计划任务所对应的执⾏脚本内容 [ 有些执⾏脚本中很可能存的有各种连 接账号密码 ] 获取当前⽤户 桌⾯ 及 回收站 ⾥的所有⽂件列表 获取当前系统的所有存在suid权限的⼆进制程序 获取当前系统代理 [ ip & 端⼝ ] 获取当前系统所有的⾃启动注册表项值 获取当前系统的所有 ipc 连接 及 已启⽤共享 获取当前系统的所有挂载[mount] 获取当前系统的防⽕墙状态 获取当前系统所有分区/盘符及其详细使⽤情况 0x08 内⽹安全 [内⽹常⽤ "隧道"" / "转发"" / "代理"" 穿透⼿法 提炼汇总 ， 防御重点] 出⽹流量刺探 ⽐如,http,dns,以及⼀些穿透性相对较好的tcp端⼝... 这种操作⼀般都会配合wmi,smb,ssh远程执⾏,在内⽹批量快速识别出能出⽹的机器 常规 HTTP脚本代理 abptts,Neo-reGeorg,reGeorg,tunna,reduh

you missed last month, you can find the handout for Part 2 on the Agile4Defense GitHub page at: https://git.io/JeaO2 Risk The presence of uncertainty is the simple reason why Agile approaches work better post events and many of our table topics.  https://www.meetup.com/Agile-for-Defense/  https://www.facebook.com/groups/AgileForDefense/  https://github.com/Agile4Defense/AgileForDefense You can download this table handout directly at: https://git.io/Jejqb Share Your Feedback As we've come to learn on our agile journey, short cycle times and rapid feedback are the lifeblood of

DoD Enterprise DevSecOps Reference Design from the DoD CIO – A Summary Content referenced from: https://dodcio.defense.gov/Portals/0/Documents/DoD%20Enterprise%20DevSecOps%20Reference %20Design%20v1.0_Public%20Release LifecycleDevSecOps Pillars DevSecOps EcosystemDevSecOps Software Factory DevSecOps MVP Image from https://github.com/jondavid-black/DevOpsForDefense/raw/master/Meetup/2019/2019-10%20DO4D%20- %20DevSecO Chaillan presenting https://www.csiac.org/podcast/dod-enterprise-devsecops-initiative/ DoD Centralized Container Source Code Repository (DCCSCR) https://dcar.dsop.io/ DSOP Group Workspace https://dccscr.dsop

net/patrickmeenan/service-workers-for-performance  They are effectively a man in the middle for your page, hence HTTPS only  Most benefit for single page apps for offline support Putting Performance Best Practices along Changing the Laws of Engineering with GitHub Pull Requests by Ralph Bodenner (New Relic) https://bit.ly/pull-request-your-culture  How you change your process matters  Terms: culture, metaprocess http://velocityconf.com/devops-web-performance-2015/public/schedule/proceedings [2] YouTube Playlist: https://www.youtube.com/playlist?list=PL055Epbe6d5Y86GSg3nhUH3o_v62FGpCI

coding tactic. If you missed last month, you can find this on the Agile4Defense GitHub page at: https://git.io/JeaOu Enterprise Architecture Enterprise Architecture, the domain of the IT bureaucrats table topics? You can find this one and others at: https://github.com/Agile4Defense/AgileForDefense You can download this topic directly at: https://git.io/JeaO2

speed, data integrity, and support for distributed, non-linear workflows https://try.github.io/levels/1/challenges/1 https://www.atlassian.com/university From: www.atlassian.com Mapping out Agile

for Earned Value Management, PARCA, Office of the Assistant Secretary of Defense for Acquisition) https://www.acq.osd.mil/evm/ Incremental process, i.e. Rolling Wave Planning; Agile Release/Program Increment of EVM WBS elements to the Agile products hierarchy Agile Contracting – Dr. Stephen Mayner SAFe https://techfarhub.cio.gov/ Handbook for Procuring Digital Services Using Agile Processes All structures

References:  scaledagileframework.com  SAFe in 7 minutes - https://www.youtube.com/watch?v=RXzurBazN-I Scaled Agile Framework (SAFe): Dean Leffingwell - Agile Software Requirements: Lean Requirements

Books 1. “Good Business” by Mihaly Csikszentmihalyi 2. “Drive” by Dan Pink (~11 minute video at https://www.youtube.com/watch?v=u6XAPnuFjJc) 3. “How to Win Friends and Influence People” (HTWFIP), Dale

http://pomodorotechnique.com/ [2] Personal Productivity Using The Pomodoro Technique, Daniel Hinojosa, https://docs.google.com/presentation/d/1ufjcILARuowbv3Y9r-FP9-x3kmlIzq7bvOJBxRVh3-w/ present#slide=id.i0