Hello,I'm trying to create a posture application condition for a Red Hat linux policy that looks for the puppet process to be running. a ps -aux | grep puppet shows: path/puppet agent --no-daemonizeI've tried every variation of that process that i c...
Hello, I need a little assistance with a regex pattern search. I would like to match a login syslog messages for all users except 1. The 1 user is an automated account for system monitoring. I've been reading a number of forums and trying differe...
In the era of Federal Comply to Connect, ISE must categorize servers separately from other windows endpoints. Although i agree with you that why would you want to do this, the fact remains that rules are requiring us to do this. question still stan...
related question for the posture ise experts. What command does the compliance module run on the back end of the linux machine to determine running processes?
I'll answer my own question. Eem doesn't support the full range of regex. It doesn't seem like it it capable of using a negative lookahead. I was able to solve the issue by using a more simplistic approach. event syslog pattern “%SEC_LOGIN-5-LOGIN_...
