When you create your application using C/C++, there are several options for working with external dependencies, such as libraries like: and so on. Some of the libraries, along with header files, are available for installation using a Linux package manager thus we typically do the following: In Linux package managers, development-related libraries often have -dev or -devel as… Read More »
I found my old note about signature detection apporach that typically used by AV products and I thought that it may be interested, so let’s dive in. As an example, let’s consider Mimikatz (one of the most popular hacking tools) – Mimikatz 2.2.0 branch, tagged as version 2.2.0. Interestingly, the simplest part of this tool is the kernel-mode… Read More »
To gather information about processes running with administrator privileges on endpoints, it’s important to understand Windows Integrity Levels, introduced by Microsoft in Windows Vista (see Mandatory Integrity Control). Mandatory Integrity Control (MIC) is a security feature that enforces access control by assigning integrity levels to processes and objects. It uses integrity levels: Low, Medium, High, and System to… Read More »
You can often find structure in the code that looks like this TOKEN_PRIVILEGES structure. The ANYSIZE_ARRAY macro is used in the definition of the TOKEN_PRIVILEGES structure to allow for a flexible array member. This is a common technique in C and C++ to define structures that can have a variable-length array as their last member. In C and… Read More »
Once, I returned to an old project in C/C++. I saw several interesting ideas in it and wanted to revive it and rewrite part of the code to align with best practices (since previously it resembled more of a Proof of Concept). When I started working on it, for someone who hadn’t used C/C++ for a while, it… Read More »
I got the error message below in my java producer on Mac laptop It happened on my laptop and I didn’t have time to investigate this so I just replaced ‘snappy’ compression-type value with ‘none’ in kafka producer configuration A small reminder: compression is used on producer and consumer side to decrease size of trasfered data through additional… Read More »
Using applications without security configuration is preferable for local development environments (in non-production environments, we still want to use authentication to keep environments similar), but companies require strict security parameters. In this post, we will consider available options for authentication in Confluent Schema Registry. In the source code, there is a special CachedSchemaRegistryClient class that is reused by… Read More »