758 reputation
311
bio website
location United States
age
visits member for 2 years, 1 month
seen 8 hours ago

Jun
11
awarded  Yearling
Sep
18
awarded  Scholar
Sep
18
accepted Windows process and socket capture
Sep
18
accepted Windows PE file and Malwares
Jun
24
revised Windows PE file and Malwares
added 21 characters in body
Jun
24
asked Windows PE file and Malwares
Jun
11
awarded  Yearling
Sep
21
awarded  Custodian
Sep
4
revised How can an admin choose which Snort rules to enable?
added 5 characters in body
Sep
4
answered How can an admin choose which Snort rules to enable?
Aug
14
awarded  Caucus
Aug
13
comment Windows process and socket capture
Thanks! I am trying a powershell script.
Aug
13
comment Windows process and socket capture
Thanks! NM is a good tool. I was thinking of something that doesn't require installation, and doesn't consume much resources on a critical machine.
Aug
10
awarded  Student
Aug
10
asked Windows process and socket capture
Jul
29
comment Are there DNS analysis tools that could detect bad DNS results?
If you want to verify dns query results on a client machine, then you can simply make script to statically use one of the trusted dns servers and second to use dns on the int conf and compare the both responses from both requests.
Jul
24
comment Do these mysql and ssh issues mean my rails server was hacked?
Please share some logs from rails, Apache, MySQL and system logs. You can hide your real IP and app details. It is hard to say anything without logs. If you correlate logs from different sources closely and track timeline then you might see something interesting. My first guess if there is nothing logs then there is nothing to worry about.
Jul
23
answered Writing exploit code that bypasses IPS detection
Jul
22
comment What are the laws regarding ISP recording IP addresses? How would they know who had which?
At least here in US. Couldn't find a document that says there is a law in US for this. But ISPs do store this on their own.
Jul
22
comment What are the laws regarding ISP recording IP addresses? How would they know who had which?
Edited my answer with a correction!