Posts

Showing posts from 2014

ArcSight Tips - Rule Actions Order

Image
Have you ever wondered why ArcSight put those little buttons in rule actions?! This is not accidental and they have a subtle purpose. Only a real-time example can clarify why they are needed and how much they matter. Let's say we have events coming in the ESM at a high rate, and we have a Use Case that basically uses 2 rules and 2 active lists to get what we needed. R1 evaluates base events and if NotInAL2 then actions by adding an entry in AL1 R2 evaluates against conditons DeviceEventClassID=activelist:103 & DCN1>=10 and if they match, then actions by removing from first list and add in second one. And this is where the order counts. Picture above displays the right order. Let's think for a second what would be the implications if it was the the other way around. If we were to first choose to add to AL2 then to remove from AL1, what happens is in matter of miliseconds in the Correlation Engine although it may seem the entry was added to AL2 and that won&#

Rezidenta permanenta vs.cetatenie in UK

Iti confera in principiu dreptul de a sta permanent in UK, intrucat ti l-ai dobandit in mod corect "supravietuind" un numar de ani in aceasta tara. Cetatenia nu mai este privita (cel putin in ultima vreme) ca pe un lucru de obtinut sau strict necesar, cu atat mai mult cu cat taxele si conditiile de dobandire ale ei sunt destul de greu de indeplinit, cel putin judecand dupa cerintele guvernului din UK. In aceasta tara nu exista acte de identitate precum cele din Romania. Singura dovada certa a cetateniei britanice o ofera doar pasaportul. Permisul de conducere se foloseste intern ca dovada a residentei termporare, in raporturi contractuale, gen telefonie mobila, internet, plati utilitati. Accesul la dreptul de cetatenie britanica s-a innasprit in ultimii ani, cel putin din ce am gasit pe Internet. Se pare ca in trecut erau necesari doar 4 ani de locuit legal in UK pentru a fi eligibil sa depui actele de cetatenie, acum acest prag a fost ridicat gradual la 6 ani conform site-u