Concepts Archives

Common Platform Enumeration (CPE)

May 15, 2022SecurityAudit, Configuration Management, CPE, NIST, Security

Common Platform Enumeration (CPE) is a structured naming scheme for information technology (IT) systems, software, and packages. Based upon the generic syntax for Uniform Resource Identifiers (URI), CPE includes a…

Common Vulnerabilities and Exposures (CVE)

May 15, 2022Securitycurl, CVE, Security, Terminal

json feed of all apple related things. https://services.nvd.nist.gov/rest/json/cves/1.0?cpeMatchString=cpe:2.3:*:apple curl -s "https://services.nvd.nist.gov/rest/json/cves/1.0?cpeMatchString=cpe:2.3:*:apple" curl -s "https://services.nvd.nist.gov/rest/json/cves/1.0?cpeMatchString=cpe:2.3:*:apple:macOS:catalina" https://csrc.nist.gov/CSRC/media/Projects/National-Vulnerability-Database/documents/web%20service%20documentation/Automation%20Support%20for%20CVE%20Retrieval.pdf this is the documentation. of how to use their CVE feed hope this link works…

List .app applications and macOS Components

May 10, 2022CodeCommands, Terminal

List ".app" Applications ls /Applications/ | awk -F '.app' '{ print $1}' - ls / | awk -F '.app' '{ print $1}' >> ~/Desktop/ListOfAllAPPs.txt Use SystemProfiler Find Identified Developers system_profiler…

Change Management

May 8, 2022SecurityChange Management, CRQ, ITIL

Change Management seeks to minimize the risk associated with Changes, where ITIL defines a Change as "the addition, modification of removal of anything that could have an effect on IT…

Patch Lister Script

April 9, 2022Codeautomation, Bash Scripts, Jamf Pro, Microsoft, Microsoft Office, Patching, Security, Terminal

Link: https://github.com/patent-ed/SoftwarePatchList/blob/a24425a98c0fa2be11f1b2d955db8cf5005c5371/software_updates7.sh

Telnet Connection Testing with curl

April 8, 2022Networkingconnectivity, curl, networking, telnet, Troubleshooting, uptime

Thanks (again) to Rich Trouton for showing us a way of testing connectivity and uptime You can use curl to create a telnet connection using a command similar to the…

Log4j

April 4, 2022Security

Log4j lsof - list open files for log4j lsof | grep log4j https://github.com/isaacatmann/log4j-search/blob/main/log4j-search.sh https://community.jamf.com/t5/jamf-pro/log4j-vulnerability/m-p/254027 https://medium.com/@anchorbuoy_sftw/log4shell-log4j-zero-day-exploit-and-filemaker-server-e20ebe806e8a

Concepts