Riemmann as a general purpose monitoring system for Microsoft Windows Riemann is an up and coming event stream processor. It is one of those projects that you take a look at and think this is nice, but not ready yet. A year has passed since I made that observation. …
OSSEC Tips and Quirks OSSEC is a pretty nifty tool to collect, parse and categorize events. Though it sometimes feels like a party entering the second level of the Proving Grounds of the Mad Overlord. You feel like your are getting there but you know some crazy vorpal bunny is …
OSSEC + Palo-Alto OSSEC out of the box does not include any decoders or rules for Palo-Alto Networks Next-Generation firewalls. This is part …
OSSEC + Palo-Alto OSSEC currently does not include any decoders or rules for Palo-Alto Networks Next-Generation firewalls. I just happen to have …
Having just come back from the SANS 2013 Orlando security conference, I want to share some random thoughts. SANS Instructors and speakers are …
The most astute will have noticed genDevConfig moving to github. This means, you can easily add more devices, submit corrections and improve this old …
genDevConfig is in the process of being converted to output in a Shinken/Nagios configuration format. Nagios does not have any true discovery frameworks that …
Having just come back from the SANS Institute Orlando security conference, I want to share some random thoughts. SANS Instructors and speakers are …
Black hole routing is now your friend. You are forwarding traffic not meant to be routed to a termination point on your …
The average Network Administrator has control over all the tools to put in place effective black hole routing and reporting. The simple …