New Splunk infrastructure license model Traditionally, many SIEM vendors charge by the volume of data ingested by the system. But now, vendors like Splunk are introducing new license models to minimiz...
Elastic stack demonstrated itself as a leader for open source big data analysis, data collection, and visualization products. The stack which is usually abbreviated with ELK contains the following com...
Quest InTrust is a very powerful log management framework which also contains a lot of possible ways to notify about triggered alerts: Email alerts SCOM connector Alert Reports in SRS Alerts in SQL D...
It is well known for anyone who tried to run a VM in the cloud that RDP port if left opened will be attacked with massive waves of brute-force attempts from IPs all around the world. I run a detection...
In recently released Update 1 for InTrust 11.4.1 there is a hidden gem – Suspicious process was started rule, it allows detection of hidden steps that ransomware and malware would do to achieve persis...
Something really cool about honeypots and deception technology, in general, is that you can see a hacker or a penetration tester in action with very little false positive notifications. Deception also...
DC in the cloud There could be many different reasons that require Domain Controller running in the cloud: Overal company direction to get rid of the on-prem data center with all of the supporting se...
The cyber-security community is buzzing about this recently unveiled vulnerability in Windows Textservices Framework. "Project Zero: Down the rabbit hole" https://googleprojectzero.blogspot.com/2019/0...
How the password spray attack works I’m sure you've all heard about this technique at least once before – let me give you a brief architecture diagram. In a nutshell, password-spraying is a type of b...
We're excited to announce the launch of Quest InTrust version 11.4! Already a long-time leader in native event log management for Windows environments, InTrust version 11.4 now delivers reliable integ...
Quest InTrust 11.3.2 maintenance release happened last week. One of the main features is improved and expanded support for Linux OS. Let me focus on this topic and provide some details about how InTru...
Hello everyone, InTrust can collect event log information from many different sources (you can reed more in the datasheet), but what is mostly unknown is that it can collect information from custom lo...
