July 2016 - USHE-assess - lists.utahtech.edu

Question about the keylogger use at USU
by Allen Hill 17 Aug '16

17 Aug '16

Hey Jake or anybody else that may know, One of our DBAs is going through the keylogger data from the USU assessment to make sure they clean up from any of the damage. He’s surprised that there doesn’t appear to be “that much” data in the keylogger files. I wanted to tell him to queue the “office space” soundtrack, but said I’d ask you guys instead. Do you know if the keylogger file is truncated at all, is there a limit to the amount of data it can store and if there could have been more logged than there was on both of the days it was used? In other words, do you think that logs contain the full sessions on the days they were used? Thanks, -Allen

4 4

Security tools
by Matt Lorimer 27 Jul '16

27 Jul '16

At SAINTcon this year, I am responsible for all the villages. We plan to add a labs section with security tools to give people hands-on time with gear they have heard about but never played with (or not played enough with). Does anybody have ideas/suggestions/etc on what tools should be included in this village? So far my list is mostly focused on red team hardware, but I'd take suggestions for anything security related. Feel free to suggest classes of tools, or links to specific products. Matt -- Matt Lorimer IT - Systems Administrations Operations Utah State University 435-797-4242 Matt.Lorimer(a)usu.edu

1 0

UofU Assessment Planning
by Goble, Andrew 21 Jul '16

21 Jul '16

Hey all, For the UofU assessment: I talked to Dan at the CIO meeting yesterday. We are shooting for a fall time frame. For those of you who expect to come on the UofU assessment, whats going on this fall between mid-September and mid-November that won't work? SAINTcon is the week of Oct 11th, so that week is out. I know this is a bit early but we need to get on the calendar at the U and it takes time. Let me know what major conflicts are going on in the fall so we can work around them. Thanks, Andrew

1 0

CIO Retreat
by Goble, Andrew 19 Jul '16

19 Jul '16

Hey all, I have a few minutes with the CIOs this Wednesday, if there are any assessment related issues or thoughts you want me to bring up with them, let me know ASAP. Sorry for those of you who got cross-posted on the USHE-ISO list. Also, for any of you on the USU assessment, stop playing pokemans long enough to send me your USU report materials if you haven't already. ;) Thanks, Andrew

1 0

Pokemans
by Goble, Andrew 15 Jul '16

15 Jul '16

So Matt sent me this cool picture today: https://goo.gl/photos/qFy2XJ7onHFvTssV8 Then I been thinking about things and figured that we could take the the twins and go find the Pokeman[sic] Go pokestops to collect creds on assessments... there are hundreds of people wandering around my campus looking for pokemans. Maybe we could Jake to make a lure for us so the people and pokemans will come to us. http://starecat.com/how-to-kidnap-a-28-year-old-in-2016-rare-pokemon-in side-sprayed-written-on-a-truck-pokemon-go/ Also, if you were on the USU assessment, kindly do the needful and get me your report materials if you haven't already. Thanks, Andrew

3 2

MimiKittenz
by Jon Barclay 08 Jul '16

08 Jul '16

https://github.com/putterpanda/mimikittenz/blob/master/README.md

1 0

Windows Priv Escalation
by Jon Barclay 04 Jul '16

04 Jul '16

Check this one out, read all the way to the bottom. https://blog.ahmednabeel.com/from-zero-to-system-on-full-disk-encrypted-win…

1 0