371 reputation
111
bio website boos.core-dumped.info
location Italy
age
visits member for 3 years, 4 months
seen Apr 11 at 15:58

Computer Science is no more about computers than astronomy is about telescopes", Edsger W. Dijkstra

Roberto "boos" Martelloni, 30y old, Milano, Italy.
In love with computer science, free climbing and with life .

Actually i am working as security, system, software engineer specialist with unix, linux technologies and FOSS solutions.

You can find more info about me (curriculum vitae) on Careers on StackOverflow !
On my website and on my linkedin profile

Do you need more info ? don't esitate to contact me :>


Jan
16
revised is there any solution to manage network forensic, SIEM and intelligence analysis and investigation in a enterprise network?
added 249 characters in body; edited title
Jan
16
revised is there any solution to manage network forensic, SIEM and intelligence analysis and investigation in a enterprise network?
added 134 characters in body
Jan
16
comment is there any solution to manage network forensic, SIEM and intelligence analysis and investigation in a enterprise network?
@Avid: yes, in the market as far i know the is only 2 solution like what i'm asking, the solution is like SIEM and logging application, in this solution you can have common SIEM feature with also the advantage to analyze old data, and also to make deep packet inspection and make alert from the content or from a set of network activity at layer 7 like, a people send a mail with this pattern and also open a chat with msn with people X. this solution is a mixture of SIEM, logging and intelligence investigation solution.
Jan
16
revised is there any solution to manage network forensic, SIEM and intelligence analysis and investigation in a enterprise network?
added 295 characters in body
Jan
16
awarded  Editor
Jan
16
comment is there any solution to manage network forensic, SIEM and intelligence analysis and investigation in a enterprise network?
My question is not the same of the other one. I dont want a list of tool to use on an incident response, i want a solution to record all my data to identify after for example 6 month a data leak or to make assessment about protocol and traffic evidence for example 6 month ago in an enterprise solution. use wireshark to manage alert about 10Gb of traffic is not possible for example.
Jan
16
revised is there any solution to manage network forensic, SIEM and intelligence analysis and investigation in a enterprise network?
added 31 characters in body
Jan
16
comment is there any solution to manage network forensic, SIEM and intelligence analysis and investigation in a enterprise network?
@Tate Hansen: do you have any experience with it ? can yoy say more on it ? why you havent answer at the question ? thanks
Jan
16
comment is there any solution to manage network forensic, SIEM and intelligence analysis and investigation in a enterprise network?
i havent enough reputation to add some tag to the question, i want tag this question with lawful-interception and also with deep-packet-inspection tags.
Jan
16
asked is there any solution to manage network forensic, SIEM and intelligence analysis and investigation in a enterprise network?
Dec
22
awarded  Student
Dec
22
comment Security papers or material focusing on the industrial control systems (SCADA)
thanks, i'm starting check some material from UK web site about critical structures: cpni.gov.uk/default.aspx then i think i read some from your URL.
Dec
21
awarded  Teacher
Dec
21
asked Security papers or material focusing on the industrial control systems (SCADA)
Dec
21
answered What do you see as the emerging threats for 2011