Since the release of Osquery 4.3.0 a new table called windows_security_center has been added that reports on the current status of Windows Update. The windows_security_center table supports more than just the auto update status of Windows. It also supports the following security center checks: Firewall status firewall The health of the…

Presently when deploying Zercurity on Kubernetes. Zercurity requires the use of a shared disk in order to build and distribute packages, store uploaded content and process other various objects. Whilst you can configure Zercurity to make use of an NFS share or an AWS S3 bucket. You can also keep…

By default the dockerised version of Zercurity provides a self contained PostgreSQL container as its primary database. Once your deployment starts to grow. The initial configuration of PostgreSQL will start to become a bottle neck. …

We ran into an interesting issue recently with our PostgreSQL cluster running atop Kubernetes and managed with pgo. Where no primary node was elected post a node eviction. We’d recently performed an upgrade of our Kubernetes cluster from 1.18.X to 1.19.X and the containers were evicted from the older nodes…

Osquery provides inbuilt support for multiple external logging capabilities one of those is AWS Firehose via Kinesis. AWS Kinesis in their own words. Is a a real-time, fully managed, and scalable platform for streaming data on Amazon Web Services. AWS Firehose, however, is a service to load streaming data into…

A long over due update for this year so far. However, we’ve been busy working on three new feature sets. The first of which, we’re releasing today. Identity and access management (IAM) control. Identity and access management (IAM) Up until this point its only been possible to give users full access to the platform. With…

Whats with all the Kubernetes posts? Well, for sometime Zercurity has supported Kubernetes on-premise. However, we’re now bringing it to GitHub alongside our docker-compose setup and soon our helm build. Why Kubernetes? Whilst docker-compose is great for smaller and PoC deployments. If you’re looking to support thousands and thousands of clients in…

Following from our last three posts. There are three primary ways of standing up Kubernetes on vSphere. Each with there own benefits and drawbacks. This post will be the final post of our tree part post looking at VMware’s TKGS. Tanzu Kubernetes Grid (TKG) Deploy Kubernetes via Tanzu (TKG) without the…

Following from our last two posts. There are three primary ways of standing up Kubernetes on vSphere. Each with there own benefits and drawbacks. This post will be the second of three looking at VMware’s TKGS. Tanzu Kubernetes Grid (TKG) Deploy Kubernetes via Tanzu (TKG) without the need for a licensed…