Previous Next     Page: / Contact Me

Table of Contents: About Me Experiences Key Work Training Certificates Techology Expertise About Me Resume Dynamic and innovative professional with demonstrated success in network and information security engineering, including hardware and software, in the aerospace, financial services, and FinTech industries. Expert at analyzing operations to identify challenges and weaknesses. Skilled at designing and implementing network security services that simultaneously address vulnerabilities, enhance efficiencies, and reduce costs. Dedicated to exceeding goals and expectations.

Previous Next     Page: / Contact Me

Table of Contents: Swagger ForgeRock Nodes Debuging Debug Node Debug Script RestAPI Swagger ForgeRock Swagger ForgeRock Nodes NOTE: Bulding a node out of a JavaScript and importing it into the web-container webapps is apparently faster at rendering than using JS scripts inside of a journey. From what I have been told. I am still pending the ability to time it out and discover the delay between an imported node from a jar vs writting out a JavaScript and referencing it into a journey.

Table of Contents: Swagger ForgeRock Nodes Debuging Debug Node Debug Script RestAPI Swagger ForgeRock Swagger ForgeRock Nodes NOTE: Bulding a node out of a JavaScript and importing it into the web-container webapps is apparently faster at rendering than using JS scripts inside of a journey. From what I have been told. I am still pending the ability to time it out and discover the delay between an imported node from a jar vs writting out a JavaScript and referencing it into a journey.

API Security Checklist download Previous Next     Page: /

Updated: 2022-11-27 Description I have come across many issues where I need async API calls, but not just to run multiple calls, but to also run long running tasks that I just need to check the status of. I have been leveraging NATS to handle message queuing between systems see: Python NATS Github Repo and information on NATS Project . Unfortunately, I’ve run into some issues with how to handle messaging through API calls.

updated: 2023-04-27 Introduction Aqua Security SDK to interact with Workload Protection and CSPM. Aquasec Security SDK GitHub Project = aquasec-api python -m pip install aquasec-apiEarly Testing Pre-Release: pip install -i https://test.pypi.org/simple/ --extra-index-url https://pypi.org/simple aquasec-api==v0.0.1rc1See Python Package Index See Test Python Package Index Aquasec Security CLI Additionally there is a aquasec security cli that can accompany the SDK. Installing it is still under works, but allows for installation and ability to run directly from the CLI.

updated: 2023-04-27 Introduction Aqua Security SDK to interact with Workload Protection and CSPM. Aquasec Security SDK GitHub Project = aquasec-api python -m pip install aquasec-apiEarly Testing Pre-Release: pip install -i https://test.pypi.org/simple/ --extra-index-url https://pypi.org/simple aquasec-api==v0.0.1rc1See Python Package Index See Test Python Package Index Aquasec Security CLI Additionally there is a aquasec security cli that can accompany the SDK. Installing it is still under works, but allows for installation and ability to run directly from the CLI.

Updated: 2022-11-27 Description I have come across many issues where I need async API calls, but not just to run multiple calls, but to also run long running tasks that I just need to check the status of. I have been leveraging NATS to handle message queuing between systems see: Python NATS Github Repo and information on NATS Project . Unfortunately, I’ve run into some issues with how to handle messaging through API calls.

updated: 2023-04-17 Palo Alto API Working with Palo Alto Firewall and the official SDK I found it difficult to get the info I wanted in the format I needed in some casees. So, I begain writting out some code that would handle the work for me. Github project How to Use Install the package which has been tested mostlyon 3.8+ python -m pip install paloaltoapiConfiguration Variables Use environment variables for configurations:

Cloud Considerations updated: 2023-02-24 Table of Contents: Overview Considerations Where do I start? Cloud Native vs Cloud Agnostic Nework Segmentation & Hiearchy Network Segmentation Network Hierarchy Security Firewall Cloud Workload Protection Protect Your Cloud References Overview Going to the cloud can be a difficult journey and has a lot of obsticles around it. Let’s try to break down those obsticles leveraging publications and information readily availble to help you get through your cloud journey.

updated: 2022-09-07 (Under Construction) Introduction Palo Alto announced direct NGFW Cloud integration with AWS as well as AWS announcment back in March of 2022. This is a really new product that integrates AWS Firewall Manager with Palo Alto NGFW. I am still reviewing it, but here are some initial docucmentations around it that I’ve been looking at and evaluting and this is a PDF with a brief overview: Palo Alto Cloud NGFW (file removed due to NDA)

updated: 2022-09-08 (under construction…) Introduction Description: I wanted to review the best practices to inpsect AWS traffic and how this would be architected. I ended up going through a few iterations of different designs and the pros and cons of each. This is a space on some of those designs and online resources I used. I hope this becomes a sort of one stop shop in evaluating different methodoligies that can be leveraged to secure an AWS Cloud solution.

Cloud Considerations updated: 2023-02-24 Table of Contents: Overview Considerations Where do I start? Cloud Native vs Cloud Agnostic Nework Segmentation & Hiearchy Network Segmentation Network Hierarchy Security Firewall Cloud Workload Protection Protect Your Cloud References Overview Going to the cloud can be a difficult journey and has a lot of obsticles around it. Let’s try to break down those obsticles leveraging publications and information readily availble to help you get through your cloud journey.

DNSCrypt Proxy Table of Contents: DNS Crypt Proxy References Crontab Updates DNS Crypt Proxy References DNScrypt-proxy project DNSCrypt + Pi-Hole Crontab Re-populate any block lists and restart service to import the new generated lists. # Re-populate the blacklist add any addtional lists to subscribe to 30 */2 * * * python $HOME/generate-domains-blacklist.py -c /etc/dnscrypt-proxy/domains-blocklist.conf -o /var/cache/dnscrypt-proxy/dnscrypt-blocklist-domains.txt # Reload DNS Crypt to update list 45 */5 * * * systemctl stop dnscrypt-proxy.

Updated: 2022-11-27 Description I have come across many issues where I need async API calls, but not just to run multiple calls, but to also run long running tasks that I just need to check the status of. I have been leveraging NATS to handle message queuing between systems see: Python NATS Github Repo and information on NATS Project . Unfortunately, I’ve run into some issues with how to handle messaging through API calls.

New York City Photos

updated: 2023-02-23 Introduction Working on developing an SDK to leverage our orchestration internaly that will assist with auto security policy and deployment with the Palo Alto Prisma SASE project. Python Package GitHub Project - Prisma-Access-SASE python -m pip install prisma-access-saseSee Python Package Index for README.md docs and usage of package. See Test Python Package Index for current beta/alpha releases.

Cloud Considerations updated: 2023-02-24 Table of Contents: Overview Considerations Where do I start? Cloud Native vs Cloud Agnostic Nework Segmentation & Hiearchy Network Segmentation Network Hierarchy Security Firewall Cloud Workload Protection Protect Your Cloud References Overview Going to the cloud can be a difficult journey and has a lot of obsticles around it. Let’s try to break down those obsticles leveraging publications and information readily availble to help you get through your cloud journey.

updated: 2022-09-07 (Under Construction) Introduction Palo Alto announced direct NGFW Cloud integration with AWS as well as AWS announcment back in March of 2022. This is a really new product that integrates AWS Firewall Manager with Palo Alto NGFW. I am still reviewing it, but here are some initial docucmentations around it that I’ve been looking at and evaluting and this is a PDF with a brief overview: Palo Alto Cloud NGFW (file removed due to NDA)

updated: 2022-09-08 (under construction…) Introduction Description: I wanted to review the best practices to inpsect AWS traffic and how this would be architected. I ended up going through a few iterations of different designs and the pros and cons of each. This is a space on some of those designs and online resources I used. I hope this becomes a sort of one stop shop in evaluating different methodoligies that can be leveraged to secure an AWS Cloud solution.

updated: 2023-04-27 Introduction Aqua Security SDK to interact with Workload Protection and CSPM. Aquasec Security SDK GitHub Project = aquasec-api python -m pip install aquasec-apiEarly Testing Pre-Release: pip install -i https://test.pypi.org/simple/ --extra-index-url https://pypi.org/simple aquasec-api==v0.0.1rc1See Python Package Index See Test Python Package Index Aquasec Security CLI Additionally there is a aquasec security cli that can accompany the SDK. Installing it is still under works, but allows for installation and ability to run directly from the CLI.

updated: 2024-04-17 Description I came across this and find it very useful in a breakdown of all the different ways to reference security standards and where/how they are applied. I find this a lot easier to comprehend and digest than going through the CISSP in some circumstances. I’ll be uploading pieces of it as I find the best way to display the inforomation. Sections Include: Overview Risk Managment Network Security Access Management Application Security Data Security Operational Security BCDR Department of Defense Risk Mangement Framework Cloud Frameworks Container Security Application Container Security Guide See Also: RestAPI NOTE: Working on a cloud section.

DNSCrypt Proxy Table of Contents: DNS Crypt Proxy References Crontab Updates DNS Crypt Proxy References DNScrypt-proxy project DNSCrypt + Pi-Hole Crontab Re-populate any block lists and restart service to import the new generated lists. # Re-populate the blacklist add any addtional lists to subscribe to 30 */2 * * * python $HOME/generate-domains-blacklist.py -c /etc/dnscrypt-proxy/domains-blocklist.conf -o /var/cache/dnscrypt-proxy/dnscrypt-blocklist-domains.txt # Reload DNS Crypt to update list 45 */5 * * * systemctl stop dnscrypt-proxy.

Description: Set up a personal DNS Firewall. Overview: In working with Infoblox DNS BloxOne Deployment I got to thinking why not deploy this on my own network to get an inexpensive way to control DNS requests. Here I ended up deploying a Primary and Secondary DNS Bind9 Server running on physical and virtual Ubuntu Servers. I leverage ioc2rpz to sync community available RPZ’s then we leverage DNSCrypt-Proxy project configuring a local listener that will send Recursive DNS lookups using DNSoverHTTPS.

updated: 2024-04-17 Description I came across this and find it very useful in a breakdown of all the different ways to reference security standards and where/how they are applied. I find this a lot easier to comprehend and digest than going through the CISSP in some circumstances. I’ll be uploading pieces of it as I find the best way to display the inforomation. Sections Include: Overview Risk Managment Network Security Access Management Application Security Data Security Operational Security BCDR Department of Defense Risk Mangement Framework Cloud Frameworks Container Security Application Container Security Guide See Also: RestAPI NOTE: Working on a cloud section.

DNSCrypt Proxy Table of Contents: DNS Crypt Proxy References Crontab Updates DNS Crypt Proxy References DNScrypt-proxy project DNSCrypt + Pi-Hole Crontab Re-populate any block lists and restart service to import the new generated lists. # Re-populate the blacklist add any addtional lists to subscribe to 30 */2 * * * python $HOME/generate-domains-blacklist.py -c /etc/dnscrypt-proxy/domains-blocklist.conf -o /var/cache/dnscrypt-proxy/dnscrypt-blocklist-domains.txt # Reload DNS Crypt to update list 45 */5 * * * systemctl stop dnscrypt-proxy.

Overview What is a Web Application Firewall? A web application firewall (WAF) is a specific form of application firewall that filters, monitors, and blocks HTTP traffic to and from a web service. By inspecting HTTP traffic, it can prevent attacks exploiting a web application’s known vulnerabilities, such as SQL injection, cross-site scripting (XSS), file inclusion, and improper system configuration. 1 Many basic security measures are applied in a WAF are supported by the Open Web Application Security Project (OWASP) owasp.

Description: Set up a personal DNS Firewall. Overview: In working with Infoblox DNS BloxOne Deployment I got to thinking why not deploy this on my own network to get an inexpensive way to control DNS requests. Here I ended up deploying a Primary and Secondary DNS Bind9 Server running on physical and virtual Ubuntu Servers. I leverage ioc2rpz to sync community available RPZ’s then we leverage DNSCrypt-Proxy project configuring a local listener that will send Recursive DNS lookups using DNSoverHTTPS.

updated: 2022-08-28 PaloAlto Shares

Updated: 2022-11-27 Description I have come across many issues where I need async API calls, but not just to run multiple calls, but to also run long running tasks that I just need to check the status of. I have been leveraging NATS to handle message queuing between systems see: Python NATS Github Repo and information on NATS Project . Unfortunately, I’ve run into some issues with how to handle messaging through API calls.

Table of Contents: Swagger ForgeRock Nodes Debuging Debug Node Debug Script RestAPI Swagger ForgeRock Swagger ForgeRock Nodes NOTE: Bulding a node out of a JavaScript and importing it into the web-container webapps is apparently faster at rendering than using JS scripts inside of a journey. From what I have been told. I am still pending the ability to time it out and discover the delay between an imported node from a jar vs writting out a JavaScript and referencing it into a journey.

Georgia Pond Central Park Hudson Yards

Table of Contents: Swagger ForgeRock Nodes Debuging Debug Node Debug Script RestAPI Swagger ForgeRock Swagger ForgeRock Nodes NOTE: Bulding a node out of a JavaScript and importing it into the web-container webapps is apparently faster at rendering than using JS scripts inside of a journey. From what I have been told. I am still pending the ability to time it out and discover the delay between an imported node from a jar vs writting out a JavaScript and referencing it into a journey.

Table of Contents: Swagger ForgeRock Nodes Debuging Debug Node Debug Script RestAPI Swagger ForgeRock Swagger ForgeRock Nodes NOTE: Bulding a node out of a JavaScript and importing it into the web-container webapps is apparently faster at rendering than using JS scripts inside of a journey. From what I have been told. I am still pending the ability to time it out and discover the delay between an imported node from a jar vs writting out a JavaScript and referencing it into a journey.

Description: Set up a personal DNS Firewall. Overview: In working with Infoblox DNS BloxOne Deployment I got to thinking why not deploy this on my own network to get an inexpensive way to control DNS requests. Here I ended up deploying a Primary and Secondary DNS Bind9 Server running on physical and virtual Ubuntu Servers. I leverage ioc2rpz to sync community available RPZ’s then we leverage DNSCrypt-Proxy project configuring a local listener that will send Recursive DNS lookups using DNSoverHTTPS.

updated: 2022-09-08 (under construction…) Introduction Description: I wanted to review the best practices to inpsect AWS traffic and how this would be architected. I ended up going through a few iterations of different designs and the pros and cons of each. This is a space on some of those designs and online resources I used. I hope this becomes a sort of one stop shop in evaluating different methodoligies that can be leveraged to secure an AWS Cloud solution.

updated: 2022-08-21 Microsoft Project Description: I’ve been been looking for ways to enhance Microsoft O365 traffic that has generally always had to flow through an Enterprise Proxy. Pouring through online documentations to find out what traffic needs to go direct without being inspected. my git repo for microsoft_pac Resources Office 365 IP Address and URL web service Office 365 URL categories to help you optimize the network traffic which really matters Generate Office 365 PAC Files with PowerShell Use tenant restrictions to manage access to SaaS cloud applications Use tenant restrictions to manage access to SaaS cloud applications Python Currently I’m working on a project that will allow sync between all the different services that Microsoft requires.

Table of Contents: Customizing SSL Certificates Overview Sample Code Customizing SSL Certificates Description: In an Enterprise environment, where we are decrypting traffic for inspection or using interanally signed certificates, I’m constaintly running into SSL Errors. They are generally legitimate and always have a reason, but to minimize this I either directly use a custom CA or I use something like the below where I can leverage publicly known Trusted CA’s with a Custom Trusted CA.

updated: 2022-09-07 (Under Construction) Introduction Palo Alto announced direct NGFW Cloud integration with AWS as well as AWS announcment back in March of 2022. This is a really new product that integrates AWS Firewall Manager with Palo Alto NGFW. I am still reviewing it, but here are some initial docucmentations around it that I’ve been looking at and evaluting and this is a PDF with a brief overview: Palo Alto Cloud NGFW (file removed due to NDA)

updated: 2022-08-21 Microsoft Project Description: I’ve been been looking for ways to enhance Microsoft O365 traffic that has generally always had to flow through an Enterprise Proxy. Pouring through online documentations to find out what traffic needs to go direct without being inspected. my git repo for microsoft_pac Resources Office 365 IP Address and URL web service Office 365 URL categories to help you optimize the network traffic which really matters Generate Office 365 PAC Files with PowerShell Use tenant restrictions to manage access to SaaS cloud applications Use tenant restrictions to manage access to SaaS cloud applications Python Currently I’m working on a project that will allow sync between all the different services that Microsoft requires.

updated: 2023-02-23 Introduction Working on developing an SDK to leverage our orchestration internaly that will assist with auto security policy and deployment with the Palo Alto Prisma SASE project. Python Package GitHub Project - Prisma-Access-SASE python -m pip install prisma-access-saseSee Python Package Index for README.md docs and usage of package. See Test Python Package Index for current beta/alpha releases.

orig: 2021-05-15 updated: 2022-08-28 Introduction Description: I was using the PaloAltoNetworks Github project, but wanted to customize it and also was looking at adding it to some internal projects and try to understand what I was doing. My original code was built around Palo Alto’s XML API, so I’ve been updating it against Palo Alt’s newer version since updating their API (begining in PanOS 9.0 release see PAN-OS Documents ) to use REST API Request and Response Structure, which, I feel, made it a lot easier to interact with.

Table of Contents: Customizing SSL Certificates Overview Sample Code Customizing SSL Certificates Description: In an Enterprise environment, where we are decrypting traffic for inspection or using interanally signed certificates, I’m constaintly running into SSL Errors. They are generally legitimate and always have a reason, but to minimize this I either directly use a custom CA or I use something like the below where I can leverage publicly known Trusted CA’s with a Custom Trusted CA.

updated: 2022-08-28 PaloAlto Shares

Overview What is a Web Application Firewall? A web application firewall (WAF) is a specific form of application firewall that filters, monitors, and blocks HTTP traffic to and from a web service. By inspecting HTTP traffic, it can prevent attacks exploiting a web application’s known vulnerabilities, such as SQL injection, cross-site scripting (XSS), file inclusion, and improper system configuration. 1 Many basic security measures are applied in a WAF are supported by the Open Web Application Security Project (OWASP) owasp.

Cloud Considerations updated: 2023-02-24 Table of Contents: Overview Considerations Where do I start? Cloud Native vs Cloud Agnostic Nework Segmentation & Hiearchy Network Segmentation Network Hierarchy Security Firewall Cloud Workload Protection Protect Your Cloud References Overview Going to the cloud can be a difficult journey and has a lot of obsticles around it. Let’s try to break down those obsticles leveraging publications and information readily availble to help you get through your cloud journey.

updated: 2023-04-17 Palo Alto API Working with Palo Alto Firewall and the official SDK I found it difficult to get the info I wanted in the format I needed in some casees. So, I begain writting out some code that would handle the work for me. Github project How to Use Install the package which has been tested mostlyon 3.8+ python -m pip install paloaltoapiConfiguration Variables Use environment variables for configurations:

updated: 2022-09-07 (Under Construction) Introduction Palo Alto announced direct NGFW Cloud integration with AWS as well as AWS announcment back in March of 2022. This is a really new product that integrates AWS Firewall Manager with Palo Alto NGFW. I am still reviewing it, but here are some initial docucmentations around it that I’ve been looking at and evaluting and this is a PDF with a brief overview: Palo Alto Cloud NGFW (file removed due to NDA)

updated: 2022-09-08 (under construction…) Introduction Description: I wanted to review the best practices to inpsect AWS traffic and how this would be architected. I ended up going through a few iterations of different designs and the pros and cons of each. This is a space on some of those designs and online resources I used. I hope this becomes a sort of one stop shop in evaluating different methodoligies that can be leveraged to secure an AWS Cloud solution.

orig: 2021-05-15 updated: 2022-08-28 Introduction Description: I was using the PaloAltoNetworks Github project, but wanted to customize it and also was looking at adding it to some internal projects and try to understand what I was doing. My original code was built around Palo Alto’s XML API, so I’ve been updating it against Palo Alt’s newer version since updating their API (begining in PanOS 9.0 release see PAN-OS Documents ) to use REST API Request and Response Structure, which, I feel, made it a lot easier to interact with.

Table of Contents: Swagger ForgeRock Nodes Debuging Debug Node Debug Script RestAPI Swagger ForgeRock Swagger ForgeRock Nodes NOTE: Bulding a node out of a JavaScript and importing it into the web-container webapps is apparently faster at rendering than using JS scripts inside of a journey. From what I have been told. I am still pending the ability to time it out and discover the delay between an imported node from a jar vs writting out a JavaScript and referencing it into a journey.

New York City Photos

City installations and freephotos Ray Bans Grafitee

Georgia Pond Central Park Hudson Yards

Updated: 2022-11-27 Description I have come across many issues where I need async API calls, but not just to run multiple calls, but to also run long running tasks that I just need to check the status of. I have been leveraging NATS to handle message queuing between systems see: Python NATS Github Repo and information on NATS Project . Unfortunately, I’ve run into some issues with how to handle messaging through API calls.

updated: 2022-08-21 Microsoft Project Description: I’ve been been looking for ways to enhance Microsoft O365 traffic that has generally always had to flow through an Enterprise Proxy. Pouring through online documentations to find out what traffic needs to go direct without being inspected. my git repo for microsoft_pac Resources Office 365 IP Address and URL web service Office 365 URL categories to help you optimize the network traffic which really matters Generate Office 365 PAC Files with PowerShell Use tenant restrictions to manage access to SaaS cloud applications Use tenant restrictions to manage access to SaaS cloud applications Python Currently I’m working on a project that will allow sync between all the different services that Microsoft requires.

PyToolkit Table of Contents: Installation ToolKit Utilities ToolKit Dataclasses Maniuplating Dictionaries Utilities Internet Utilities Splunk Upload Python General tools Installation Package found at PyPi Code found at GitHub >>> python -m pip install pytoolkit928ToolKit Utilities string_or_list function allows you to interpret a string and return a list. It provides you the option of adding a delimiter using an OR function to return a possible string that you may be expecting possible common delimiters.

updated: 2023-04-17 Palo Alto API Working with Palo Alto Firewall and the official SDK I found it difficult to get the info I wanted in the format I needed in some casees. So, I begain writting out some code that would handle the work for me. Github project How to Use Install the package which has been tested mostlyon 3.8+ python -m pip install paloaltoapiConfiguration Variables Use environment variables for configurations:

orig: 2021-05-15 updated: 2022-08-28 Introduction Description: I was using the PaloAltoNetworks Github project, but wanted to customize it and also was looking at adding it to some internal projects and try to understand what I was doing. My original code was built around Palo Alto’s XML API, so I’ve been updating it against Palo Alt’s newer version since updating their API (begining in PanOS 9.0 release see PAN-OS Documents ) to use REST API Request and Response Structure, which, I feel, made it a lot easier to interact with.

Table of Contents: Customizing SSL Certificates Overview Sample Code Customizing SSL Certificates Description: In an Enterprise environment, where we are decrypting traffic for inspection or using interanally signed certificates, I’m constaintly running into SSL Errors. They are generally legitimate and always have a reason, but to minimize this I either directly use a custom CA or I use something like the below where I can leverage publicly known Trusted CA’s with a Custom Trusted CA.

updated: 2024-05-18 Table of Contents: Handling Certificates with Python Using PIP Config Setting PIP Configuration PIP Configuration Locations Handling Certificates in code PEP 476 - Enabling Certificate Verification Handling Certificates with Python StackOverflow: How To Add A Custom CA Using PIP Config A quick way to set Python configuration is to set it in the pip.conf which contains NOTE: Python uses a hierarchy to search for the configuration file and what takes presedence.

updated: 2023-02-23 Introduction Working on developing an SDK to leverage our orchestration internaly that will assist with auto security policy and deployment with the Palo Alto Prisma SASE project. Python Package GitHub Project - Prisma-Access-SASE python -m pip install prisma-access-saseSee Python Package Index for README.md docs and usage of package. See Test Python Package Index for current beta/alpha releases.

orig: 2021-05-15 updated: 2022-08-28 Introduction Description: I was using the PaloAltoNetworks Github project, but wanted to customize it and also was looking at adding it to some internal projects and try to understand what I was doing. My original code was built around Palo Alto’s XML API, so I’ve been updating it against Palo Alt’s newer version since updating their API (begining in PanOS 9.0 release see PAN-OS Documents ) to use REST API Request and Response Structure, which, I feel, made it a lot easier to interact with.

Previous Next     Page: / Contact Me

updated: 2023-02-23 Introduction Working on developing an SDK to leverage our orchestration internaly that will assist with auto security policy and deployment with the Palo Alto Prisma SASE project. Python Package GitHub Project - Prisma-Access-SASE python -m pip install prisma-access-saseSee Python Package Index for README.md docs and usage of package. See Test Python Package Index for current beta/alpha releases.

updated: 2023-04-17 Palo Alto API Working with Palo Alto Firewall and the official SDK I found it difficult to get the info I wanted in the format I needed in some casees. So, I begain writting out some code that would handle the work for me. Github project How to Use Install the package which has been tested mostlyon 3.8+ python -m pip install paloaltoapiConfiguration Variables Use environment variables for configurations:

API Security Checklist download Previous Next     Page: /

updated: 2023-04-27 Introduction Aqua Security SDK to interact with Workload Protection and CSPM. Aquasec Security SDK GitHub Project = aquasec-api python -m pip install aquasec-apiEarly Testing Pre-Release: pip install -i https://test.pypi.org/simple/ --extra-index-url https://pypi.org/simple aquasec-api==v0.0.1rc1See Python Package Index See Test Python Package Index Aquasec Security CLI Additionally there is a aquasec security cli that can accompany the SDK. Installing it is still under works, but allows for installation and ability to run directly from the CLI.

Overview What is a Web Application Firewall? A web application firewall (WAF) is a specific form of application firewall that filters, monitors, and blocks HTTP traffic to and from a web service. By inspecting HTTP traffic, it can prevent attacks exploiting a web application’s known vulnerabilities, such as SQL injection, cross-site scripting (XSS), file inclusion, and improper system configuration. 1 Many basic security measures are applied in a WAF are supported by the Open Web Application Security Project (OWASP) owasp.

updated: 2024-04-17 Description I came across this and find it very useful in a breakdown of all the different ways to reference security standards and where/how they are applied. I find this a lot easier to comprehend and digest than going through the CISSP in some circumstances. I’ll be uploading pieces of it as I find the best way to display the inforomation. Sections Include: Overview Risk Managment Network Security Access Management Application Security Data Security Operational Security BCDR Department of Defense Risk Mangement Framework Cloud Frameworks Container Security Application Container Security Guide See Also: RestAPI NOTE: Working on a cloud section.

Description: Set up a personal DNS Firewall. Overview: In working with Infoblox DNS BloxOne Deployment I got to thinking why not deploy this on my own network to get an inexpensive way to control DNS requests. Here I ended up deploying a Primary and Secondary DNS Bind9 Server running on physical and virtual Ubuntu Servers. I leverage ioc2rpz to sync community available RPZ’s then we leverage DNSCrypt-Proxy project configuring a local listener that will send Recursive DNS lookups using DNSoverHTTPS.

Table of Contents: Customizing SSL Certificates Overview Sample Code Customizing SSL Certificates Description: In an Enterprise environment, where we are decrypting traffic for inspection or using interanally signed certificates, I’m constaintly running into SSL Errors. They are generally legitimate and always have a reason, but to minimize this I either directly use a custom CA or I use something like the below where I can leverage publicly known Trusted CA’s with a Custom Trusted CA.

updated: 2024-05-18 Table of Contents: Handling Certificates with Python Using PIP Config Setting PIP Configuration PIP Configuration Locations Handling Certificates in code PEP 476 - Enabling Certificate Verification Handling Certificates with Python StackOverflow: How To Add A Custom CA Using PIP Config A quick way to set Python configuration is to set it in the pip.conf which contains NOTE: Python uses a hierarchy to search for the configuration file and what takes presedence.

updated: 2024-04-17 Description I came across this and find it very useful in a breakdown of all the different ways to reference security standards and where/how they are applied. I find this a lot easier to comprehend and digest than going through the CISSP in some circumstances. I’ll be uploading pieces of it as I find the best way to display the inforomation. Sections Include: Overview Risk Managment Network Security Access Management Application Security Data Security Operational Security BCDR Department of Defense Risk Mangement Framework Cloud Frameworks Container Security Application Container Security Guide See Also: RestAPI NOTE: Working on a cloud section.

Overview What is a Web Application Firewall? A web application firewall (WAF) is a specific form of application firewall that filters, monitors, and blocks HTTP traffic to and from a web service. By inspecting HTTP traffic, it can prevent attacks exploiting a web application’s known vulnerabilities, such as SQL injection, cross-site scripting (XSS), file inclusion, and improper system configuration. 1 Many basic security measures are applied in a WAF are supported by the Open Web Application Security Project (OWASP) owasp.