The Conditional Access blade in the Microsoft Entra admin center. Screenshot from Microsoft’s Conditional Access overview documentation, (c) Microsoft. TL;DR # I was given six hours to review an Entra Conditional Access implementation and report the issues I found. It was my first look at Conditional Access. What made it manageable was working the referenced objects before the policies, then exporting the policies to JSON and flattening them into a single CSV so the whole set could be read as a table instead of one blade at a time. Both halves of that are published in the Entra Conditional Access Review repository: the evaluation process, with the questions to answer about each object type, and the PowerShell script that converts the exported policies into the CSV you review.
From an empty repository to a useful Cisco ASA firewall review tool in about a day. Here is how it works, and where I had to overrule the AI.
TL;DR # I built an offline, read-only tool that reviews a Cisco ASA firewall configuration and reports security findings. Point it at a show running-config dump and it returns a prioritized report: insecure management access, weak or deprecated crypto, overly permissive access rules, missing logging and hardening, and cleartext secrets. Every finding is backed by the exact config line that proves it, or a clear marker when the problem is a missing setting. The review runs entirely on your machine, with no internet and no device access, so nothing leaves the host. The tool is public at github.com/cutaway-security/cisco-asa-review.
Originally posted on the Claroty Nexus Community as “Managing Cyber Risk in Industrial, Automated Environments” on February 23, 2023.
Environments with industrial or automation control systems are built to ensure process availability and resilience. Availability is defined as “the quality of being able to be used or obtained” and resilience as “the capacity to recover quickly from difficulties; toughness.” These days, these definitions do not necessarily take into consideration the rampant connectivity happening today within automation environments.
