Simon Sigré

Solution for: 'ValueError: 'src/cld3.pyx' doesn't match any files'

1

When installing AIL-framework on `Ubuntu 20.04.1 LTS` you may find that Flask wont start (and as such your `127.0.0.1:7000` listener won't come up). Switching to the Flask `screen` you note...

When testing the `s7` using a `S7-1200 PLC Control` commands to issue a `stop` conpot faults with error; ``` ERROR:conpot.protocols.s7comm.s7_server:Exception caught DissectException: proto:s7comm reason:malformed variable header structure, remote: 127.0.0.1. (b152ec52-4957-4027-8b5a-8191c708066c)...

The reference to `--link` should be modified as `--link` is a deprecated feature . ``` $ docker run -ti -d -p 80:80 -e MYSQL_ENV_MYSQL_ROOT_PASSWORD=my-secret-pw --name ipam --link phpipam-mysql:mysql pierrecdn/phpipam ```...

Alternative update for `app_list.csv`

1

For customers that do not have access to pull this data from their FW, a proposed alternative method could to look to pull from a project/repo `Splunk_TA_paloalto_lookups` with a daily...

GlobalProtect - Authentication (Common Information Model v4.1x)

2

Somewhat linked (I suspect) to https://github.com/PaloAltoNetworks/Splunk_TA_paloalto/issues/7. The following needs to be configured to allow Splunk ES to correctly process Global Protect authentication. As taken from https://docs.splunk.com/Documentation/CIM/4.12.0/User/Authentication 1. > The source...

The following values in the default jwhois.conf need to be updated from ``` "\\.au$" = "whois.audns.net.au"; "\\.asn\\.au$" = "whois.ausregistry.net.au"; "\\.com\\.au$" = "whois.ausregistry.net.au"; "\\.edu\\.au$" = "whois.ausregistry.net.au"; "\\.id\\.au$" = "whois.ausregistry.net.au"; "\\.net\\.au$" =...

IoT Security Input 'Interval' Not Used To Influence 'stime' All Data All The Time

1

## Describe the bug The TA Input for PAN IOT has a single option "on" and on every run it pulls in "All Time" for the 3x Entity Types. Obviously...

I've noted that retrieval of reports as PDF is not yet supported via nessus_download_all.py (possible also the API). Comments in code read ``` # PDF not yet supported # python...

v1 REST API Decommissioning

5

How does the following timeline > On April 24, 2018, at 10 pm PST, our v1 REST API is entering a decommissioning period. Starting on that date, you will no...

Request for @crowdstrike to port project

3

This project is to maintain the list of CrowdStrike Falcon IP addressing for use in dynamic objects/lists on firewalls .. currently I manually check documentation on a sporadic basis and...