Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Get Started
- News & Events
- Collaboration
- Education Services
- Technologies
- Next-Generation Firewall
- GlobalProtect
- Threat Prevention Services
- Endpoint Protection
- SSL Decryption
- 5G
- IoT Security
- Prisma SD-WAN
Network Security
- Prisma Access
- Prisma SaaS
- Prisma Cloud
- CN-Series
- VM-Series:
- Alibaba
- AWS
- GCP
- Azure
Cloud Security
- Cortex XDR
- Cortex XSOAR
- Cortex Data Lake
Security Operations
- Resources
- COVID-19 Response Center
- LIVEcommunity
- ›
- About Junaid-Khan
About Junaid-Khan
Announcements
Changes to the LIVEcommunity experience are coming soon... Here's what you need to know.
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
10-11-2019
6Posts
1Like
0Solutions
Oct 11, 2019Last Visited
User
Activity
User
Profile
Latest posts by Junaid-Khan
| Subject | Views | Posted |
|---|---|---|
| 1274 | 10-08-2019 12:24 AM | |
| 4396 | 10-07-2019 03:07 PM | |
| 5639 | 09-26-2019 02:43 PM | |
| 5673 | 09-26-2019 10:06 AM | |
| 5693 | 09-26-2019 07:26 AM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 1 | 10-07-2019 03:07 PM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 1 | |||
| 1 | |||
| 1 |
User Badges
Public Statistics
| Date Registered | 07-02-2018 05:54 PM |
| Date Last Visited | 10-11-2019 01:30 PM |
| Total Messages Posted | 6 |
| Total Likes Received | 1 |
10-08-2019
12:24 AM
We have a custom AWS security checklist that we are manually running against each AWS account, and in that, we have a check to see if key pairs of all EC2 instances are created per function and per region when creating an instance with AMI. I'm looking for an RQL to find out custom Keypair. I started with the following RQL but doesnt seem to get anywhere. config where api.name = 'aws-ec2-describe-key-pairs' AND json.rule = "KeyName" limit search records to 100
... View more
Labels:
- Labels:
-
Prisma Cloud
10-07-2019
03:07 PM
1 Kudo
Interesting question, We have something over 70' accounts in the ORG tree but we only want RL to monitor under 30 belongs to our side of the org. I had to manually add all those 30 accounts on-boarded to Prisma to be monitored, I didn't think there is a way to pull all accounts through an RQL verify at the same time if monitored or not.
... View more
09-26-2019
02:43 PM
Thank You, I do have object level logging enabled on the S3's but still don't see the query executing anything. I get a blank page. event where cloud.account = 'SRA-B2B San Jose' AND cloud.service = 's3.amazonaws.com' AND operation = 'GetBucketLogging'
... View more
09-26-2019
10:06 AM
Thanks, I do have cloud trail enabled. Just can't seem to find the right attribute to build the query. Here is my attempt. event where cloud.account IN ( 'SRA-B2B San Jose' ) AND operation IN ( 'GetBucketLogging' ) ADDCOLUMN $.requestParameters.bucketName
... View more
09-26-2019
07:26 AM
Does anyone know how to write a query to look for S3 bucket activity i.e someone logging in to S3 buckets and performing some task as creating objects etc.
... View more
Labels:
11-13-2018
04:24 PM
Does the inbound from AWS to On-Prem(resource) work ? Are you using multiple-vr's ?
... View more
Latest Blogs
Latest Posts
Copyright 2007 - 2021 - Palo Alto Networks
