overall security posture. It's a valuable tool for red teams, blue teams, and security professionals who want to conduct realistic security testing and validation.

🚀 Important Update: Navigating Proofpoint Secure Share's End-of-Life calls for a robust, secure alternative. Welcome to eShare - the next level in secure communication. ✨ Why eShare? - Beyond a mere replacement, it's an innovative upgrade - Enhanced security and seamless integration - A user-friendly experience 👉 Explore how eShare revolutionizes email and file sharing in our latest blog post. Embrace a stronger solution today! Read more in our blog post: https://lnkd.in/epc4DTGm #Collaboration #filesharing #secureemail #proofpoint #proofpointsecureshare #securesharing

This post took longer than I thought originally... But as promised, here is the fifth part of network troubleshooting and tools! This time we are exploring some of the tools that helped me while troubleshooting Application layer (layer 7) issues, I hope some of these may be helpful in your IT and Networking Journeys and as always enjoy the read :) Sneak peek: We will explore CURL, OpenSSL, Dev-tools, and a mysterious guess tool. https://lnkd.in/guVf66Pq