He has been eating much more, hence the lack of posting recently. I think he is even putting on weight.

Several teams of vets have done tons of tests and still have no clue .

Lol, he will eat most anything posted here.

He will eat for a day and then has no interest in food for several days. It can be frustrating because I don’t know if it will be an eating day or a refusing food day. This sadly results in wasted food.

The only things he will eat any time it is offered is canned tuna and cashews. Both can cause issues if fed in large amounts so he gets those every once in a while.

Some days he eats any of these meals. Other days he eats normal dog kibble. Some days he refuses to eat.

Has been seen by world class vets. They can’t figure it out. Instruction is currently to feed him anything that he is willing to eat that is non toxic to canines.

A mystery that many vets have not been able to answer even though he has had almost every medical test known to man. He is just weird.

Stunted growth, but it is not from lack of access to food. Healthy aside from being smaller than expected.

There are literally hundreds to thousands. Many of them are horded by governments, APTs, and pen testers. I personally abused a 10 year old CVE for pen tests that was known to be used by non US government entities for a zero click code execution on opening a word doc.

Then there are things that are vulnerabilities but cannot be fixed as they are intensic to how Windows functions. Some can be hardened from the defaults but break compatibility and some cannot be fixed without a complete rewrite of how Windows and AD work. Disa stigs will give you defaults that can be hardened. Requirements for all domain users to see all GPOs, users, groups in order for AD to work is an example of something that cannot be fixed without a complete rewrite. That means an in privileged user can get a list of all users, all domain administrator, names of all computers on the domain, etc. As an attacker, that is invaluable.

Short answer, that list is to big and changes constantly. None that would be comprehensive, but disa stigs is a good place to start.

Agreed. Had to get a travel one to go with me on trips…

As an offensive security worker… I can’t help but read people listing out their attack surface 😂

Bonuses are discretionary. Stock is questionable, especially if it is not immediately 100 percent vested, 401k tells me they are completely out of money and can’t / won’t source additional funding.

In tech, you should always be looking at the next job, even if you are comfortable where you are. Loving what you do, who you work with, work life balance can all offset certain amounts of money, but knowledge and experience is either always growing or growing stale. I’m guessing at early 30s, you are not in an exec position and changing companies with lead to faster career growth than sticking around for the company to turn around it’s books and promote you.

It is always good practice to set up certificates everywhere. I do it for all of my internal services. Each person has a different level of care for how important privacy and security are and some people have abnormal threat profiles.

With that being said, options are usually to run self signed certificates, roll your own certificate authority for your network, or get valid certificates from a service like letsencrypt.