Thursday, October 5, 2023
Cloud Security: Acronym Key and Glossary Terms
CIEM Cloud infrastructure entitlement management
CIPS Cloud infrastructure and platform services
CSPM Cloud security posture management
CWPP Cloud workload protection platform
GDPR General Data Protection Regulation
IaaS Infrastructure as a service
IAM Identity and access management
IGA Identity governance and administration
JIT Just in time
ML Machine learning
PaaS Platform as a service
PAM Privileged access management
PCI Payment Card Industry
RBAC Role-based access control
SOD Segregation of duties
SOX Sarbanes-Oxley Act
SSPM SaaS security posture management
Wednesday, August 16, 2023
What is the difference between Level 1 and Level 2 CIS benchmarks?
The Level 1 profile is considered a base recommendation that can be implemented fairly promptly and is designed to not have an extensive performance impact. The intent of the Level 1 profile benchmark is to lower the attack surface of your organization while keeping machines usable and not hindering business functionality.
The Level 2 profile is considered to be “defense in depth” and is intended for environments where security is paramount. The recommendations associated with the Level 2 profile can have an adverse effect on your organization if not implemented appropriately or without due care.
Tenable Security Center: What do BL and NG mean that?
BL is for BitLocker audit
NG is for Microsoft Next Generation Windows Security audit
For example:
CIS Level 1 (L1) + BitLocker (BL)
CIS Level 1 (L1) + BitLocker (BL) + Next Generation Windows Security (NG)
Reference:
https://www.cisecurity.org/cis-benchmarks/cis-benchmarks-faq
Wednesday, June 7, 2023
ut8mb3 ve utf8mb4 arasındaki fark nedir?
utf8mb3: UTF-8 Multibyte 3, 3 baytlık bir karakter kodlamasıdır. Bu karakter seti, UTF-8'in eski bir sürümüdür ve maksimum 3 baytlık karakterleri destekler. Bu, Unicode karakterlerinin birçoğunu kapsar, ancak bazı nadir karakterleri veya emoji gibi yeni eklenen karakterleri desteklemez.
utf8mb4: UTF-8 Multibyte 4, 4 baytlık bir karakter kodlamasıdır. Bu karakter seti, UTF-8'in güncel bir sürümüdür ve Unicode karakter setinin tamamını destekler. Bu nedenle, daha geniş bir karakter yelpazesini kapsar ve özellikle emoji gibi daha yeni veya nadir kullanılan karakterlerin depolanması için gereklidir.Pratik olarak, utf8mb4 karakter seti, daha geniş bir karakter yelpazesini desteklediği için genellikle tercih edilir. Özellikle web ve uygulama geliştirme gibi alanlarda, kullanıcıların emoji ve farklı dil ve alfabedeki karakterleri girebilmesi önemli olabilir
Friday, March 17, 2023
Create shorten urls for listing vulnerabilities with a specific query on Tenable Security Center
Create shorten urls for listing vulnerabilities with a specific query on Tenable Security Center
Example:
https://<tenable-sc-address>/#loadQuery/10443