Questions tagged [monitoring]

Monitoring is the act of looking on the processes or systems for performance, supervision and surveillance.

Filter by
Sorted by
Tagged with
0
votes
2answers
85 views

Monitor router traffic from PC

I want to monitor traffic on my home router, how to do this? I have a Huawei router. I have searched this question before asking here but most of the sites and blogs just mentioned hacking and other ...
4
votes
3answers
182 views

Are schools able to track the usage of apps on their Chromebooks?

I like to play stuff like Minecraft Educational Edition with my friends after school but I'm not sure if the school will find out, since if they do, it might look bad for me. Will schools be able to ...
0
votes
3answers
129 views

How do I secure personal data on my computer when my employer installs monitoring software?

I have been working for a 100% virtual company for over a year, using my personal computer and I am fine with that. We were bought and now the parent company wants to add monitoring software to our ...
0
votes
1answer
97 views

Misuse vs anomaly detection alerts

Adam always reads his e-mails on Sundays around 5 pm. This Saturday, at 11 am, he accessed his inbox. Which will generate a false positive? Source slide 10/41 Misuse-based IDS or anomaly-based IDS? ...
0
votes
1answer
63 views

What tools exist to monitor network streams

Using Squid's SSL Bump feature I can intercept (and inspect) all web traffic on my home network. Now, assuming that I can now see the plaintext communications to/from a client, that still may not do ...
0
votes
0answers
10 views

What can my employer see in my Instagram [duplicate]

I use my private phone at work for private stuff. I use The company’s WiFi. Now I ask myself; What can my employer see what I am doing in the Instagram app? Can he see my username? Can he see that i ...
0
votes
1answer
55 views

Database of breached websites

I run a website with a user database. I have an account with my email and I put it on a website like Have I Been Pwned, which does not reveal a breach. I also check the website's list of breaches to ...
0
votes
1answer
42 views

How to monitor your user accounts for breached logins?

On a few rare instances, I've received an email from a website notifying me that my email and password were found in batch of harvested logins, and they then force me to change my password. This has ...
0
votes
0answers
37 views

Smart Tablet Device Vulnerabilities

My son and I have a cybersecurity concern. Somebody somehow compromised his tablet, accessed his files, and emailed them to him from something like guerrilla mail but we cannot figure out how. Our ...
1
vote
0answers
37 views

AuditD and SysCall alerts

Given an alert rule like -a always,exit -F arch=b32 -S open -S openat -F exit=-EACCES -k access how does adding multiple SysCalls (-S) options work? When an application gets executed do all the ...
1
vote
1answer
284 views

SNORT rule for detecting/preventing unauthorized VPN or encrypted traffic

Here's my not so theoretical scenario: A day-one Trojan horse attack where the attacker sets up a secure connection back to himself using a well known trusted port, such as 80 21 443. Or for instance, ...
1
vote
1answer
197 views

Does Windscribe VPN keep logs even when disconnected?

I am using (have installed) this VPN on an Android Smart TV. Does Windscribe (or generally any VPN service) keep traffic logs even when they are disconnected? (Disconnected here means when the 'power-...
0
votes
1answer
138 views

Is there any advantages in using a Network Intrusion Detection System, when already having a EDR solution?

Does implementing a Network Intrusion Detection System (NIDS) give you any advantages over an Endpoint Detection and Response (EDR) solution? I've been trying to do research on this, but are ...
0
votes
0answers
106 views

aireplay-ng (injection) is not working when monitor mode is enabled

I believe my card supports injection. If I start a terminal and run aireplay-ng -9 wlan0 I get this result: ┌──(root💀kali)-[/home/kali] └─# aireplay-ng -9 wlan0 ...
0
votes
2answers
80 views

Does InfoSec include monitoring?

I am new to InfoSec role, and not really sure if it includes responsibility for monitoring: that's, when we write policies and procedures, who is checking whether they've been obeyed or not? Is it ...
0
votes
1answer
54 views

Which information of a VMware image can be monitored from the host?

I run a Linux virtual machine on my Windows 10 host. What information (e.g. https traffic) can be monitored from the host? Is it safe to browse on a virtual machine that uses the host device's network ...
1
vote
1answer
74 views

Is it possible to ensure detection and logging of all attempts to copy data out of a system?

I am cross-posting this question from Serverfault, because I am in doubt where it fits best. Say I have a server set up for processing sensitive data. The few authorised users of the system are ...
0
votes
1answer
698 views

Can't see data packets when capturing in monitor mode

On Kali Linux, I have an Atheros wireless adapater. I'm trying to capture data packets off the air and decrypt them as an exercise. The problem is that when I turn on the wifi monitor mode and choose ...
1
vote
0answers
52 views

Security Best Practice - Monitoring a Site-to-Site VPN Tunnel

if a customer wants to monitor an IPSec-based site-to-site VPN and basically no incoming traffic is needed, would you recommend: a) setting up a permanent tunnel that can be monitored all the time and ...
0
votes
1answer
65 views

Monitoring User (developer) interaction

I'm looking for a "tamper proof" way, if there is such a thing, to monitor what a developer/engineer does on a given system. To expand a bit more about this, we have several systems that run ...
0
votes
1answer
204 views

Monitoring laptop activity while logged into school's Microsoft account [duplicate]

I logged into my school-based Microsoft account on my personal laptop. But is it possible that somehow my school is monitoring my Google searches and other browsing history through the school ...
1
vote
2answers
103 views

Computer monitoring while working at home [duplicate]

I have a computer from the company and, while working at home, I would like to know if the company could be capable of monitoring or spying on my computer. I am not connected to any company's server ...
0
votes
1answer
716 views

Re-use an old employer's laptop and avoid monitoring software

I still have an old good laptop from my ex employer that they never requested at the time I left (i assume it was old already by then) I would like to reuse this computer and not have the risk of ...
1
vote
1answer
164 views

Can my school see the websites I've visited while on my home WiFi after I reconnect to the schools? [closed]

I know that they can't monitor me on my home WiFi, but can they see the websites I visited while on my home WiFi after I reconnect to the schools?
2
votes
2answers
137 views

What kind of data can be monitored/intercepted/altered by the VPN service provider? [duplicate]

As you may know, Virtual Private Network or VPN is a system to create an encrypted tunnel between two computers on the internet, on one end is the VPN client, and on the other end is the VPN server. ...
1
vote
1answer
89 views

How to detect use of personal NAS devices from corporate machines?

We have an issue where people are taking laptops home and connecting them to their personal home networks in order to backup corporate data to their private NAS devices. From a DLP standpoint we have ...
3
votes
1answer
2k views

Is accessing /proc/ inside docker container a security breach?

In a docker container I am reading the files /proc/stat and /proc/meminfo. As I understand they are the ones of the host. (Not local to the docker container) In a meeting, a co-worker said that this ...
5
votes
1answer
2k views

Can the GlobalProtect VPN of my company track websites when Disabled?

I just installed the Global Protect VPN from my company on my local machine so I can access our servers remotely. I just "agreed" to the following statement: VPN Connected This system is for ...
0
votes
1answer
483 views

Forced to install certificate on my laptop when using company WiFi. Risk? [duplicate]

My company has a 'bring your own device' policy. You connect your device to the WiFi, and then open a citrix environment through a web portal. Basically, everything inside the citrix env is company-...
0
votes
0answers
38 views

critical files to be monitored by file integrity monitoring solutions in active directory servers

We are implementing file integrity solution on Microsoft active directory servers, I need to know the critical paths(files and folders and registry keys) that need to be monitored for any change or ...
1
vote
1answer
126 views

Where do live threat maps get their threat-data from? [closed]

There are many "threat maps" online such as Norse, Fortinet etc serving accurate information of all kinds of attacks around the globe such as DOS, Scans, Pings, and many more. How accurate is this ...
1
vote
1answer
859 views

What ways can you monitor all changes made on a Linux server?

Sometimes we have contract developers that need to do work on the server (via ssh or sftp) and I've been looking for ways to monitor what they do on our Debian based server. We have ways of limiting ...
3
votes
3answers
415 views

How do you protect against your IT domain admins accessing your data?

I work at a small company and we use an external company to take care of all our IT needs (a "managed IT service provider"). This includes managing our windows domain, our network, and everything else....
0
votes
1answer
79 views

Capturing multicast packets in WLAN

(I had to move this from Network Engineering stack exchange where I origianlly asked this question) If a device in monitoring mode snoops on the traffic in a WLAN, can it CAPTURE and READ multicast ...
1
vote
1answer
116 views

Securing a Personal Hotspot

I'm buying a brand new phone, added to it: a new line and SIM card, along with a brand new laptop, to use my phone's network as a hotspot. I will not be using these devices for anything but personal ...
1
vote
2answers
194 views

If a vulnerability has no relevant attack vectors, is monitoring still legitimate for a company?

Today while reviewing vulnerability scan results with a colleague, we had a debate about what vulnerabilities can be considered "true or legitimate" and hence worthwhile to spend resources ...
1
vote
2answers
3k views

How to locally monitor outgoing internet traffic?

I have a cable internet connection that goes to a ASA firewall and then into my local network where i have several machines including many VM's on a ESXI server. I am looking for a way to monitor ...
2
votes
1answer
262 views

OWASP: Insufficient Logging & Monitoring - open source tools

Being new to the security and logging and after reading a lot about the terms used, I am pretty sure I neither need an IDS/IPS nor a WAF. I am mostly interested in automating the "monitoring" of my ...
0
votes
1answer
563 views

What can schools see on school issued Mac? [closed]

My school gave everyone Macs that were sealed in the box and everything. From what I’ve seen so far, the root certificate hasn’t been tampered with. Can they see my https web history? Can laptops have ...
1
vote
1answer
2k views

Analyze / Sniff all packets from all devices connected to a router

First of all, before explaining what I'm trying to do, let me clarify that my intentions are not steal any information, as it's only for study purposes, not even for my own entertainment. I'm trying ...
1
vote
2answers
90 views

Can a laptop be monitored when booted from external drive?

If a laptop is monitored (say from employer) and I boot it from an external USB hard drive or a LIVE-CD/USB-Stick, can it then still be monitored somehow?
1
vote
3answers
975 views

How can I capture all data from a specific device on my network?

I have an iPhone that is connected to my Wi-Fi at home. I want to capture ALL traffic from that iPhone (because it's my network) and record it and view it. I don't have physical access to the device. ...
2
votes
0answers
143 views

Monitoring and Securing IoT devices [closed]

I have a mix of IoT devices at home. Alexas, WiFi PLugs, Smartthings (with related Z-Wave/Zigbee devices). I've been on the hunt for a solution to monitor what these devices send out and secure data ...
2
votes
2answers
331 views

How should we mitigate threats that are keep coming to our security monitoring system?

We have continuous cybersecurity threat feeds that coming to our SOC on a daily basis from different sources that provide all the new CVEs, new malware variations and more. We just don't know how to ...
0
votes
1answer
145 views

How to check if my PC's HTTPS/TLS connection is monitored or a key-logger is installed? [duplicate]

A few days ago, in the office, we were asked by our bosses to install a program. This was supposed to be an Antivirus program. But after installing this program many of our colleagues have been ...
3
votes
1answer
426 views

Avoiding Dark Web monitoring detection

At our company, we offer security services to our clients. One of the things that management has pushed down to us is the need for dark web monitoring. Because I am in the business meetings as well, ...
3
votes
0answers
131 views

Commercially available spyware not getting detected

I guess everyone here knows those commercially available stealth PC monitoring software. I'm surprised that those trojans are hardly detected by virus scanners. All surveillance makers recommend in ...
1
vote
1answer
791 views

osquery in Docker environment

I am currently researching security monitoring in Docker environments and want to explore the possibility of using osquery to gather activity from containers, but I have run into a bit of a security ...
4
votes
1answer
3k views

How can disabling Diffie-Hellman cipher for packet inspection be secure?

I have noticed that a number of network packet monitoring tools on the market today seem to have roughly the same recommended configuration parameters as described below: Disable Diffie Hellman in ...
3
votes
1answer
246 views

Methods for analysing android app on runtime [closed]

I want to analyse security of android app by monitoring its behaviour on runtime. I need to monitor variables modifications, accesses and api calls while android app is running on the device. I tried ...