MarkUlmer

# When installing Linux Mint on a MacBook Pro these command
# will help with proper configuration

sudo apt install bcmwl-kernel-source mbpfan xorg-driver-synaptics

MarkUlmer

deviceEventClassId IN ["Microsoft-Windows-Security-Auditing:4737","Microsoft-Windows-Security-Auditing:4732","Microsoft-Windows-Security-Auditing:4757","Microsoft-Windows-Security-Auditing:4733","Microsoft-Windows-Security-Auditing:4729","Microsoft-Windows-Security-Auditing:4756"] and NOT (destinationUserName ENDSWITH "$") and NOT (sourceUserName ENDSWITH "$")

MarkUlmer

deviceEventClassId IN ["Microsoft-Windows-Security-Auditing:4758","Microsoft-Windows-Security-Auditing:4754","Microsoft-Windows-Security-Auditing:755","Microsoft-Windows-Security-Auditing:4735","Microsoft-Windows-Security-Auditing:4734","Microsoft-Windows-Security-Auditing:4731","Microsoft-Windows-Security-Auditing:4730","Microsoft-Windows-Security-Auditing:4727","Microsoft-Windows-Security-Auditing:4737"] and NOT (destinationUserName ENDSWITH "$") and NOT (sourceUserName ENDSWITH "$")

MarkUlmer

deviceEventClassId IN ["Microsoft-Windows-Security-Auditing:4740","Microsoft-Windows-Security-Auditing:4722","Microsoft-Windows-Security-Auditing:4738","Microsoft-Windows-Security-Auditing:4781","Microsoft-Windows-Security-Auditing:4720","Microsoft-Windows-Security-Auditing:4725","Microsoft-Windows-Security-Auditing:4724","Microsoft-Windows-Security-Auditing:4723","Microsoft-Windows-Security-Auditing:4767","Microsoft-Windows-Security-Auditing:6279"] and NOT (destinationUserName ENDSWITH "$") and NOT (sourceUserName ENDSWITH "$")

MarkUlmer

# Filename: 91-arcsight.conf
# Filepath: /etc/security/limits.d/

## Required for ArcSight applications
    * soft nproc 10240
    * hard nproc 10240
    * soft nofile 65536
    * hard nofile 65536