ACCESS LEVEL: PUBLIC // KNOWLEDGE BASE
A technical field log covering cybersecurity, infrastructure, automation, APIs, and the useful things discovered along the way.
TRANSMISSION LOG
I’ve gotten bored of how many times people have asked me about TE AI (LLM) integrations at this stage, so I put a basic one together here: GitHub - askjarv/fim-mcp: A MCP for Fortra FIM/Tripwire Enterprise during a qu...
OPEN ENTRYFor those of you have been experimenting with AI’s recently it’s likely you’ve come across Model Context Protocol (MCP) (for those who haven’t, it is effectively a clean way to expose operational systems to an LLM as ...
OPEN ENTRYIn traditional infrastructure, the operating system was the security boundary.
OPEN ENTRYContinuing my previous post about cloud storage monitoring, I’m back with the “Azure edition” today. I’ll skip the preamble about why this is important and get straight to the commands this time (but stay tuned about ...
OPEN ENTRYCloud object storage introduces a subtle but critical challenge for File Integrity Monitoring (FIM): there is no “file system” in the traditional sense. But that doesn’t mean you shouldn’t be monitoring it (given it’s...
OPEN ENTRYI’ve not done much with GaussDB/OpenGaussDB, so figured I’d post the process I used to setup some monitoring including the deployment itself.
OPEN ENTRYOne of Tripwire Enterprise’s greatest strengths is the ability to quickly and easily take action in response to changes either automatically or during a review by an administrator… and one of the most common requests ...
OPEN ENTRYOne of the common asks I get as a consultant at the moment is how best to approach monitoring containers with “FIM”… but modern Kubernetes/container platforms (e.g. Red Hat OpenShift) change a lot of the assumptions t...
OPEN ENTRYFile Integrity Monitoring (FIM) and Security Configuration Management (SCM) platforms like the ones I currently work with at Fortra are deceptively simple on the surface: deploy/configure endpoints, define rules/asses...
OPEN ENTRYOne of the most powerful things I do with Tripwire Enterprise is add external sources to TE’s change audit tracking. Whether it’s an API, or a device with an unsupported SSH config, this workflow enables me to capture...
OPEN ENTRY