Some recent threads on CheckMates worth further discussion.

• Properly defining the Internet within a security policy, let's discuss!
• NAT Tip
• AnyDesk - on DHS Compliant version
• sk182752: Harmony Endpoint Client blocks AnyDesk
• vpnconfig alternative
• R81.20 High CPU being reported by Solarwinds and TOP
• sk101878: CPView Utility
• sk178566: Skyline Deployment
• sk92402: How to query utilization of individual CPU cores via SNMP
• 2M DNS Queries Per Day
• Single Domain Solution
• Introducing CheckMatesAI

An excerpt of our No Suits No Ties session on recovering from a Ransomware outbreak.

An excerpt of our Infinity Identity TechTalk done back at the end of October.

An excerpt from our GenAI Security TechTalk from September.

• GenAI Security from Check Point
• Unveiling the Future of Network Security in the Era of AI

An excerpt from our recent No Suit No Ties session from Incident Response called Vulnerabilities and Workarounds, where we explore a compelling case study in which attackers exploited vulnerabilities in an internet-facing device to gain initial access, escalate privileges, conduct reconnaissance, and infiltrate the internal network.

PhoneBoy talks about a paper written by Antoinette Hodes called Pay Now or Pay Later, understanding the costly consequences of neglecting OT/ICS Cybersecurity.

• https://www.checkpoint.com/solutions/iot-security/
• https://www.industrialcybersecuritypulse.com/facilities/throwback-attack-an-insider-releases-265000-gallons-of-sewage-on-the-maroochy-shire/

PhoneBoy talks about the new features and functionality in the R82 release for Quantum Security Gateways and Management.

• Now that R82 is out, how about an AI generated podcast about it?
• R82 Quantum Security Management Administration Guide: Self Managed Security Gateways
• Known Limitations for Scalable Platforms (Maestro Appliances, Chassis, and ElasticXL)

An excerpt from a great TechTalk we did back in June on Threat Hunting with Memory Forensics given by Monnappa who also teaches Check Point's Threat Hunting Using Memory Forensics course.

NO SUITS, NO TIES aims to shed light on how Check Point MDR and Incident Response Analysts play a pivotal role in proactively identifying and responding to these threats when they are least expected.

This is an an audio version of our first No Suits, No Ties session entitled Going Equipped To Compromise where we discuss real-world examples from real cases where ‘utilities’ were and are being used in compromise incidents.

The session will cover:

• The type of tools being used and how they are leveraged
• How to interpret detection events when these tools are deployed
• How much time you might have to respond once the first event is seen
• What visibility may be lost when ‘killer’ or ‘disruption’ tools are used
• What response and containment activities to focus on where these tools have been observed

PhoneBoy talks about some recent topics on the CheckMates community:

• DNS forwarding for Internal Domain
• Fun with Check Point Dynamic IP Gateways in R77.20 with Gaia
• How to create object for private cloud Kubernetes on SmartConsole
• How to read packet-captured file by fw monitor
• sk30583: What is FW Monitor?
• sk182438: R81.10.15 for Quantum Spark Appliances
• sk182467: Enterprise Endpoint Security E88.60 macOS Clients
• R81.20 Open Server Hardware Requirements
• MDS R81.20 on KVM, fresh install broken
• Deep Dive on the latest R82 TLS Inspection Enhancements! - Recording & Q&A