Tag Info

New answers tagged

-1

SIEM is your best bet but I am unsure about how AlienVault's netflow works since I haven't played with it. Currently I am using QRadar which does really excellent work at mapping everything out. So this is how I could go about it: Configure SQUID as a proxy before your servers Configure syslog-ng or remote syslog on this proxy to your SIEM Configure Snort ...


0

Palantir if you have the money, or Maltego when you are on a budget. There are plugins from some third parties that integrate with either Palantir and/or Maltego such as RecordedFuture, SiloBreaker, KapowSoftware, and RiskIQ. You can also search GitHub for maltego. KapowSoftware integrates directly at the web layer, as an example about how to analyze data ...


1

When we are working with Responsible Disclosure Communication, we need balance security and convenience. Convenience for whom? For security researchers. You need to think a few things before choose: Do you need the reports so safe that you can wait to receive them? Sometimes the security researcher finds a security bug, but he is not with his PGP ...



Top 50 recent answers are included