Work Project Inventory

MSCHAPv2 Migration

6-sheet Standard Report. ~6,227 devices, 5 waves. Window 05-04 to 05-30 CLOSED. Confirm final report status with team.

2026-04-17

53

P0 - WINDOW CLOSED

Docs · d001/projects/mschapv2-migration/

ASA VPN: Okta RADIUS → Entra SAML

5-phase migration plan built 06-09. ASA baseline captured (2 tunnel groups). 6 ISE screenshots. Tony Sun (ASA), Justin Halbmann (Entra/Okta), Evan (ISE). VPN cert expires 07-28. PDF deliverable ready.

2026-06-09

0

P1 - Active

d001/projects/asa-vpn-okta-to-entra/

Linux Research (Dr. Shahab / Xianming Ding)

EAP-TLS for Linux workstations, dACL, UFW. Certificate "password required" blocker. No progress as of 2026-06-18.

2026-03-01

109

P0 - BEHIND

Docs · d001/projects/linux-research/

Research Segmentation

All research endpoints to Untrusted VLAN. Includes Linux + other endpoints. CISO decision still pending as of 2026-06-18.

2026-03-01

109

P0 - BLOCKED

Docs · d001/projects/research-segmentation/

ChromeOS EAP-TLS

SCEP + certificate deployment for Chromebooks. Victor + Paul testing. Related to MSCHAPv2 Wave 1.

2026-02-01

—

P1 - In Progress

Docs

Vocera EAP-TLS Supplicant Fix

~10 phones failing 802.1X, missing supplicant config. Schedule with clinical engineering.

2026-03-12

89

P1 - TODO

iPSK Manager HA

Pre-shared key automation. DB replication issues, no SSL/HTTPS. Ben Castillo / InfoSec.

2026-02-01

—

P1 - BEHIND

Docs

Strongline Gateway

8 devices in wrong identity group. David Rukiza assigned.

2026-03-16

85

P0 - TODO

Spikewell BYOD VPN

dACL SQL, AD group integration.

2026-02-01

—

P1 - Active

Enterprise Linux 802.1X / Remediation

Enterprise-wide Linux 802.1X remediation. Inventory SQL queries via dc-run-sql. Related to Linux Research.

2026-06-02

20

P1 - Active

ISE Annual Cert Renewal

Annual ISE certificate renewal. 52 days to expiry as of 06-02. DigiCert CA, CSR generation. Blocks ASA VPN migration.

2026-06-02

20

P1 - Active

ISE Patch 10 (CVE-2026-20147 CVSS 9.9)

ISE 3.2 Patch 10. Supersedes Patch 9. 98 days on a CVSS 9.9. Still unpatched, no maintenance window scheduled as of 2026-06-18.

2026-03-12

98

P0 - OVERDUE

Mandiant Remediation

Guest ACL hardening, SIEM report, findings status.

2026-04-16

54

P0 - Active

d001/projects/mandiant-remediation/

Guest Redirect ACL

Guest redirect ACL work. Mandiant remediation finding.

2026-05-12

28

P0 - TODO

VNC Blocking/Removal

VNC inventory and removal across endpoints. Runbook created 06-09 (Windows/Linux/network).

2026-05-01

39

P0 - Active

Docs

HHS Regulatory Compliance

New HHS security policies implementation.

2026-03-01

—

P2 - NOT STARTED

EDR Migration (AMP → Defender)

Endpoint protection consolidation.

2026-03-01

—

P2 - NOT STARTED

Cisco Secure Endpoint Replacement

Cisco Secure Endpoint replacement project. PS Code: 000017633.

2026-01-01

—

P1 - Active

ISE 3.4 Migration

Upgrade from ISE 3.2p9 to 3.3+/3.4. SW maintenance ended 2025-10-31.

2026-01-01

—

P1 - Blocked

d001/projects/ise-34-migration/

Switch Upgrades

IOS-XE fleet update (C9300, 3560CX).

2026-01-01

—

P1 - Pending

TCP Clocks Deployment

Batch 1: 7 clocks validated (OUI 40:AC:8D). Batch 2 (06-09): 9 new MACs (OUI 40:AC:BD) added via ERS. 1 one-off reassigned. New switch deployed without RADIUS/AAA — clocks can’t authenticate. Switch onboarding template documented.

2026-04-22

48

P0 - Active (switch blocking)

d001/projects/tcp-clocks/

IoT Dr. Kim

Sleep study devices, watches recurrence. 5 incident versions in d001. Validate iPSK enrollment.

2026-04-15

55

P0 - Recurring

d001/investigations/2026-04-15-iot-dr-kim-sleep-study/

Murus Portae (WAF/FMC)

FMC cert expired, ACP returns zero rules. Zone map, architecture D2, FMC API reference.

2026-04-16

54

P0 - Investigating

d001/projects/murus-portae/

DMZ Migration

DMZ migration planning.

2026-03-01

—

P2 - Planned

d001/projects/dmz-migration/

RAD Projects

New project scaffolded 06-09.

2026-06-09

13

TBD

d001/projects/rad-projects/

Tube System Upgrade

ISE batch onboard for tube system. 15 MACs staged for re-run. iTrack 3528165.

2026-05-01

52

P1 - Active

SIEM QRadar → Sentinel

Lead role. Monad selected. Architecture decision 06-09: rsyslog as collection tier → Monad → Sentinel. ISE lab pipeline guide created. DCR still needed — Victor + Mauricio.

2026-04-10

60

P0 - Active

Docs · d001/projects/siem-qradar-to-sentinel/

Monad Pipeline

rsyslog (CHLXSYSLOG01) → Monad → Sentinel. ASA lab logs flowing. 06-09: ISE lab → rsyslog → Monad execution guide created (6 steps, 10 API calls). Disk-assisted queue provides backpressure.

2026-03-11

90

P0 - Active

d001/projects/monad-pipeline/

k3s NAT Verification

NAT rule 170 for 10.42.0.0/16. Test or defer to Q3. Blocks Wazuh.

2026-03-09

92

P0 - BLOCKING

Wazuh Indexer Recovery

Restart pod after NAT confirmed. Blocked by k3s NAT.

2026-03-09

92

P0 - Blocked

Centralized rsyslog Server

Central rsyslog collector for SIEM pipeline. Disk-assisted queue for backpressure. Parent: SIEM Upgrade FY26.

2026-06-04

18

P1 - Active

Sentinel KQL Development

Build KQL proficiency for Sentinel. Distinguish from team. Parent: SIEM Upgrade FY26.

2026-05-01

—

P1 - Active

ISE MnT Messaging Service

Enable ISE Messaging Service for UDP syslogs. Low risk. Bundle with Patch 10.

2026-03-12

102

P2 - Bundle

NebulaONE AI Platform

Enterprise AI on Azure. C-level visibility. Cloudforce vendor.

2026-03-01

—

P1 - Active

Docs

Azure Legacy Migration

Modern landing zone architecture. Team effort.

2026-01-01

—

P2 - In Progress

Disaster Recovery

DR planning and queries.

2026-03-01

—

P2 - Planned

d001/projects/disaster-recovery/

Abnormal Security

CR-2026-05-07. Implemented 05-13. 06-09: Full policy review — 20-section EOP validation, Hoxhunt SCL-1 investigation, sclizer junk triage, Outlook reactions audit. ESA migration expansion in progress.

2026-05-07

33

Active — post-validation

d001/projects/abnormal-security/

Recognition Kiosk (Poppulo)

Recognition Kiosk — IS Labor. PS Code: 000018166.

2026-01-01

—

P1 - Active

Spectrum TV/GetWell iPad Refresh

iPad refresh + Android handheld scanners ISE policy scoping. PS Code: 000016444.

2026-01-01

—

P1 - Active

Windows 11 Device Hardening

Windows 11 device hardening project. PS Code: 000017706.

2026-01-01

—

P1 - Active

Network Diagram Library

Network diagrams and queries.

2026-03-01

—

P2 - Active

d001/projects/network-diagram-library/

BMS Device Inventory

Building management systems inventory and queries.

2026-04-01

—

P1 - Active

d001/projects/bms-device-inventory/

BMS Controller Segmentation

Migrated from Principia LaTeX 06-09. 12 AsciiDoc partials, 5 Mermaid diagrams, 4 PDFs. ISE policy (77 device models), dACL (28 ACEs), Claroty integration. d001 encrypted.

2026-03-24

77

P2-High - Active

d001/projects/bms-controller-segmentation/

Downtime Computers

Downtime computer queries and tracking.

2026-04-01

—

P1 - Active

d001/projects/downtime-computers/

Firewall Audit

FMC discovery, zone map, audit queries.

2026-04-16

—

P1 - Active

d001/projects/firewall-audit/

ISE Hardware Refresh

SNS-3755-K9 — no refresh needed. Upgrade to 3.3+ before EOS 2028-10-31.

2026-02-01

—

✅ COMPLETE

Docs

InfoSec Reporting Dashboard

PowerBI metrics dashboard for executives.

2026-03-01

—

P2 - NOT STARTED

iTrack → Jira (Atlassian) Migration

ITSM migration from iTrack to Jira/Atlassian.

2026-06-19

3

P2 - Active

P0

ISE Patch 10 — schedule maintenance window (CVSS 9.9, 98 days)

Immediate

P0

MSCHAPv2 — confirm report status, window closed 05-30

This week

P0

k3s NAT — test or defer to Q3 (blocks Wazuh, 92 days)

This week

P0

TCP Clocks — new switch needs RADIUS/AAA config + ISE NAD entry

This week

P1

ASA VPN migration — share plan PDF with Tony Sun + Justin Halbmann

This week

P1

ISE lab → rsyslog → Monad — execute 6-step pipeline guide

This week

P1

Abnormal — continue EOP policy review, fill output blocks

Ongoing