Monitoring is the act of looking on the processes or systems for performance, supervision and surveillance.
1
vote
2answers
42 views
Application to monitor software activities
I am doing black box testing on a software which is installed in my local machine. I want to analyze and see the list of files and registry entries that software create/modify/delete. Basically ...
-5
votes
0answers
43 views
Looking for a software that will help me set security policy on my network [closed]
I'm looking for a software that will help me set security policy on my network.
Can anyone please recommend me on some network monitoring & management tool/s that will:
Allow me to block ...
-5
votes
1answer
49 views
ATM Network management with Gasper (NCR) [closed]
For those of you who are running Gasper to monitor your ATMs, can you
explain to me how it works? Does Gasper directly connect to the ATM every
10 minutes or something and dispatches technicians if ...
-6
votes
0answers
18 views
Security Analytics for Laptop logs [closed]
I am looking setting up a dashboard which monitors all the activities on any Client machine within my organisation. There are around 10000 clients and need data related to Sites accesssed, ...
-3
votes
1answer
63 views
Web GUI for Snort + ModSecurity [closed]
I'm trying to find a suitable (or easily modifiable) web GUI for snort + modsecurity logs. As far as I know, Splunk can do that by installing the snort and modsecurity plugins. Is there any other ...
1
vote
3answers
141 views
How to remote monitor a computer network traffic?
I would like to know if it is possible to remote monitor the incoming and outcoming network traffic of a specific IP from my network. I need to log the time, ip numbers and port that contact the ...
5
votes
2answers
132 views
Need a software that can monitor and log network traffic of installed applications
I need to monitor and log network activities of a specific software installed on my system.
I know there are lots of network monitoring software out there, even system explorer has one built in.
I ...
0
votes
2answers
109 views
Keyloggers - Ports used by keyloggers
According to this article, keyloggers usually make use of the FTP ports and email ports:
http://rbmikrotik.blogspot.com/2011/07/how-to-block-port-frequently-keylogger.html
My question is, can a ...
-3
votes
1answer
94 views
What's the best IDS for my machine? [closed]
I'm looking for free IDS that sniffs to traffic in real time.. Can anyone help me !
0
votes
1answer
103 views
Tracking information on HTTPS connection
My organization uses cyberoam firewall. They are monitoring all activities including my search text in Google, Wikipedia etc. So recently i changed to HTTPS versions and now using HTTPS connections of ...
0
votes
0answers
21 views
Steganalysis of outgoing traffic [duplicate]
Possible Duplicate:
Detecting Steganography in images
Is there any commercial traffic monitoring systems that implements steganalysis and could issue a warning upon suspicious file transfer ...
2
votes
1answer
154 views
How should I audit and monitor shared TCP ports in Windows?
Windows has a feature called .NET TCP Port Sharing which allows different .NET applications to share the same TCP/IP port.
I would like to monitor the source and destination connections of each ...
0
votes
1answer
122 views
How to Transfer packets from one ethernet card to another [closed]
I have a desktop with two ethernet(etho,eth1) cards and OSSIM installed in it. I have a laptop with webmin installed, where i want to write rules for transferring packets from eth1 to eth0. Both the ...
3
votes
2answers
641 views
How effectively can ISPs detect illegal file sharing?
Recently the USA passed a law requiring ISPs to spy on their customers' internet connections to check for illegal file sharing. I assume that they would do this by sniffing packets, but doesn't this ...
5
votes
4answers
934 views
How to detect eavesdropping by your ISP
I've noticed some funny behavior lately with my home Internet connection such as connections dropping frequently, rate limiting occuring, and packet loss.
I know how to get around this online, use a ...
3
votes
3answers
183 views
Monitoring for security threats
I host and maintain several websites. The users pay to have their sites maintained and secured. However, with the amount of web applications like joolma, wordpress, ect... and their plugins, I need a ...
10
votes
6answers
5k views
How can I identify my phone call is being tracked or tapped?
When I read about mobile call tracing, the hackers/security experts track and record mobile phone calls somehow.
Is it possible for us to identify that our call is tracked by someone or heard by ...
5
votes
2answers
201 views
Suspicious 'upstream' traffic
We are seeing unusual amounts of traffic heading upstream on our WAN connection, during the day our system can exceed (or attempt to exceed) the 1Mbps limit imposed on the connection.
I have PRTG ...
12
votes
5answers
375 views
Neural networks & anomaly detection
Neural networks, with their ability to learn behavioural patterns from arbitrary data, seem like a natural way to deal with intrusion detection. There are many academic papers on the topic which ...
4
votes
1answer
272 views
Server monitoring for security
We do a lot of web hosting management and have started to get into selling server management packages. However, we want to start monitoring servers for security related threats.
Our clients may use ...
1
vote
0answers
117 views
GSM monitoring system [closed]
Please help me clarify with GSM monitoring system (active style and semi-active).
I cannot differentiate these 2 types of monitoring systems. If anyone can tell me exactly how they operate?
Thank you ...
0
votes
1answer
115 views
Monitor traffic
I use my laptop as Access point for all other devices around me. Is there any way that i can monitor the data/browsing that other people are through my system's access point. As I can think all the ...
5
votes
2answers
568 views
Snort Sensor Placement
I have a snort sensor monitoring some of my network being fed from a mirrored port. This mirrored session only monitors traffic between the firewall and peering switch. Since this just sees traffic ...
0
votes
1answer
642 views
Monitor incoming TCP/UDP flood attack and graph it
I'm preparing a presentation on a security issue and want to include a demonstration. It won't be in real time, I just need to show some pictures of the results.
I have some VPSes that will perform a ...
1
vote
2answers
338 views
What are the most common files to check with File integrity monitoring software?
I have a file integrity monitoring suite and in it I have to select specific files and folders for it to monitor. There are some obvious services that I want monitored like our web-server.
Is there a ...
3
votes
6answers
2k views
monitoring outgoing network traffic
The graphs for one server that I am using are showing consistent 7.5 kb/s outgoing network traffic that started a few days ago.
How can I monitor/log/capture/analize this traffic to see what is it,
...
3
votes
2answers
354 views
How do companies track employee usage on corporate computers?
For companies that needs to monitor computer usage by employees, what systems are usually set up to do so (monitoring software, hardware, etc.)?
What are the financial costs involved in setting up ...
1
vote
2answers
460 views
Strange Event Log Entry - Windows Server 2008
Reviewing some logs recently, and came across a strange failure in our Windows 2008 DC.
An account failed to log on.
Subject:
Security ID: NULL SID
Account Name: ...
4
votes
2answers
802 views
Virus detection with Process Explorer
Can Process Explorer ( Windows apparently) detect a virus? Is it even possible?
5
votes
2answers
5k views
Monitoring file access on Windows
I need a way to monitor user file access on windows. What I need is:
monitoring of user opening, modifying (don't need to know what the changes were, just that a file was modified), copying, pasting ...
15
votes
5answers
505 views
Safe way to authenticate (multi-factor authentication?) while being monitored?
(I'm trying for a bit more precise answer, particularly with regard to multi-factor authentication, than I received for "Safe way to use a computer that has spyware/keylogger installed?" on SU.)
...
5
votes
3answers
366 views
Best practice for creating an initial IPS policy
I see that most IPS available in the market comes with a basic pre-defined policy which administrators can base on when creating their initial IPS policy. However, these policy may be insufficient and ...
4
votes
3answers
259 views
Information gathering before deploying a Network IPS
I understand that most NIPS these days have either rules or signatures built in to them and perhaps gathering information prior to deployment may help in fine-tuning the rules / signature once the IPS ...
1
vote
2answers
181 views
Tracking a user account
Hi
I suspect a former employee of the company I work for still have access to the servers, in fact I’m sure he does. When he left the company in December he neglected to remove his personal files ...
5
votes
2answers
103 views
Monitoring a specific application for creation or modification of files
I don't know if I'm looking for a file integrity monitoring software here.
Basically let's say we have firefox or chromium, let's say the user is watching a youtube video, then we'll find that video ...
6
votes
5answers
286 views
What's the real reason behind blocking the social sites? Even legitimate sites like twitter which acts as a knowledge repository?
I see some sites are blocked for IT security at schools, colleges and offices. But, why do some obvious good sites are blocked too?
8
votes
4answers
257 views
What free tools or techniques exist to discover anomalies in network flows?
I have been using FlowMatrix. What do others do on the cheap?
