Security Archives

macOS secure token, bootstrap token: FileVault encryption

February 5, 2022Apple, macOSFileVault, Full Disk Encryption, Security

Apple Platform Deployment Guidance: Using secure token, bootstrap token, and volume ownership in deployments To view the current list of volume owners on a Mac computer with Apple silicon, you…

Apple macOS 12 Security Technical Implementation Guide (STIG)

February 5, 2022Apple, macOSmacOS 12, Security, STIG

The Apple macOS 12 Security Technical Implementation Guide (STIG) provides security policy and configuration requirements for the use of Apple macOS 12 in the Department of Defense (DoD). Guidance in…

Local Administrator Password Solution for Mac (LAPSforMac) for Jamf

January 21, 2022Apple, macOSJamf Pro, Security

Local Administrator Password Solution for Mac on jamf | PRO Thanks to the University of Nebraska – Information Technology Services. I am testing their LAPSforMac solution. The Projects developed by…

Check Nessus Agent Status

January 12, 2022Apple, macOSJamf Extension Attribute, Security

/Library/NessusAgent/run/sbin/nessuscli agent status https://docs.tenable.com/nessus/Content/NessusCLIAgent.htm Jamf Extension Attribute: This reports the Agents Active status https://gist.github.com/patent-ed/6e3f26c52227554f919e61adc15433fb Link https://community.tenable.com/s/article/Using-Regex-for-searching-in-Tenable-sc-Formerly-SecurityCenter

Looking for log4j named files

January 11, 2022Apple, macOSSecurity, Terminal

find / -iname '*log4j*.jar' 2>/dev/null | tee ~/log4j-instances.txt

The macOS Security Compliance Project : macOS Security Compliance tool(s)

December 31, 2021Apple, macOS Security Compliance Project (mSCP)NIST, Security

The macOS Security Compliance Project (mSCP) provides a programmatic approach to generating security guidance. The project uses a set of tested and validated controls that map(s) these controls against any security guide supported by the project.