timconradinc

# shell script for setting up environment
# assuming you're using virtualenv and pip, of course ;-)
# this is safe to run multiple times if you update requirements.txt
# (though if you want the env rebuilt, you'll need to remove it)

BASE=$(dirname $0)
ENV=$BASE/.python

test ! -d $ENV && virtualenv --distribute --no-site-packages $ENV
# celery wants python-dateutil 1.5 and not 2.0

timconradinc

#0000| tag ) description
#0000| p ) Passive Word List
#0000| C ) Custom test word list, don't use this unless you know what you're doing.
#0000| T ) Showing vs Telling Words
#0000| n ) Words that can be safely be omitted
~0000| 
~0001| 
~0002|   It was well past the witching hour and a friend suggested we head to
#0002|      ^^^^                            ^^^^                            
#0002|      pT                               C                               

timconradinc

#!/bin/bash


# source $(pwd)/config.sh
GRUB_CONFIG="/etc/default/grub"
GRUB_TEMPLATE="/data/company/company-grub/src/grub-default"
GRUB_BACKUP="/data/company/company-grub/bak/grub-default-config"

# the grub default should always exist, but just in case.
if [ -f ${GRUB_CONFIG} ] ; then

timconradinc

PKG_NAME=$(basename $(pwd))
TMP_PATH=/tmp/$PKG_NAME-$RANDOM
VERSION=1.0
# increment ITERATION for additional builds that may be needed.
# This is helpful for minor changes, like adding new account id's or something
# along thos elines
ITERATION=1

DESCRIPTION="This is a basic description of this package"

timconradinc

function bob {
	Param([string]$a, [string]$b)
	Write-Host "a: $a b: $b"
}

bob "one" "two"

timconradinc

HotKeySet("{ESC}", "Terminate")
While 1
   MouseMove(Random(211,378),Random(464,592))
   
   Local $max = Random(1,50)
   Local $i = 1
   While $i < $max
    MouseDown("left")
	  MouseUp("left")
	  $i = $i + 1

timconradinc

  mutate {
    type => "PaloAltoTestTrafficLog"
    # for dns queries
    replace => [ "SourceAddressFQDN", "%{SourceAddress}" ]
    replace => [ "DestinationAddressFQDN", "%{DestinationAddress}" ]
  }

  dns {
    type => "PaloAltoTestTrafficLog"
    reverse => [ "SourceAddressFQDN","DestinationAddressFQDN" ]

timconradinc

input {
    #
    # this configuration is for both the info- and notice- files that
    # proofpoint puts out.
    #
    # They need to have both the type of 'proofpoint_raw_type' and a tag
    # of 'proofpoint_raw' for this all to work properly.
    #
    #file {
    #    type => "proofpoint_raw_type"

timconradinc

May 30 23:59:51 pp-serve02 sendmail[3083]: r4V3xnMc003080: to=<a@example.edu>, delay=00:00:01, xdelay=00:00:00, mailer=esmtp, pri=151450, relay=exch-hubeb1.exchmail.example.edu. [10.1.1.1], dsn=2.0.0, stat=Sent (<2e7250bda7ce4a90a1fbd35e26f57227@2128> [InternalId=41607625] Queued mail for delivery)

May 30 23:59:59 pp-serve03 sendmail[27124]: r4V3xxd8027124: Milter: connect: host=mail.example.org, addr=11.11.11.11, reject=550 5.7.0 Local Policy Violation - Blocked - see https://support.proofpoint.com/dnsbl-lookup.cgi?ip=11.11.11.11

May 30 23:59:45 pp-serve01 sendmail[17669]: r4V3xhGo017465: to=<sh@exmaple.edu>, delay=00:00:01, xdelay=00:00:01, mailer=esmtp, pri=131517, relay=exch-hubab1.exchmail.example.edu. [1.1.1.1], dsn=2.0.0, stat=Sent (<!&!AAAAAAAAAAAYAAAAAAAAAH59QL7H5PFGpbUlvo6UBNjCgAAAEAAAAHiJqcYxittJt5L0Gxv4jpABAAAAAA==@exxample.com> [InternalId=33718689] Queued mail for delivery)

creates 
@fields.(<!&!AAAAAAAAAAAYAAAAAAAAAH59QL7H5PFGpbUlvo6UBNjCgAAAEAAAAHiJqcYxittJt5L0Gxv4jpABAAAAAA=

timconradinc

Failed to index an event, will retry {:exception=>org.elasticsearch.transport.RemoteTransportException: [logstash-es.example.edu][inet[/10.9.1.7:9300]][index],