Whom Does the Machine Serve?

Jonathan Pageau utilizes ancient mythology and the Arthurian legend of the Holy Grail to critique the modern obsession with artificial intelligence. He argues that contemporary society is caught in a "Moolak trap," where competitive pressure forces us to develop dangerous technologies that may ultimately lead to a societal wasteland. Pageau warns that we have forgotten to ask the essential question of whom these tools serve, resulting in a world where humans are becoming subservient to their own inventions. Rather than seeking technical or planetary escapes, he suggests the only solution is a return to the humanities and the cultivation of personal virtue and wisdom. By choosing to become more fully human and intentional about our service to higher values, we can maintain sovereignty over a machine-dominated future.

Single Scan Multi Action (SSMA) - Zscaler

 Single Scan Multi Action (SSMA)  technology, which allows us to make policy decisions quickly and efficiently without negatively impacting the user’s experience. 

 

Zscaler Certified Solutions Engineer - ZCSE

 

Rise of blockchain C2 - Zscaler

 SecOps Weekly: 4 new threats and the rise of blockchain C2 - YouTube

Understanding Zscaler's Cyberthreat Protection Solution

 

Microsoft Remote option - finally

 

GPOZaurr

 https://github.com/EvotecIT/GPOZaurr
# Windows 10 Latest
Add-WindowsCapability -Online -Name 'Rsat.ActiveDirectory.DS-LDS.Tools~~~~0.0.1.0'
Add-WindowsCapability -Online -Name 'Rsat.GroupPolicy.Management.Tools~~~~0.0.1.0'

Install-Module -Name GPOZaurr -AllowClobber -Force

Update-Module -Name GPOZaurr

winget all

 winget upgrade --all --silent --accept-package-agreements --accept-source-agreements

 

 

 

<#
.SYNOPSIS
    Automated Winget multi-package updater with detailed console streaming and disk logging.
.DESCRIPTION
    Enumerates available winget updates, processes each package sequentially with custom
    verbose outputs, captures standard out/err streams, and logs results under C:\Temp.
#>

[CmdletBinding()]
param()

# --- 1. Environment & Logging Setup ---
$ErrorActionPreference = 'Continue'
$LogDirectory = "C:\Temp"
$Timestamp    = Get-Date -Format "yyyyMMdd_HHmmss"
$MainLogFile  = Join-Path -Path $LogDirectory -ChildPath "Winget_Upgrade_$Timestamp.log"
$WingetLogDir = Join-Path -Path $LogDirectory -ChildPath "Winget_InstallLogs_$Timestamp"

# Ensure directories exist
if (-not (Test-Path -Path $LogDirectory)) {
    New-Item -ItemType Directory -Path $LogDirectory -Force | Out-Null
}
if (-not (Test-Path -Path $WingetLogDir)) {
    New-Item -ItemType Directory -Path $WingetLogDir -Force | Out-Null
}

function Write-Log {
    param (
        [Parameter(Mandatory = $true)]
        [string]$Message,
        [ValidateSet('INFO', 'SUCCESS', 'WARN', 'ERROR')]
        [string]$Level = 'INFO'
    )
    
    $TimeStr = Get-Date -Format "yyyy-MM-dd HH:mm:ss"
    $FormattedMessage = "[$TimeStr] [$Level] $Message"
    
    # Write to master disk log
    Add-Content -Path $MainLogFile -Value $FormattedMessage
    
    # Write styled output to host
    switch ($Level) {
        'INFO'    { Write-Host $FormattedMessage -ForegroundColor Cyan }
        'SUCCESS' { Write-Host $FormattedMessage -ForegroundColor Green }
        'WARN'    { Write-Host $FormattedMessage -ForegroundColor Yellow }
        'ERROR'   { Write-Host $FormattedMessage -ForegroundColor Red }
    }
}

Write-Log "Starting automated Winget upgrade workflow..." 'INFO'
Write-Log "Master log: $MainLogFile" 'INFO'
Write-Log "Native installer logs: $WingetLogDir" 'INFO'

# --- 2. Administrative Privilege Validation ---
$IsAdmin = ([Security.Principal.WindowsPrincipal][Security.Principal.WindowsIdentity]::GetCurrent()).IsInRole([Security.Principal.WindowsBuiltInRole]::Administrator)
if (-not $IsAdmin) {
    Write-Log "Execution context is NOT elevated. System-wide/machine installs may fail." 'WARN'
}

# --- 3. Discover Available Updates ---
Write-Log "Querying WinGet repository for available updates..." 'INFO'

$UpgradeListRaw = & winget upgrade --include-unknown --accept-source-agreements 2>&1
$UpgradeListRaw | Out-File -FilePath (Join-Path $LogDirectory "Winget_RawQuery_$Timestamp.log")

# Isolate package IDs using Winget's structured output format
$UpgradablePackages = @()
$SeparatorFound = $false

foreach ($line in $UpgradeListRaw) {
    if ($line -match '^-{4,}') {
        $SeparatorFound = $true
        continue
    }
    if ($SeparatorFound -and $line -match '\S+') {
        # Match columns: Name, Id, Version, Available, Source
        $Tokens = ($line -split '\s{2,}') | Where-Object { $_ -ne '' }
        if ($Tokens.Count -ge 4) {
            $UpgradablePackages += [PSCustomObject]@{
                Name             = $Tokens[0].Trim()
                Id               = $Tokens[1].Trim()
                InstalledVersion = $Tokens[2].Trim()
                AvailableVersion = $Tokens[3].Trim()
            }
        }
    }
}

if ($UpgradablePackages.Count -eq 0) {
    Write-Log "No packages require upgrading. System is fully patched." 'SUCCESS'
    exit 0
}

Write-Log "Discovered $($UpgradablePackages.Count) package(s) with available updates." 'INFO'

# --- 4. Sequential Package Upgrades with Telemetry ---
$SuccessCount = 0
$FailureCount = 0

foreach ($pkg in $UpgradablePackages) {
    Write-Host "`n" + ("=" * 70) -ForegroundColor DarkGray
    Write-Log "Upgrading [$($pkg.Name)] (ID: $($pkg.Id)) | Current: $($pkg.InstalledVersion) -> Target: $($pkg.AvailableVersion)" 'INFO'
    
    $SanitizedId = $pkg.Id -replace '[\\/:*?"<>|]', '_'
    $InstallerLog = Join-Path -Path $WingetLogDir -ChildPath "$($SanitizedId).log"

    # Direct native engine parameters
    $WingetArgs = @(
        "upgrade",
        "--id", "`"$($pkg.Id)`"",
        "-e",
        "--silent",
        "--accept-package-agreements",
        "--accept-source-agreements",
        "--log", "`"$InstallerLog`""
    )

    $ProcessStartInfo = New-Object System.Diagnostics.ProcessStartInfo
    $ProcessStartInfo.FileName = "winget.exe"
    $ProcessStartInfo.Arguments = $WingetArgs -join " "
    $ProcessStartInfo.RedirectStandardOutput = $true
    $ProcessStartInfo.RedirectStandardError = $true
    $ProcessStartInfo.UseShellExecute = $false
    $ProcessStartInfo.CreateNoWindow = $true

    $Process = New-Object System.Diagnostics.Process
    $Process.StartInfo = $ProcessStartInfo

    # Start and monitor process execution
    $Process.Start() | Out-Null
    
    $StdOut = $Process.StandardOutput.ReadToEnd()
    $StdErr = $Process.StandardError.ReadToEnd()
    $Process.WaitForExit()

    $ExitCode = $Process.ExitCode

    # Log command telemetry
    if ($StdOut) { Add-Content -Path $MainLogFile -Value "`n--- STDOUT [$($pkg.Id)] ---`n$StdOut" }
    if ($StdErr) { Add-Content -Path $MainLogFile -Value "`n--- STDERR [$($pkg.Id)] ---`n$StdErr" }

    # Validate results (0 = Success, -1978335189 / 0x8A15002B = No update available/already updated)
    if ($ExitCode -eq 0) {
        Write-Log "Successfully upgraded [$($pkg.Name)]" 'SUCCESS'
        $SuccessCount++
    }
    elseif ($ExitCode -eq -1978335189) {
        Write-Log "[$($pkg.Name)] is already up to date or has no applicable update." 'WARN'
    }
    else {
        Write-Log "Failed to upgrade [$($pkg.Name)]. Exit Code: $ExitCode" 'ERROR'
        Write-Log "Check package installer log: $InstallerLog" 'WARN'
        $FailureCount++
    }
}

# --- 5. Execution Summary ---
Write-Host "`n" + ("=" * 70) -ForegroundColor DarkGray
Write-Log "Upgrade session completed." 'INFO'
Write-Log "Total: $($UpgradablePackages.Count) | Succeeded: $SuccessCount | Failed: $FailureCount" $(if ($FailureCount -eq 0) { 'SUCCESS' } else { 'WARN' })
Write-Log "All logs stored under $LogDirectory" 'INFO' 

5 Steps to deploy your zscaler app connector

 

Report AI Slop Button

 

 

Zero Trust for Users Masterclass: The Playbook for M&A Day-1 Secure Access

dsd

 

 

 

 

 

Overview

The image is a screenshot from a presentation titled "Zero Trust for Users Masterclass: The Playbook for M&A Day-1 Secure Access," presented by Zscaler (featuring speaker Corey Burks).

It outlines "The Zscaler M&A Playbook," a step-by-step timeline strategy for integrating systems, applications, and security controls during a Mergers & Acquisitions (M&A) process to achieve secure access by Day 1.

Timeline Breakdown

1. Pre-planning Phase (Yellow)

   • Focus: Governance, due diligence, and foundational setup.

   • Key Tasks: IT due diligence, obtaining legal approval, establishing points of contact, and assessing legal and compliance implications.

2. 30 Days Prior to Close (Light Blue)

   • Focus: Asset identification and placement planning.

   • Key Tasks: Identifying critical applications ("crown jewels") and planning placement locations for Zscaler App Connectors.

3. 21 Days Prior to Close (Medium Blue)

   • Focus: Automated infrastructure deployment.

   • Key Tasks: Deploying App Connectors using Terraform within the target environment (noted here as the Red Canary environment).

4. 15 Days Prior to Close (Dark Blue)

   • Focus: Validation and testing.

   • Key Tasks: Testing Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA) configurations in an isolated test environment to verify functionality without risking production.

5. 7 Days Prior to Close (Magenta)

   • Focus: Identity and access control policy mapping.

   • Key Tasks: Defining Role-Based Access Control (RBAC) policies across all new ZPA traffic flows to enforce least-privilege principles.

6. Day-1 and Beyond (Green)

   • Focus: Execution and operationalization.

   • Key Tasks: Go Live — Enabling secure zero-trust user access on Day 1 without needing complex network convergence, VPN bridging, or routing overhauls.