Monitoring is the act of looking on the processes or systems for performance, supervision and surveillance.

learn more… | top users | synonyms

1
vote
0answers
16 views

Using OSSEC to monitor windows services [migrated]

I'm using OSSEC to trying and monitor services on servers such as Windows Event Log. I would like to know if a service has stopped or started and get emailed accordingly. I have tried a rule that ...
-1
votes
3answers
72 views

Company-issued laptop monitoring

just want to ask whether company IT can monitor the websites that I open using the company-issued laptop but on my personal wifi network? Offhand, I can see Symantec endpoint protection and Websense ...
2
votes
2answers
45 views

Secure alerting for a monitored web application

What is a good method to receive security alerts? Email is the first thing that springs to mind, although it is susceptible to MITM attacks (e.g. an attacker preventing the email from being ...
2
votes
2answers
400 views

how can I tell if I'm under IMSI cell phone surveillance

I've recently had an encounter with the law, the details of which I won't disclose here since the case is still in court. They took my phone, naturally. I deactivated it as soon as I was released ...
3
votes
2answers
126 views

How to get net anonymity while browsing?

I am a college student and am getting free wifi for using the 'Hostel campus" facility ', to access net, I have to put a proxy IP address to my browser. I have heard that they can see what all ...
0
votes
0answers
50 views

Asking for more information about AlienVault.com using Spiceworks, viability of “suspicious IP” alert

Website here: alienvault.com I've been trying out Spiceworks for about a week, seeing what use I get out of it. Today I log in and see an alert: "(my computer) has established a connection to ...
6
votes
1answer
144 views

TOR: I'm repeatedly being connected to a couple of Entry Nodes!

I'm using TOR (Orbot for Android), and when I look at the log of the connection establishment phase, I see that I'm repeatedly being connected to familiar nodes, especially the Entry Nodes which 3 out ...
2
votes
2answers
558 views

Major differences between Kali and SecurityOnion

Curious about the major differences between Kali Linux and SecurityOnion. Do you think it would be easy or useful to replicate what has been done with SecurityOnion on Kali? Why is there such a ...
-1
votes
1answer
184 views

Someone borrowed my phone and Im scared its hacked [closed]

I am from Australia and I use a iPhone 4. Today, a young guy asked to borrow my phone, since he was out of credit and since I was trying to be a good samaritan, let him borrow my phone (also we were ...
10
votes
3answers
18k views

Monitoring file access on Windows

I need a way to monitor user file access on windows. What I need is: monitoring of user opening, modifying (don't need to know what the changes were, just that a file was modified), copying, pasting ...
5
votes
4answers
1k views

What are the most common files to check with File integrity monitoring software?

I have a file integrity monitoring suite and in it I have to select specific files and folders for it to monitor. There are some obvious services that I want monitored like our web-server. Is there a ...
54
votes
12answers
20k views

Can I prevent my neighbors, whom I pay for shared internet (wifi), from seeing the sites I've visited?

I pay my neighbors to use their wifi. They have listed me as "guest" with a separate password from theirs. Is there any way to prevent them from seeing the sites I've visited? My browser history ...
0
votes
2answers
142 views

Monitoring user use VPN

If there is an employee uses the internet through an internal proxy in his company, and he use a paid VPN service to browse safely, can IT side be able to monitor his behavior?
0
votes
2answers
449 views

“A third party is capable of monitoring your network activity” with client certificates?

I installed the CAcert root certificates on my Android device (not rooted), so that I could visit websites with server CAcert certificates without getting the "certificate not trusted" warning. But ...
3
votes
3answers
1k views

SSL VPN Detection and possible to block

Is it possible to determine the difference between a VPN on port 443 compared to standard SSL traffic? In order to access SSL websites you need port 443 open but if you setup a VPN Service on port ...
4
votes
3answers
334 views

Log Attacks in Different Files using Snort

How can I log attacks separately using snort. I basically want to log attacks invoked from different files separately. Like if I have 2 files, ddos.rules and log.rules, then I want logs generated from ...
3
votes
3answers
230 views

Is it advisable to fully record terminal interaction for incident response?

We are going to be using a jump box to serve as an SSH bridge to our production systems. Assuming that operators are actually logging in to a shell on the jump box and assuming that it is possible to ...
1
vote
0answers
132 views

Intrusion prevention in windows azure?

When using the Windows Azure IAAS servers how does one setup IPS for all incoming traffic to these servers? How would a regular user who runs his whole environment within Azure make sure that he can ...
2
votes
2answers
71 views

Securely share audio files

I work for an insurance broker that sometimes has to share our customer calls with the insurance company we are underwriting for. Generally this means retrieving the call from our call recording ...
0
votes
2answers
105 views

Corporate IT monitoring and access to user private data (keylogging? https data transmission?) [closed]

I work at a large company that requires employees to sign a digital certification saying that we recognize the right of the said company to monitor all data and communication on our work laptops, and ...
1
vote
1answer
70 views

Blocking Internet Monitoring Software

So if a provider has software that blocks you from using their internet to connect to, say, Spotify or Skype. Is there a way to block your computer from communicating that this program is running? Or ...
15
votes
5answers
797 views

Safe way to authenticate (multi-factor authentication?) while being monitored?

(I'm trying for a bit more precise answer, particularly with regard to multi-factor authentication, than I received for "Safe way to use a computer that has spyware/keylogger installed?" on SU.) ...
5
votes
3answers
3k views

Need a software that can monitor and log network traffic of installed applications [closed]

I need to monitor and log network activities of a specific software installed on my system. I know there are lots of network monitoring software out there, even system explorer has one built in. I ...
1
vote
2answers
1k views

Sending Syslog/SNMP information over the internet using standard UDP port 514

I'm looking into monitoring a Windows VPS by sending Syslog messages to a Synology NAS, which can generate email alerts and such. I also would like to use SNMP to generate health stats, and see trends ...
-2
votes
1answer
216 views

Identifying Visitor's using Proxy [duplicate]

I want to detect my website visitor's using any duplicate proxies ? If so how to avoid them? also how to identify the proxy is an HTTP proxy or a SOCKS proxy ?
1
vote
1answer
249 views

EMET and AntiVirus

I've just heard about and started playing with EMET and I am curious, do any AV or security suite applications do what EMET does or is EMET something entirely different?
0
votes
1answer
179 views

Figure out how internet access is being monitored [closed]

I suspect that someone is monitoring my internet connection. Said person has revealed information about sites I visit and online conversations (Facebook) even when I am not using his/her network. ...
3
votes
1answer
124 views

How to secure MySQL data from changes?

I'm looking for a way to secure MySQL data in particular tables for example settings table. Ideal solution would hook up to database and log all INSERT, UPDATE and DELETE requests to particular ...
-1
votes
2answers
134 views

ISMS for SMB (Small And Medium Enterprise)? [closed]

Is there an Information Security Management System (ISMS) existing for SME/ SMB, if not why ? The so called GRC suites are mainly targeted towards Fortune 100 (may be up to fortune 1000) companies , ...
13
votes
6answers
27k views

How can I identify my phone call is being tracked or tapped?

When I read about mobile call tracing, the hackers/security experts track and record mobile phone calls somehow. Is it possible for us to identify that our call is tracked by someone or heard by ...
2
votes
1answer
81 views

What kind of monitoring system can we have for existing security systems in the vehicles?

The vehicles are fitted with a security system to track their movements and report it back to their owners if they are moved unauthorized. My question is: can we have an additional security system ...
3
votes
1answer
137 views

SNMPv2 and Community Security

When working with servers on the internet and doing monitoring is there any dangers using SNMPv2? I am working with observium and have the following: /etc/snmpd.conf com2sec readonly default ...
6
votes
6answers
6k views

How to detect eavesdropping by your ISP

I've noticed some funny behavior lately with my home Internet connection such as connections dropping frequently, rate limiting occuring, and packet loss. I know how to get around this online, use a ...
2
votes
4answers
2k views

How to remote monitor a computer network traffic?

I would like to know if it is possible to remote monitor the incoming and outcoming network traffic of a specific IP from my network. I need to log the time, ip numbers and port that contact the ...
1
vote
1answer
337 views

Files to monitor in linux

All, I have been googling around for different guides on what files to monitor that people would edit for malicious intent. In my readings so far, i have found the common files people edit. so far i ...
-1
votes
1answer
168 views

User login monitoring tool [closed]

Our client has a Windows workgroup LAN with a UNIX/Oracle database server. We want a tool which can log login/logout details of network users to the database server. The problem is that we can't ...
4
votes
3answers
365 views

Application to monitor software activities

I am doing black box testing on a software which is installed in my local machine. I want to analyze and see the list of files and registry entries that software create/modify/delete. Basically ...
-3
votes
1answer
494 views

Web GUI for Snort + ModSecurity [closed]

I'm trying to find a suitable (or easily modifiable) web GUI for snort + modsecurity logs. As far as I know, Splunk can do that by installing the snort and modsecurity plugins. Is there any other ...
1
vote
2answers
639 views

Strange Event Log Entry - Windows Server 2008

Reviewing some logs recently, and came across a strange failure in our Windows 2008 DC. An account failed to log on. Subject: Security ID: NULL SID Account Name: ...
0
votes
2answers
646 views

Keyloggers - Ports used by keyloggers

According to this article, keyloggers usually make use of the FTP ports and email ports: http://rbmikrotik.blogspot.com/2011/07/how-to-block-port-frequently-keylogger.html My question is, can a ...
3
votes
3answers
202 views

Monitoring for security threats

I host and maintain several websites. The users pay to have their sites maintained and secured. However, with the amount of web applications like joolma, wordpress, ect... and their plugins, I need a ...
0
votes
1answer
161 views

Tracking information on HTTPS connection

My organization uses cyberoam firewall. They are monitoring all activities including my search text in Google, Wikipedia etc. So recently i changed to HTTPS versions and now using HTTPS connections of ...
3
votes
2answers
3k views

How effectively can ISPs detect illegal file sharing?

Recently the USA passed a law requiring ISPs to spy on their customers' internet connections to check for illegal file sharing. I assume that they would do this by sniffing packets, but doesn't this ...
2
votes
1answer
312 views

How should I audit and monitor shared TCP ports in Windows?

Windows has a feature called .NET TCP Port Sharing which allows different .NET applications to share the same TCP/IP port. I would like to monitor the source and destination connections of each ...
0
votes
0answers
21 views

Steganalysis of outgoing traffic [duplicate]

Possible Duplicate: Detecting Steganography in images Is there any commercial traffic monitoring systems that implements steganalysis and could issue a warning upon suspicious file transfer ...
-1
votes
1answer
259 views

How to Transfer packets from one ethernet card to another [closed]

I have a desktop with two ethernet(etho,eth1) cards and OSSIM installed in it. I have a laptop with webmin installed, where i want to write rules for transferring packets from eth1 to eth0. Both the ...
13
votes
5answers
963 views

Neural networks & anomaly detection

Neural networks, with their ability to learn behavioural patterns from arbitrary data, seem like a natural way to deal with intrusion detection. There are many academic papers on the topic which ...
6
votes
2answers
367 views

Suspicious 'upstream' traffic

We are seeing unusual amounts of traffic heading upstream on our WAN connection, during the day our system can exceed (or attempt to exceed) the 1Mbps limit imposed on the connection. I have PRTG ...
4
votes
1answer
1k views

Server monitoring for security

We do a lot of web hosting management and have started to get into selling server management packages. However, we want to start monitoring servers for security related threats. Our clients may use ...
3
votes
2answers
616 views

How do companies track employee usage on corporate computers?

For companies that needs to monitor computer usage by employees, what systems are usually set up to do so (monitoring software, hardware, etc.)? What are the financial costs involved in setting up ...