Tag Info

New answers tagged

1

This question is likely going to get flagged since it is vendor specific however I will take some time to answer your questions using a security approach. It's free and and open source - there is a cost associated with learning any tool and implementing it properly. There is also a cost associated with support. At crunch time, using an open source model, ...


-1

SIEM is your best bet but I am unsure about how AlienVault's netflow works since I haven't played with it. Currently I am using QRadar which does really excellent work at mapping everything out. So this is how I could go about it: Configure SQUID as a proxy before your servers Configure syslog-ng or remote syslog on this proxy to your SIEM Configure Snort ...


0

Palantir if you have the money, or Maltego when you are on a budget. There are plugins from some third parties that integrate with either Palantir and/or Maltego such as RecordedFuture, SiloBreaker, KapowSoftware, and RiskIQ. You can also search GitHub for maltego. KapowSoftware integrates directly at the web layer, as an example about how to analyze data ...



Top 50 recent answers are included