rezamt

Atlastian SSL Poke

https://support.atlassian.com/atlassian-knowledge-base/kb/unable-to-connect-to-ssl-services-due-to-pkix-path-building-failed-error/

Create Empty Truststore

keytool -genkeypair \
  -alias temp \
  -keystore empty.jks \

rezamt

# Check ./provider-in-cluster.yaml to see how to grant permissions to the Provider
apiVersion: kubernetes.crossplane.io/v1alpha1
kind: ProviderConfig
metadata:
  name: up-provider-kubernetes-config
spec:
  credentials:
    source: InjectedIdentity

rezamt

Softmax

https://dataaspirant.com/difference-between-softmax-function-and-sigmoid-function/

Cross Entropy

https://gombru.github.io/2018/05/23/cross_entropy_loss/

rezamt

---
applyTo: "**/{prod*,stg*,dev*}.yaml"
---

# Command: Check Prmissions

Check the Current File's Entra ID Permissions and compae them with `Reference Permissions Table` below in this file.

# Permissions Report

rezamt

$username = "DOMAIN\ServiceAccount"
$password = "YourPassword"
$securePassword = ConvertTo-SecureString $password -AsPlainText -Force
$credential = New-Object System.Management.Automation.PSCredential($username, $securePassword)

# Now use the credential
Start-Process powershell.exe -Credential $credential -ArgumentList "-File C:\path\to\script.ps1"

rezamt

https://dennybritz.com/posts/wildml/implementing-a-neural-network-from-scratch/ https://dennybritz.com/posts/wildml/understanding-convolutional-neural-networks-for-nlp/

rezamt

Federated sign-in risk scenarios

1. Sign-in risk redirected to external identity

SigninLogs
| where RiskLevelDuringSignIn in ("high", "medium") and ResultType == 50074
| where RiskState !in ("dismissed", "remediated")
| where AuthenticationRequirementPolicies has "riskBasedPolicy"
| where Status has "Redirected to external provider for MFA"
| distinct UserPrincipalName=tolower(UserPrincipalName)

rezamt

let data = SigninLogs
    | where AppDisplayName in ('*') or '*' in ('*')
    | where UserDisplayName in ('*') or '*' in ('*')
    | extend errorCode = Status.errorCode
    | extend SigninStatus = case(errorCode == 0, "Success", errorCode == 50058, "Pending action (Interrupts)", errorCode == 50140, "Pending action (Interrupts)", errorCode == 51006, "Pending action (Interrupts)", errorCode == 50059, "Pending action (Interrupts)", errorCode == 65001, "Pending action (Interrupts)", errorCode == 52004, "Pending action (Interrupts)", errorCode == 50055, "Pending action (Interrupts)", errorCode == 50144, "Pending action (Interrupts)", errorCode == 50072, "Pending action (Interrupts)", errorCode == 50074, "Pending action (Interrupts)", errorCode == 16000, "Pending action (Interrupts)", errorCode == 16001, "Pending action (Interrupts)", errorCode == 16003, "Pending action (Interrupts)", errorCode == 50127, "Pending action (Interrupts)", errorCode == 50125, "Pending action (Interrupts)", errorCode == 50129, "Pending a

rezamt

| spath path=properties.status.errorCode output=errorCode 
| spath path=properties.status.failureReason output=failureReason 
| spath path=properties.userPrincipalName output=userPrincipalName 
| eval errorCode=tonumber(errorCode) 
| stats latest(properties.createdDateTime) as properties.createdDateTime, 
        latest(time) as time, 
        latest(errorCode) as last_errorCode, 
 values(failureReason) as all_failureReasons, 

rezamt

AADSTS Error Codes Categorized

User Account & Identity Issues

• AADSTS16000: User account doesn't exist in tenant and can't access the application. [cite: 1]
• AADSTS16003: User hasn't been explicitly added to the tenant. [cite: 9]
• AADSTS50014: User account doesn’t exist in the directory (Guest user in pending state). [cite: 59]
• AADSTS50015: User requires legal age group consent. [cite: 62]
• AADSTS50020: User account from identity provider does not exist in tenant and cannot access the application. [cite: 66]
• AADSTS50034: User account not found; account must be added to the directory. [cite: 79]
• AADSTS50053: Account is locked (too many incorrect sign-in attempts) or sign-in blocked from malicious IP. [cite: 86, 87]