This article gives an overview and offers a practical tips to detecting some suspicious activities in Microsoft SQL Server, from configuring audit policies to leveraging Elastic for effective monitoring and threat detection. Introduction Microsoft SQL Server is one of the most widely used relational databases in the enterprise landscape, managing critical data and supporting essential…
Read MoreImportant: GeoMap update Type/Severity NetEye Product Security has rated this update as having a High security impact. Topic An update for the package icingaweb2-module-geomap is now available for NetEye 4. Security Fix for NetEye 4.40 CVSSv3.1: 7.3(High) – CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N For a detailed overview of the security issue(s), including the impact, CVSS score, acknowledgments, and other relevant information, please…
Read MoreImportant: Elastic Stack security update (installed with SIEM) Type/Severity NetEye Product Security has rated this update as having a Critical security impact. Topic An update for the package kibana is now available for NetEye 4. Security Fix for NetEye 4.40 CVSSv3.1: 9.9(Critical) – CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H For a detailed overview of the security issue(s), including the impact, CVSS score, acknowledgments,…
Read MoreUse Case During NetEye Cloud updates we typically have to handle 25+ nodes, updating both OS and Firmware and subsequently rebooting all servers, all without causing downtime. We can of course reboot one node a time, but this would be really time-consuming. The main constraints on reboot are PCS nodes and Elastic layers. In particular…
Read MoreWelcome back! Last time we looked at some concrete examples of animations where you can use math to animate large numbers of objects, field-like effects, or complex behavior. Today let’s look at the principal barrier to using an animation you make (if it’s not a filled rectangle and if you want to put it in…
Read MoreFix for icinga2 satellites zone validation Fixed an issue with the icinga2 satellites zone validation that caused the neteye satellite config create to fail if one of the icinga2-zone is a sub-string of the others List of updated packages To solve the issue, the following packages have been updated
Read MoreRemove “Drop non-existing group during Sync” on LDAP user federations Remove flag “Drop non-existing group during Sync” on LDAP user federations List of updated packages To solve the issue, the following packages have been updated: keycloak, keycloak-autosetup, keycloak-configurator, keycloak-python, to versions:
Read More⚠️ Warning: This article is intended for educational and ethical purposes only ⚠️ Red teamers don’t often engage in DDoS campaigns or stress testing against client systems, mainly for two reasons: However, there are cases where clients explicitly request such activities. When that happens, the red team must be thoroughly prepared; both legally, to clearly…
Read MoreImportant: IcingWeb2 Module Analytics security update Type/Severity NetEye Product Security has rated this update as having a Medium security impact. Topic An update for the package icingaweb2-module-analytics is now available for NetEye 4. Security Fix for NetEye 4.40 CVSS: 6.3 (medium): CVSS3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:N For a detailed overview of the security issue(s), including the impact, CVSS score, acknowledgments, and other…
Read MoreImportant: GLPI security update Type/Severity NetEye Product Security has rated this update as having a security impact of High Topic An update for the package glpi is now available for NetEye 4. Security Fix for NetEye 4.40 For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to…
Read MoreFix for after-login redirect in IcingaWeb2 Fixed an issue with the post-login redirect that, in cases of session expiration, would cause navigation to an incorrect page after re-authentication. List of updated packages To solve the issue, the following packages have been updated
Read MoreA customer recently asked me to monitor printer logs. His use case was to check which users were doing the printing, and what they were printing on the company’s printers, including their page numbers. The printers in question had SNMP available, but didn’t provide this particular information. In addition, the printers didn’t have an API…
Read MoreRenewed Elastic Enterprise License We renewed the Elastic Enterprise license, which was originally scheduled to expire on February 28, 2025. The new expiration date is now February 28, 2026. If your NetEye version is older than 4.39 and you wish to utilize the Elastic Enterprise license, you will need to upgrade to at least NetEye…
Read MoreRenewed Elastic Enterprise License We renewed the Elastic Enterprise license, which was originally scheduled to expire on February 28, 2025. The new expiration date is now February 28, 2026. If your NetEye version is older than 4.39 and you wish to utilize the Elastic Enterprise license, you will need to upgrade to at least NetEye…
Read MoreJust like last year, we had the wonderful opportunity to attend FOSDEM, the most important open source conference in Europe. This year was no exception, and among the many exciting talks, one that particularly caught my attention was Alex Stefanini’s presentation on Podman Quadlet. Integrated with Podman since version 4.4, Quadlet has emerged as a…
Read More