Notices by Rob Fuller (mubix@infosec.exchange)

How do you think the old adage: “Never quarrel with a man who buys ink by the barrel” [Irving Leibowitz - 1964] works in the modern age where literally everyone “buys ink by the barrel”?

You know that thing where you walk away from a problem and you figure it out because all you really needed was a short break and change of perspective for everything to click into place, ya that, I think my allotment of those is currently used up. Anyone know where to get more?

I really wish Active Directory was a bit more PubSub. I would love if there was a way to subscribe to an a schema attribute and say, “when this changes for any object that has this attribute, let me know”. But AD’s decentralized model makes that very hard without running a script on every domain controller, running a server to monitor LDAP changes or the least timely, logging everything to a logging platform like Splunk and setting alerts up to tell me hours after it happened… Any other options out there? (And yes I know you can push logs faster but it’s not real-time or even close when you have hundreds of domain controllers).