Dan Griggs's guest appearances

Dan Griggs

Mac Admins Podcast

Jamf After Dark

Joel Rennich

Armin Briegel

App Config

Dean Hager

Rich Trouton

Patrick Wardle

Nick McSpadden

Tim Perfitt

Chris Miller

Sam Johnson

Chris Chapman

Jason Snell

Tonya Engst

John Welch

Bill Smith

OwlTail

Once upon a time, we tried to pipeline logs to centralized syslog hosts. And it was never great. Then, Apple gave us unified logging and the amount of logs skyrocketed. So the cmdReporter team took a step beyond that and built some amazing tooling to flow logs off Macs and into whatever SEIM an organization needs! Today, we talk with Dan Griggs about the philosophies, some of the tactics, and the massive case statements underneath cmdReporter! OK, so just kidding about the case statements but it was a super-fun episode!

Once upon a time, we tried to pipeline logs to centralized syslog hosts. And it was never great. Then, Apple gave us unified logging and the amount of logs skyrocketed. So the cmdReporter team took a step beyond that and built some amazing tooling to flow logs off Macs and into whatever SEIM an organization needs! Today, we talk with Dan Griggs about the philosophies, some of the tactics, and the massive case statements underneath cmdReporter! OK, so just kidding about the case statements but it was a super-fun episode!

Streaming logs and cmdReporter, with Dan Griggs

SYNOPSIS: Tom and Charles talk with cmdSecurity’s Dan Griggs about BlackHat 2019, all the Apple security news at BlackHat this year, and all of the features of cmdSecurity’s new cmdReporter product. YOUR HOSTS:  Tom Bridge, Partner, Technolutionary LLC [@tbridge777] Charles Edge, Director of Marketplace, Jamf [@cedge318]  OUR GUEST:  Dan Griggs, CEO cmdSecurity, Architect cmdReporter  PRESENTING SPONSOR: VMWARE WORKSPACE ONE VMware Workspace ONE empowers you with full macOS lifecycle management. Get past the hassles of legacy imaging with faster modern onboarding. Easily deliver all your native Mac app packages as well as SaaS and virtual Windows apps, and empower users with one-click single sign on. Stay on top of your security needs with complete encryption management and rich conditional access. The recognized industry leading unified endpoint management solution is your one stop for all Apple devices and apps. Learn more at www.workspaceone.com LISTEN! LINKS &amp; NOTES  Google’s Project Zero iOS Disclosure Apple’s Enterprise Security Tech Note cmdReporter SUPPORTING SPONSORS:  Use code MACADMINS at checkout, good for 50% off your first month of a Mac mini subscription! Click through for 10 users for free at Jumpcloud! PATREON SPONSORS The Mac Admins Podcast has launched a Patreon Campaign! Our named patrons this month include Randy Wong, Weldon Dodd, Jonathan Spiva, Justin Holt, Chad Swarthout, William Smith, Stephen Weinstein, Jason Dettbarn, Seb Nash &amp; Will O’Neal. Thanks everyone! MAC ADMINS PODCAST COMMUNITY CALENDAR, SPONSORED BY WATCHMAN MONITORING  Conference Sites    Event Name Location Dates Cost     VMworld 2019 San Francisco, CA 25-29 August 2019 $2195  Check the EUC Track! MacSysAdmin Göteborg, Sweden 1-4 October 2019 11700 SEK MacTech Conference Los Angeles, CA 15-18 October 2019 $999 Early Bird til 28 June Jamf Nation User Conference Minneapolis, MN 12-14 November 2019  $799 Early Bird Rate ($699 for EDU)    Meetups    Event Name Location Dates Cost      San Diego Mac Admins UC San Diego Health 10 September 2019, 6:00 p.m. PT Free   Houston Apple Admins FlightAware 18 September 2019, 5:30 p.m. CT Free    Toronto Mac Admins LoyaltyOne Atrium 18 September 2019, 6:00 p.m. ET Free   Apple Admins of Seattle and the Great Northwest TBD 19 September 2019, 6.00 p.m. PT Free   NYC Jamf User Group  New York City 1 24 September 2019, 4.30 p.m. ET Free    SPONSOR MAC ADMINS PODCAST! If you’re interested in sponsoring the Mac Admins Podcast, please email podcast@macadmins.org for more information. SOCIAL MEDIA Get the latest about the Mac Admins Podcast, follow us on Twitter! We’re @MacAdmPodcast!

SYNOPSIS: Tom and Charles talk with cmdSecurity’s Dan Griggs about BlackHat 2019, all the Apple security news at BlackHat this year, and all of the features of cmdSecurity’s new cmdReporter product. YOUR HOSTS: <ul> <li>Tom Bridge, Partner, Technolutionary LLC [<a href="https://twitter.com/tbridge777" rel="nofollow" target="_blank">@tbridge777</a>]</li> <li>Charles Edge, Director of Marketplace, Jamf [<a href="https://twitter.com/cedge318" rel="nofollow" target="_blank">@cedge318</a>]</li> </ul> OUR GUEST: <ul> <li>Dan Griggs, CEO <a href="https://www.cmdsec.com/" rel="nofollow" target="_blank">cmdSecurity</a>, Architect <a href="https://cmdsec.com/cmdReporter" rel="nofollow" target="_blank">cmdReporter</a></li> </ul> PRESENTING SPONSOR: VMWARE WORKSPACE ONE VMware Workspace ONE empowers you with full macOS lifecycle management. Get past the hassles of legacy imaging with faster modern onboarding. Easily deliver all your native Mac app packages as well as SaaS and virtual Windows apps, and empower users with one-click single sign on. Stay on top of your security needs with complete encryption management and rich conditional access. The recognized industry leading unified endpoint management solution is your one stop for all Apple devices and apps. Learn more at <a href="http://www.workspaceone.com/" rel="nofollow" target="_blank">www.workspaceone.com</a> LISTEN! LINKS &amp; NOTES <a href="https://googleprojectzero.blogspot.com/2019/08/the-fully-remote-attack-surface-of.html" rel="nofollow" target="_blank"> Google’s Project Zero iOS Disclosure</a> <a href="https://support.apple.com/en-us/HT210060" rel="nofollow" target="_blank">Apple’s Enterprise Security Tech Note</a> <a href="https://cmdsec.com/cmdReporter" rel="nofollow" target="_blank">cmdReporter</a> SUPPORTING SPONSORS: <a href="https://www.macstadium.com/macadmins" rel="nofollow" target="_blank"></a> <a href="https://www.macstadium.com/macadmins" rel="nofollow" target="_blank">Use code MACADMINS at checkout, good for 50% off your first month of a Mac mini subscription!</a> <a href="https://jumpcloud.com/macadmins" rel="nofollow" target="_blank">Click through for 10 users for </a><a href="https://jumpcloud.com/macadmins" rel="nofollow" target="_blank">free</a><a href="https://jumpcloud.com/macadmins" rel="nofollow" target="_blank"> at Jumpcloud!</a> PATREON SPONSORS The Mac Admins Podcast has launched a <a href="https://patreon.com/macadminspodcast" rel="nofollow" target="_blank">Patreon Campaign</a>! Our named patrons this month include Randy Wong, Weldon Dodd, Jonathan Spiva, Justin Holt, Chad Swarthout, William Smith, Stephen Weinstein, Jason Dettbarn, Seb Nash &amp; Will O’Neal. Thanks everyone! MAC ADMINS PODCAST COMMUNITY CALENDAR, SPONSORED BY WATCHMAN MONITORING <a href="https://www.watchmanmonitoring.com/" rel="nofollow" target="_blank"></a> Conference Sites Event Name Location Dates Cost <a href="https://www.vmworld.com/en/us/index.html" rel="nofollow" target="_blank">VMworld 2019</a> San Francisco, CA 25-29 August 2019 $2195 <a href="https://techzone.vmware.com/blog/technical-euc-sessions-vmworld-2019" rel="nofollow" target="_blank"> Check the EUC Track!</a> <a href="http://macsysadmin.se/" rel="nofollow" target="_blank">MacSysAdmin</a> Göteborg, Sweden 1-4 October 2019 <a href="https://www.macsysadmin.se/register/register.php" rel="nofollow" target="_blank">11700 SEK</a> <a href="https://conference.mactech.com/" rel="nofollow" target="_blank">MacTech Conference</a> Los Angeles, CA 15-18 October 2019 <a href="https://forms.mactech.com/fillsurvey.php?sid=676&amp;rid=None" rel="nofollow" target="_blank">$999 Early Bird til 28 June</a> <a href="https://www.jamf.com/events/jamf-nation-user-conference/2019/" rel="nofollow" target="_blank">Jamf Nation User Conference</a> Minneapolis, MN 12-14 November 2019 <a href="https://www.cvent.com/events/jamf-nation-user-conference-2019/registration-7d9e9c5d913c4c38b847a10de4a84e25.aspx" rel="nofollow" target="_blank"> $799 Early Bird Rate ($699 for EDU)</a> Meetups Event Name Location Dates Cost <a href="https://www.jamf.com/jamf-nation/events/user-groups/299/san-diego-macadmins" rel="nofollow" target="_blank"> San Diego Mac Admins</a> <a href="https://goo.gl/maps/88NxcyfGWfjrkmTS6" rel="nofollow" target="_blank">UC San Diego Health</a> 10 September 2019, 6:00 p.m. PT Free <a href="https://houstonappleadmins.org/Sept2019-Meetup/" rel="nofollow" target="_blank">Houston Apple Admins</a> <a href="https://goo.gl/maps/XQ3wqBddPUP2" rel="nofollow" target="_blank">FlightAware</a> 18 September 2019, 5:30 p.m. CT Free <a href="https://www.eventbrite.com/e/toronto-macbrained-for-all-admins-cybersecurity-and-your-organization-tickets-67780496289/" rel="nofollow" target="_blank"> Toronto Mac Admins</a> <a href="https://goo.gl/maps/5xSVC7gvs42Go31R6" rel="nofollow" target="_blank">LoyaltyOne Atrium</a> 18 September 2019, 6:00 p.m. ET Free <a href="https://www.meetup.com/Seattle-Apple-Admins" rel="nofollow" target="_blank">Apple Admins of Seattle and the Great Northwest</a> TBD 19 September 2019, 6.00 p.m. PT Free NYC Jamf User Group <a href="https://maps.apple.com/?address=Apple%20Inc.,%20100%205th%20Ave,%20New%20York,%20NY%2010011,%20United%20States&amp;auid=5865647463717811209&amp;ll=40.737050,-73.993311&amp;lsp=9902&amp;q=New%20York%20City%201" rel="nofollow" target="_blank"> New York City 1</a> 24 September 2019, 4.30 p.m. ET Free SPONSOR MAC ADMINS PODCAST! If you’re interested in sponsoring the Mac Admins Podcast, please email <a href="mailto:podcast@macadmins.org">podcast@macadmins.org</a> for more information. SOCIAL MEDIA Get the latest about the Mac Admins Podcast, follow us on Twitter! We’re <a href="https://twitter.com/macadmpodcast" rel="nofollow" target="_blank">@MacAdmPodcast</a>!

Episode 135: Secure Every Thing with Dan Griggs