The 'I work in I.T' thread

[.Joe]

Oops . Surprised if the sensor generated an alert for its own traffic though, or is this another tool the soc is using to monitor that sort of activity?

It's configured to be pretty panicky, but that's the soc's problem, and 90% of the alerts they send through seem like they're making it look like they're actively hunting on there
It was on the profile server as someone was logging in. 800 files (mostly teams) and the ip call outs to the crowd strike cloud server.

at this point the only alerts we pay attention to are the phone escalations.
it's a great money maker though

 

[cs_rich]

'Cyber correspondent'

 

[Clart]

causing a lot of panic this one and rightly so.

 

[cs_rich]

causing a lot of panic this one and rightly so.

I really enjoyed wasting an evening on Claude trying to understand how to fix a problem that Claude was probably responsible for uncovering.

I feel like Claude's helping me manage much more complex tasks than I've ever handled before, but I'm now realising that those requests are only that complex because someone else is using Claude to design the f**king brief in the first place.

Meat puppet.

 

[charltjr]

Honestly, I’m finding Claude incredibly useful. It takes all the drudge out of issue diagnosis and even when it’s wrong it’s usually close enough that I can get to where I need to be.

It does mean that I reckon we could fire half the team, give the other half Claude licenses and get through the same amount of work.

Really must get my HGV license.

 

[Donny_Dog]

View attachment 1803986

'Cyber correspondent'

See my earlier rant, proving my rant

PHP, is just short for Philip
He caused it

 

[Sidnancy]

Hope its okay to ask in here.....I believe im in the right place.

Ill start by saying this: My knowledge of IT is basic at best. Im not really 'in' that world anymore, far more when I was younger.

I need to figure out a better setup at work. We have 7 desktops at work, all basically set up like independent machines. All run Windows, of various ages, and are all managed as such. In truth, its a bit of a nightmare.

I need to find a better solution really. Something thats simple enough to manage, ideally that I can do myself. Every IT company I approach to do this want to charge a fortune for the hardware and then a monthly on top. Its just not really doable for us right now.

I had a central server style setup in my head, but maybe thats out of date now as my knowledge is pretty ancient now!

Any advice would be appreciated!

 

[andybond]

Hope its okay to ask in here.....I believe im in the right place.

Ill start by saying this: My knowledge of IT is basic at best. Im not really 'in' that world anymore, far more when I was younger.

I need to figure out a better setup at work. We have 7 desktops at work, all basically set up like independent machines. All run Windows, of various ages, and are all managed as such. In truth, its a bit of a nightmare.

I need to find a better solution really. Something thats simple enough to manage, ideally that I can do myself. Every IT company I approach to do this want to charge a fortune for the hardware and then a monthly on top. Its just not really doable for us right now.

I had a central server style setup in my head, but maybe thats out of date now as my knowledge is pretty ancient now!

Any advice would be appreciated!

I think before offering suggestions we need to understand your requirements more. For example if you just want to do a bit of filesharing then a cloud based solution might be better in terms of cost and efficiency.

 

[Sidnancy]

I think before offering suggestions we need to understand your requirements more. For example if you just want to do a bit of filesharing then a cloud based solution might be better in terms of cost and efficiency.

Thanks Andy. Im a proper luddite, if you couldnt tell

Filesharing isnt a massive requirement. We have a 'mycloud' that sits quietly as a shared drive so the guys can shove sharing files into that if needed.

Im really just looking to see if theres a more secure/easier way to have 7 computers in this place - maybe it is simplest as it is with all of them individual machines?

 

[Donny_Dog]

Thanks Andy. Im a proper luddite, if you couldnt tell

Filesharing isnt a massive requirement. We have a 'mycloud' that sits quietly as a shared drive so the guys can shove sharing files into that if needed.

Im really just looking to see if theres a more secure/easier way to have 7 computers in this place - maybe it is simplest as it is with all of them individual machines?

Need to know a fair bit more dude, to really scale what you are looking for.... how you work, what you work on, what is important, budget, what applications do you use - any compatibility issues and so on. Priorities being....? e.g Collaboration, speed, resilience, backups, data sharing, cyber posture required, who supports it all, current equipment you have (any networking), plans for expansion, remote access needs....

Easy just to say - without knowing anything....
- use the google suite as your office package and central fileshare/drive. Central router/firewall in some mini network (can be wifi based) if you don't have this already - use the local mycloud as a backup for your central stuff. Ensure unique identities, enforce MFA and password rotation, keep the site FW up-to-date and lock down the rule base, setup alerting etc.
The endpoints just need to be managed. Have Defender or something XDR like sophos home on each - ensure they're checked for updates (for the AV and Windows + any local apps) and on a supportable OS for security updates on monthly cycles You don't need a domain to federate identities unless this is going to be the driver to your systems and is a requirement, such as SSO or you all machine share/hot-desk or whatever.
Failing that - reaching to M365 suite - if you need true MS based integrated and unified working areas and tools. but obvs £

Or... I can let you Windows 2000 server. You can fire up your own domain, DNS, print server and mapped drives.


that last bit is a joke btw
I have NT4.0