Monitoring is the act of looking on the processes or systems for performance, supervision and surveillance.
15
votes
5answers
531 views
Safe way to authenticate (multi-factor authentication?) while being monitored?
(I'm trying for a bit more precise answer, particularly with regard to multi-factor authentication, than I received for "Safe way to use a computer that has spyware/keylogger installed?" on SU.)
...
12
votes
6answers
7k views
How can I identify my phone call is being tracked or tapped?
When I read about mobile call tracing, the hackers/security experts track and record mobile phone calls somehow.
Is it possible for us to identify that our call is tracked by someone or heard by ...
12
votes
5answers
419 views
Neural networks & anomaly detection
Neural networks, with their ability to learn behavioural patterns from arbitrary data, seem like a natural way to deal with intrusion detection. There are many academic papers on the topic which ...
9
votes
4answers
258 views
What free tools or techniques exist to discover anomalies in network flows?
I have been using FlowMatrix. What do others do on the cheap?
6
votes
5answers
287 views
What's the real reason behind blocking the social sites? Even legitimate sites like twitter which acts as a knowledge repository?
I see some sites are blocked for IT security at schools, colleges and offices. But, why do some obvious good sites are blocked too?
6
votes
2answers
5k views
Monitoring file access on Windows
I need a way to monitor user file access on windows. What I need is:
monitoring of user opening, modifying (don't need to know what the changes were, just that a file was modified), copying, pasting ...
5
votes
4answers
1k views
How to detect eavesdropping by your ISP
I've noticed some funny behavior lately with my home Internet connection such as connections dropping frequently, rate limiting occuring, and packet loss.
I know how to get around this online, use a ...
5
votes
2answers
109 views
Monitoring a specific application for creation or modification of files
I don't know if I'm looking for a file integrity monitoring software here.
Basically let's say we have firefox or chromium, let's say the user is watching a youtube video, then we'll find that video ...
5
votes
2answers
206 views
Suspicious 'upstream' traffic
We are seeing unusual amounts of traffic heading upstream on our WAN connection, during the day our system can exceed (or attempt to exceed) the 1Mbps limit imposed on the connection.
I have PRTG ...
5
votes
2answers
637 views
Snort Sensor Placement
I have a snort sensor monitoring some of my network being fed from a mirrored port. This mirrored session only monitors traffic between the firewall and peering switch. Since this just sees traffic ...
5
votes
3answers
382 views
Best practice for creating an initial IPS policy
I see that most IPS available in the market comes with a basic pre-defined policy which administrators can base on when creating their initial IPS policy. However, these policy may be insufficient and ...
5
votes
2answers
200 views
Need a software that can monitor and log network traffic of installed applications
I need to monitor and log network activities of a specific software installed on my system.
I know there are lots of network monitoring software out there, even system explorer has one built in.
I ...
4
votes
2answers
861 views
Virus detection with Process Explorer
Can Process Explorer ( Windows apparently) detect a virus? Is it even possible?
4
votes
3answers
92 views
Application to monitor software activities
I am doing black box testing on a software which is installed in my local machine. I want to analyze and see the list of files and registry entries that software create/modify/delete. Basically ...
4
votes
3answers
263 views
Information gathering before deploying a Network IPS
I understand that most NIPS these days have either rules or signatures built in to them and perhaps gathering information prior to deployment may help in fine-tuning the rules / signature once the IPS ...
4
votes
1answer
297 views
Server monitoring for security
We do a lot of web hosting management and have started to get into selling server management packages. However, we want to start monitoring servers for security related threats.
Our clients may use ...
4
votes
3answers
387 views
What are the most common files to check with File integrity monitoring software?
I have a file integrity monitoring suite and in it I have to select specific files and folders for it to monitor. There are some obvious services that I want monitored like our web-server.
Is there a ...
3
votes
6answers
3k views
monitoring outgoing network traffic
The graphs for one server that I am using are showing consistent 7.5 kb/s outgoing network traffic that started a few days ago.
How can I monitor/log/capture/analize this traffic to see what is it,
...
3
votes
2answers
768 views
How effectively can ISPs detect illegal file sharing?
Recently the USA passed a law requiring ISPs to spy on their customers' internet connections to check for illegal file sharing. I assume that they would do this by sniffing packets, but doesn't this ...
3
votes
3answers
186 views
Monitoring for security threats
I host and maintain several websites. The users pay to have their sites maintained and secured. However, with the amount of web applications like joolma, wordpress, ect... and their plugins, I need a ...
3
votes
2answers
368 views
How do companies track employee usage on corporate computers?
For companies that needs to monitor computer usage by employees, what systems are usually set up to do so (monitoring software, hardware, etc.)?
What are the financial costs involved in setting up ...
2
votes
1answer
163 views
How should I audit and monitor shared TCP ports in Windows?
Windows has a feature called .NET TCP Port Sharing which allows different .NET applications to share the same TCP/IP port.
I would like to monitor the source and destination connections of each ...
1
vote
2answers
184 views
Tracking a user account
Hi
I suspect a former employee of the company I work for still have access to the servers, in fact I’m sure he does. When he left the company in December he neglected to remove his personal files ...
1
vote
3answers
190 views
How to remote monitor a computer network traffic?
I would like to know if it is possible to remote monitor the incoming and outcoming network traffic of a specific IP from my network. I need to log the time, ip numbers and port that contact the ...
1
vote
1answer
96 views
Files to monitor in linux
All,
I have been googling around for different guides on what files to monitor that people would edit for malicious intent. In my readings so far, i have found the common files people edit.
so far i ...
1
vote
0answers
120 views
GSM monitoring system [closed]
Please help me clarify with GSM monitoring system (active style and semi-active).
I cannot differentiate these 2 types of monitoring systems. If anyone can tell me exactly how they operate?
Thank you ...
1
vote
2answers
475 views
Strange Event Log Entry - Windows Server 2008
Reviewing some logs recently, and came across a strange failure in our Windows 2008 DC.
An account failed to log on.
Subject:
Security ID: NULL SID
Account Name: ...
0
votes
2answers
136 views
Keyloggers - Ports used by keyloggers
According to this article, keyloggers usually make use of the FTP ports and email ports:
http://rbmikrotik.blogspot.com/2011/07/how-to-block-port-frequently-keylogger.html
My question is, can a ...
0
votes
1answer
665 views
Monitor incoming TCP/UDP flood attack and graph it
I'm preparing a presentation on a security issue and want to include a demonstration. It won't be in real time, I just need to show some pictures of the results.
I have some VPSes that will perform a ...
0
votes
1answer
105 views
Tracking information on HTTPS connection
My organization uses cyberoam firewall. They are monitoring all activities including my search text in Google, Wikipedia etc. So recently i changed to HTTPS versions and now using HTTPS connections of ...
0
votes
1answer
124 views
Monitor traffic
I use my laptop as Access point for all other devices around me. Is there any way that i can monitor the data/browsing that other people are through my system's access point. As I can think all the ...
0
votes
0answers
21 views
Steganalysis of outgoing traffic [duplicate]
Possible Duplicate:
Detecting Steganography in images
Is there any commercial traffic monitoring systems that implements steganalysis and could issue a warning upon suspicious file transfer ...
0
votes
1answer
136 views
How to Transfer packets from one ethernet card to another [closed]
I have a desktop with two ethernet(etho,eth1) cards and OSSIM installed in it. I have a laptop with webmin installed, where i want to write rules for transferring packets from eth1 to eth0. Both the ...
-1
votes
1answer
56 views
User login monitoring tool [closed]
Our client has a Windows workgroup LAN with a UNIX/Oracle database server. We want a tool which can log login/logout details of network users to the database server. The problem is that we can't ...
-3
votes
1answer
110 views
Web GUI for Snort + ModSecurity [closed]
I'm trying to find a suitable (or easily modifiable) web GUI for snort + modsecurity logs. As far as I know, Splunk can do that by installing the snort and modsecurity plugins. Is there any other ...
-3
votes
1answer
112 views
What's the best IDS for my machine? [closed]
I'm looking for free IDS that sniffs to traffic in real time.. Can anyone help me !
