This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
<group name="gcp,google_workspace,"> | |
<rule id="600500" level="3"> | |
<if_sid>65042</if_sid> | |
<field name="gcp.protoPayload.methodName">^google.apps.cloudidentity.groups.v1.MembershipsService.UpdateMembership$</field> | |
<field name="gcp.protoPayload.metadata.membershipDelta.roleDeltas">BLOCKED</field> | |
<field name="gcp.protoPayload.metadata.membershipDelta.roleDeltas">ADD</field> | |
<description>$(data.gcp.protoPayload.metadata.membershipDelta.member) blocked from $(gcp.protoPayload.metadata.group) by $(gcp.protoPayload.authenticationInfo.principalEmail)</description> | |
</rule> | |
<rule id="600501" level="3"> |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
# Not really polished sh scripts. Following are two separate commands I use to capture, then | |
# transcode screen captures. | |
# Capture. Notice 640x480 for window size (you'll probably want to change) and the +0,264 for where to grab. | |
# As you can see, I save into my $HOME/screencap dir. These are essentially uncompressed audio/video. | |
#/bin/sh | |
ffmpeg -f alsa -ac 2 -i pulse -f x11grab -r 30 -s 640x480 -i :0.0+0,264 -acodec pcm_s16le -vcodec libx264 -vpre lossless_ultrafast -threads 0 $HOME/screencap/cap.mkv |