skout23

# Futures
from __future__ import print_function

# Built-in/Generic Imports
import datetime
import pickle
import os.path
import re

# Libs

skout23

```
filter eventName="ConsoleLogin"
| stats count(*) as eventCount by userIdentity.userName, sourceIPAddress
| sort eventCount desc

filter not sourceIPAddress =~ /^(?i)123.123.123.123/ and userIdentity.userName =~/^(?i)\w/
| stats count(*) as eventCount by eventName, userIdentity.userName, sourceIPAddress
| sort eventCount desc

filter eventName="ConsoleLogin"

skout23

#!/bin/bash
aws_profile=("default" "otherprofile");
region="us-east-1"

# setting the expected date() format BSD style (macos)
start_time="$(date -v-2d '+%Y-%m-%d')"
end_time="$(date '+%Y-%m-%d')"

#loop AWS profiles array incase we provide more than 1 profile
for profile in "${aws_profile[@]}"; do

skout23

/*
Compile with:
afl-gcc -fno-stack-protector -z execstack buffer_overflow.c -o buffer_overflow
gcc -fno-stack-protector -z execstack buffer_overflow.c -o buffer_overflow

*/

#include <stdio.h>
#include <string.h>

skout23

# should pick up pyenv as dep
brew install pyenv-virtualenv 

# add to your .bash_profile or other .profile
eval "$(pyenv init -)"
eval "$(pyenv virtualenv-init -)"

# List available pythons versions
$ pyenv install -l 

skout23

aptitude install suricata

...

sudo modprobe nfnetlink_queue

skout23

ProductID					Database
106							GeoIP.dat
111							GeoIPOrg.dat
112/115						GeoIPRegion.dat
117							GeoIPASNum.dat
119							GeoIPUserType.dat
121/122						GeoIPISP.dat
132/133						GeoIPCity.dat
135							GeoIPAreaCode.dat
137							GeoIPDMACode.dat

skout23

#!/usr/bin/env ruby

#
#  quick poc to print out the mario half pyramid
#
#

def pymid(base)
  1.upto(base) do |row|
   str = "#" * row

skout23

# script to watch production code commit log and send a diff of if any changes for PCI regulation needs

require 'rss'
require 'openssl'

DEBUG = false

# set the local store for marshalled data

$prod_code_last_reported_date = '/home/someuser/bin/watch_rss/data/last_reported.yml'

skout23

#!/usr/bin/env ruby

require 'time'

$output = File.open("tstamp.csv",'w')
$input = File.open("dork.in",'r')

def gimmetime(str)
  d1 = Time.parse(str)
  rm1 = Random.new