Yeah, He apparently is a linux guy who isn't well versed in windows. Kept looking for logs not understanding windows .evt and registry subsystems etc. But understandable coming from linux where everything is a file.
There was one key take away however, the EMS system absolutely relies upon network connectivity from sccm provisioning to database access residing on a remote file share.
I had hoped they would run a replay attack live with the packet captures, showing the exploit flipping votes, but maybe that still is to come.
He may be more of a Linux guy but most people I know who work in IT are familiar with many different systems.
I have worked with DOS, Windows, Unix, Linux because they are common OS's.
I wouldn't consider myself an expert with any of them but have a decent enough understanding of them.
Yeah, He apparently is a linux guy who isn't well versed in windows. Kept looking for logs not understanding windows .evt and registry subsystems etc. But understandable coming from linux where everything is a file.
There was one key take away however, the EMS system absolutely relies upon network connectivity from sccm provisioning to database access residing on a remote file share.
I had hoped they would run a replay attack live with the packet captures, showing the exploit flipping votes, but maybe that still is to come.
They did make him appear weak ... would be very cunning if he was actually strong.
... according to some old General from either China or Japan...
He may be more of a Linux guy but most people I know who work in IT are familiar with many different systems. I have worked with DOS, Windows, Unix, Linux because they are common OS's. I wouldn't consider myself an expert with any of them but have a decent enough understanding of them.