Monitoring is the act of looking on the processes or systems for performance, supervision and surveillance.

learn more… | top users | synonyms

3
votes
0answers
68 views

Work wants to create an admin account on my system that I don't have access to?

This is on a Windows 10 system, and they want to create an administrator account that only my manager will have the password to. This is apparently to enforce some new "security policies" that haven't ...
3
votes
1answer
52 views

Turn RPi3 Wi-Fi adapter into monitor mode using airmon-ng

For some reason, I can't turn the built-in Wi-Fi adapter on the new Raspberry Pi 3 into monitor mode like I used to do on other platforms. First I kill the processes that interfere with sudo ...
3
votes
1answer
58 views

Linux log files to back up and review for security

Good morning/afternoon/evening everyone, I am looking into what files I should consistently back up externally from my machine to be able to monitor for any unusual activity. I would look at the files ...
0
votes
1answer
37 views

How to enable WiFi while using two wireless cards one in monitor mode and other in managed mode?

I have two wireless adapters, one is internal PCI wireless adapter (wlan0) while other is USB wireless adapter (wlan1). I put wlan0 in monitor mode and wlan1 is in managed mode. But, after running ...
9
votes
6answers
15k views

How to detect eavesdropping by your ISP

I've noticed some funny behavior lately with my home Internet connection such as connections dropping frequently, rate limiting occuring, and packet loss. I know how to get around this online, use a ...
17
votes
2answers
3k views

Are Playstation 4 communications really harder to monitor?

I have read on the net that authorities are having troubles monitoring Playstation 4 communications. As usual the news are very non technical. What makes the Playstation 4 network harder to ...
0
votes
1answer
29 views

Is it safe to use an Android Server Monitoring App, to login to a server with SSH?

Lately I have seen some Android Apps, (CPU Monitoring and things like that) that need access to your root account, ask you for username and pass, my questions are: Is it safe to give access to an ...
1
vote
2answers
116 views

Sniff network packets that don't talk to my computer?

How would one sniff wireless network packets that do not pass directly through my computer- without access the the AP or router? I want to be able to sniff for network traffic (even while ...
4
votes
1answer
57 views

Security monitoring in the cloud?

I am working for a company which works with PHI, HIPAA, PCI and other highest sensitivity data. Their current security architecture uses hardware network monitoring tools to monitor the network ...
10
votes
3answers
902 views

With whom does my PC communicate at startup?

I've been reading about Windows 10 and its incessant desire to call home. I've tried putting some firewall rules in place. I am sure they are working but I got to thinking that many events probably ...
1
vote
1answer
79 views

Would you typically want to monitor all ports for NIDS monitoring? If so, is span port or network tap the way to go?

We're setting up NIDS monitoring and the bosses want to monitor all the ports, but I'm wondering if this actually makes sense. The switch we're currently using can only mirror 4 source ports to one ...
15
votes
8answers
2k views

Monitoring Active Directory Domain Administrator Activities

I need to monitor Active Directory domain administrator activities and look for the following: Looking for anomalies in daily activity Getting alerted upon a violation My problem is that turning ...
1
vote
4answers
274 views

My email hacked

Someone has definitely gained access to two of my alternate emails. I know this by looking at the login activity. By looking at the email logs I discovered that the IP that is always gaining entry to ...
3
votes
3answers
110 views

Detection and monitoring of important events on OpenVPN server

If an attacker can establish a VPN connection to the company network and have access to internal resources (by getting various certificates and credentials used to authenticate to the VPN server), ...
0
votes
1answer
72 views

Capture & Decrypt packets captured by monitoring mode

I am working on capturing packets using monitoring mode on my laptop. The problem is that I cannot get the source/destination IP's since the packets are encrypted. I added a key and it didn't work (I ...
3
votes
1answer
33 views

Airodump-ng -1 DB networks

I'm using airodump-ng to test my network's integrity and when I put Airodump-ng into monitoring mode, I see some networks with no ESSID and the PWR is -1. What are these networks? Are these hidden ...
5
votes
3answers
1k views

SSL inspection detection

An interesting question was recently asked about SSL inspection, and that got me wondering if it is actually possible, from the end user (or even server side), to detect if the SSL link is being ...
1
vote
0answers
49 views

Fortigate monitoring with SNMP and Devmon template

I'm trying to monitor some aspects from our Fortigate firewall (like how many traffic goes through each tunnel) through a combination of Xymon, Devmon and SNMP. I downloaded the MIB files from the ...
6
votes
0answers
81 views

How to understand QEBEK (Honeypot Monitoring Tool)?

I am working from a while to find something meaningful or updated about QEBEK, but what i got is here in two links Intro and KYT Paper for Installation 2010 . These links are nothing more that a ...
-4
votes
1answer
59 views

Can I disable corporate monitoring by disabling my network connection? [closed]

Can my activities be traced if the Ethernet cable is not connected? If I disconnect the company's Ethernet cable & connect my PC to tethering, will the browser history be still captured once I ...
6
votes
3answers
5k views

how can I tell if I'm under IMSI cell phone surveillance

I've recently had an encounter with the law, the details of which I won't disclose here since the case is still in court. They took my phone, naturally. I deactivated it as soon as I was released ...
19
votes
4answers
2k views

Is URL visible by ISP before HTTP request is 301 redirected to HTTPS?

Let's say I enter http://domain.com/... as a URL. The domain.com server performs a 301 redirect of all HTTP requests to the HTTPS version, so it shows me https://domain.com/.... Can my ISP see the ...
6
votes
5answers
346 views

What's the real reason behind blocking the social sites? Even legitimate sites like Twitter which acts as a knowledge repository?

I see some sites are blocked for IT security at schools, colleges and offices. But, why are some obvious good sites blocked too?
1
vote
4answers
633 views

Find out if someone copied a file from my external hard disk

I want to find out if someone has copied my personal details from my external hard disk. I don't care whether they read it, but it should not be copied to their system. So is there any method to find ...
2
votes
2answers
39 views

Profile applications from traffic analysis

I'm investigating options for segmenting a less secure business unit behind a Cisco 5505. I want to take this action quietly and transparently for political reasons. I want to know if it is possible ...
4
votes
2answers
142 views

How can I verifiably demonstrate that steganography or hidden partitions do not exist?

I want to verifiably demonstrate that there are no hidden partitions, or hidden messages in a given message. In this scenario, assume the subject is being monitored (consensually) and agrees to align ...
2
votes
1answer
516 views

EMET and AntiVirus

I've just heard about and started playing with EMET and I am curious, do any AV or security suite applications do what EMET does or is EMET something entirely different?
2
votes
2answers
196 views

How does web site defacement monitoring actually work?

I wish to outsource a web site defacement monitoring services to a third party and am wondering how does this type of monitoring work? If my front page has a lot of dynamic components, eg image ...
1
vote
2answers
1k views

“A third party is capable of monitoring your network activity” with [imported] certificates?

I installed the CAcert root certificates on my Android device (which is not rooted), so that I could visit websites with server CAcert certificates without getting the "certificate not trusted" ...
6
votes
6answers
15k views

monitoring outgoing network traffic [closed]

The graphs for one server that I am using are showing consistent 7.5 kb/s outgoing network traffic that started a few days ago. How can I monitor/log/capture/analize this traffic to see what is it, ...
3
votes
1answer
106 views

Secure text document's fingerprint

The purpose is the same as with hashing: given set of confidential documents, I want to process them and store something secure like salted hashes/bcrypt. Later, when new document is given, I want to ...
1
vote
0answers
178 views

How to monitor kernel mode driver traffic (ESEA client)

E-Sports Entertainment Association (ESEA) is an alternative method of finding players to match up against in (among others) Counter Strike GO. They are known for having the best anti-cheating measure ...
1
vote
4answers
520 views

Possible to find out the last person to open a file on Windows without specialist tools?

So I suppose this is specific to the OS you are using or the filetype or software used to open it, but my question stands open for all really but I am particularly interested in more common files such ...
4
votes
1answer
2k views

Intrusion prevention in windows azure?

When using the Windows Azure IAAS servers how does one setup IPS for all incoming traffic to these servers? How would a regular user who runs his whole environment within Azure make sure that he can ...
2
votes
1answer
476 views

TLS 1.3 Makes Security Tools Obsolete?

I am a student and relative noob in IT security performing research for three reasons: school, my employer and personal curiosity, and I hoped maybe someone could answer a question for me. In a video ...
3
votes
1answer
721 views

Why crack WEP or WPA/WPA2 PSK when it can be sniffed through monitor mode capture?

I am pretty new to the domain of wireless security and am trying to understand the various techniques used for compromising wireless networks. There are a few things that I am not able to co-relate ...
4
votes
2answers
104 views

What level of anonymity can I expect while using a library's user session?

At the library, computer are typically open for internet browsing, if you can provide them your library card number. To what extend can I expect to protect my internet browsing privacy from ...
1
vote
3answers
103 views

What security implications are there when sending video feed over unknown applications, and how can we protect ourselves?

This might sound broad -- but it has to be considering the details are truly unknown. Context: Our university (and many more) have begun rolling out mandatory webcam recording for certain portions of ...
1
vote
1answer
299 views

Someone else on my computer at the sametime?

What should I do if I feel that someone else is accessing my computer at the sametime I am using it? I think about this almost always no matter which carrier I use, or even try a different computer. ...
4
votes
2answers
68 views

monitor port scan on the same segment

if theres a port scan on the same segment and it does not reach the firewall at all, it is not detectable by anything. is there any solution to that ? maybe using the windows fw on ach workstation to ...
3
votes
3answers
259 views

How to get net anonymity while browsing?

I am a college student and am getting free wifi for using the 'Hostel campus" facility ', to access net, I have to put a proxy IP address to my browser. I have heard that they can see what all ...
4
votes
3answers
859 views

Log Attacks in Different Files using Snort

How can I log attacks separately using snort. I basically want to log attacks invoked from different files separately. Like if I have 2 files, ddos.rules and log.rules, then I want logs generated from ...
-2
votes
3answers
2k views

Company-issued laptop monitoring

just want to ask whether company IT can monitor the websites that I open using the company-issued laptop but on my personal wifi network? Offhand, I can see Symantec endpoint protection and Websense ...
2
votes
2answers
89 views

Secure alerting for a monitored web application

What is a good method to receive security alerts? Email is the first thing that springs to mind, although it is susceptible to MITM attacks (e.g. an attacker preventing the email from being ...
0
votes
0answers
178 views

Asking for more information about AlienVault.com using Spiceworks, viability of “suspicious IP” alert

Website here: alienvault.com I've been trying out Spiceworks for about a week, seeing what use I get out of it. Today I log in and see an alert: "(my computer) has established a connection to ...
6
votes
1answer
298 views

TOR: I'm repeatedly being connected to a couple of Entry Nodes!

I'm using TOR (Orbot for Android), and when I look at the log of the connection establishment phase, I see that I'm repeatedly being connected to familiar nodes, especially the Entry Nodes which 3 out ...
4
votes
2answers
4k views

Major differences between Kali and SecurityOnion

Curious about the major differences between Kali Linux and SecurityOnion. Do you think it would be easy or useful to replicate what has been done with SecurityOnion on Kali? Why is there such a ...
1
vote
1answer
2k views

Someone borrowed my phone and Im scared its hacked [closed]

I am from Australia and I use a iPhone 4. Today, a young guy asked to borrow my phone, since he was out of credit and since I was trying to be a good samaritan, let him borrow my phone (also we were ...
11
votes
3answers
35k views

Monitoring file access on Windows

I need a way to monitor user file access on windows. What I need is: monitoring of user opening, modifying (don't need to know what the changes were, just that a file was modified), copying, pasting ...
5
votes
4answers
3k views

What are the most common files to check with File integrity monitoring software?

I have a file integrity monitoring suite and in it I have to select specific files and folders for it to monitor. There are some obvious services that I want monitored like our web-server. Is there a ...