My Splunk instance.

[cr0w@infosec.exchange]

RE: https://mastodon.social/@daily_emoji/116375174458330850

My Splunk instance.

[tyzbit@toot.now]

@cR0w it took me a second to get the 2nd tier of the joke about "logs".

i just nodded in agreement at first because everything about splunk is typically very sad.

[wall_e@ioc.exchange]

@cR0w coincidentally also your associated bank account

[theorangetheme@en.osm.town]

@cR0w Log! It's better than bad, it's good!

[cr0w@infosec.exchange]

@theorangetheme LMAO. I used to get that damn song stuck in my head for hours when I was doing GORUCK events.

[cdubbs@infosec.exchange]

@cR0w Had some enjoyable conversations this week.

Me: Do we feel this windows event ID is important?

Them: Yes, it could be an indicator of recon.

Me: It sure could, but we have xyz covering that. This event costs us $10,000 a year. Is it worth that?

Them: No.