随笔分类 -  学问

1 2 3 4 5 ··· 13 下一页
What is Risk
摘要：What is Risk Risk is unavoidable, but it can be managed. With governance, risk, and compliance (GRC), businesses can strategically balance risk and op 阅读全文
posted @ 2024-10-04 17:53 晨风_Eric 阅读(1) 评论(0) 推荐(0)
Segregation of Duties - SoD
摘要：Segregation of Duties - SoD Segregation of Duties (SoD) is a control avtivity where an activity or set of activities are divided among several people 阅读全文
posted @ 2024-09-26 14:47 晨风_Eric 阅读(2) 评论(0) 推荐(0)
Default Users in SAP
摘要：Default Users in SAP Default Passwords in SAP Whenever a new SAP system is built, upgraded, copied, or restored from backup, one of the very first tas 阅读全文
posted @ 2024-05-18 22:04 晨风_Eric 阅读(2) 评论(0) 推荐(0)
Custom Auth Objects in SAP
摘要：Custom Auth Objects in SAP Often a security administrator comes across requirements where the exiting authorization objects delivered by SAP is not en 阅读全文
posted @ 2024-05-18 22:03 晨风_Eric 阅读(4) 评论(0) 推荐(0)
User Creation and Maintenance in SAP
摘要：User Creation and Maintenance in SAP T-Code: SU01 Documentation Address Logon Data SNC Defaults Parameters Roles Profiles Groups User group examples: 阅读全文
posted @ 2024-05-09 11:12 晨风_Eric 阅读(3) 评论(0) 推荐(0)
Preparing for a Zero Trust Initiative-1
摘要：Preparing for a Zero Trust Initiative-1 A Zero Trust security model when implemented by an organization reduces external and internal threats to syste 阅读全文
posted @ 2023-10-21 22:56 晨风_Eric 阅读(3) 评论(0) 推荐(0)
SAP System Security & Authorizations 1
摘要：# SAP System Security & Authorizations 1 ### Introduction to SAP and important concepts related to SAP Security ##### SAP & its components introductio 阅读全文
posted @ 2023-07-30 22:29 晨风_Eric 阅读(24) 评论(0) 推荐(0)
Wireshark for Ethical Hackers - 11
摘要：Wireshark for Ethical Hackers - 11 Capturing Traffic Where to capture traffic? Locally (GUI and CLI) Remotely Inline Hub - Half duplex Test Access Por 阅读全文
posted @ 2022-10-20 10:52 晨风_Eric 阅读(22) 评论(0) 推荐(0)
CRISC Learning Notes 5 - Information Security Principle
摘要：一些旧版本系统可能完全无法更换，这一现象对工业环境中的操作技术来说很常见。在这种情况下，风险从业人员应该谨记，其作用不是去否定特定的行为，而是与风险所有者一起建立可接受的风险水平。 阅读全文
posted @ 2022-09-29 11:52 晨风_Eric 阅读(20) 评论(0) 推荐(0)
CRISC Learning Notes 4 - Risk Ownership and Accountability
摘要：To ensure accountability, the ownership of risk must be with an individual, not with a department or the organization as a whole. 阅读全文
posted @ 2022-07-20 16:46 晨风_Eric 阅读(33) 评论(0) 推荐(0)
CRISC Learning Notes 3 - Risk Culture and Communication
摘要：Understanding risk includes understanding the goals, objectives, values and ethics of the organization. 阅读全文
posted @ 2022-06-19 18:26 晨风_Eric 阅读(47) 评论(0) 推荐(0)
CRISC Learning Notes 2 - Risk Governance
摘要：CRISC Learning Notes 2 - Risk Governance Four main objectives of risk governance: Establish and maintain a common risk view. Integrate risk management 阅读全文
posted @ 2022-05-29 23:10 晨风_Eric 阅读(46) 评论(0) 推荐(0)
OSCP Security Technology - Gaining Root with Metasploit
摘要：OSCP Security Technology - Gaining Root with Metasploit Analysis nmap scanning result. searchsploit samba 2.2 msfconsole search trans2open use exploit 阅读全文
posted @ 2021-07-07 08:21 晨风_Eric 阅读(36) 评论(0) 推荐(0)
Enterprise OAuth 2.0 - OAuth2.0OpenID Connect For the Enterprise(4)
摘要：Enterprise OAuth 2.0 - OAuth2.0OpenID Connect For the Enterprise(4) OAuth 2.0 and OpenID Connect OAuth 2.0 is for authorization Access token should co 阅读全文
posted @ 2021-05-05 20:29 晨风_Eric 阅读(58) 评论(0) 推荐(0)
Enterprise OAuth 2.0 - Using okta（1）
摘要：Enterprise OAuth 2.0 - Using okta（1） Okta Authorization Server Okta setup and Endpoints https://developer.okta.com/signup/ Custom Resource Server usin 阅读全文
posted @ 2021-04-24 16:55 晨风_Eric 阅读(99) 评论(0) 推荐(0)
Enterprise OAuth 2.0 - OAuth Basics
摘要：Enterprise OAuth 2.0 - OAuth Basics The OAuth 2.0 authorization framework enables a third-party application to obtain limited access to an HTTP servic 阅读全文
posted @ 2021-03-14 20:39 晨风_Eric 阅读(71) 评论(0) 推荐(0)
Enterprise OAuth 2.0 - Enterprise and Social Media Application Landscape
摘要：Enterprise OAuth 2.0 - Enterprise and Social Media Application Landscape Security Basics - Providers User, Identity Where are the user credentials sto 阅读全文
posted @ 2021-03-13 17:38 晨风_Eric 阅读(98) 评论(0) 推荐(0)
Python for Data Science - Grouping and data aggregation
摘要：Chapter 2 - Data Preparation Basics Segment 5 - Grouping and data aggregation import numpy as np import pandas as pd from pandas import Series, DataFr 阅读全文
posted @ 2021-01-02 16:55 晨风_Eric 阅读(110) 评论(0) 推荐(0)
Python for Data Science - Concatenating and transforming data
摘要：Chapter 2 - Data Preparation Basics Segment 4 - Concatenating and transforming data import numpy as np import pandas as pd from pandas import Series, 阅读全文
posted @ 2021-01-02 16:13 晨风_Eric 阅读(71) 评论(0) 推荐(0)
Python for Data Science - Removing duplicates
摘要：Chapter 2 - Data Preparation Basics Segment 3 - Removing duplicates import numpy as np import pandas as pd from pandas import Series, DataFrame Removi 阅读全文
posted @ 2021-01-02 15:03 晨风_Eric 阅读(71) 评论(0) 推荐(0)

1 2 3 4 5 ··· 13 下一页