Pellegrini is an Italian contact catering company that provides vending machines, cleaning and integrated services, food supplies, and welfare services such as meal vouchers. They serve 45 million mea...
Elastic stack demonstrated itself as a leader for open source big data analysis, data collection, and visualization products. The stack which is usually abbreviated with ELK contains the following com...
Quest InTrust is a very powerful log management framework which also contains a lot of possible ways to notify about triggered alerts: Email alerts SCOM connector Alert Reports in SRS Alerts in SQL D...
It is well known for anyone who tried to run a VM in the cloud that RDP port if left opened will be attacked with massive waves of brute-force attempts from IPs all around the world. I run a detection...
In recently released Update 1 for InTrust 11.4.1 there is a hidden gem – Suspicious process was started rule, it allows detection of hidden steps that ransomware and malware would do to achieve persis...
Something really cool about honeypots and deception technology, in general, is that you can see a hacker or a penetration tester in action with very little false positive notifications. Deception also...
DC in the cloud There could be many different reasons that require Domain Controller running in the cloud: Overal company direction to get rid of the on-prem data center with all of the supporting se...
The cyber-security community is buzzing about this recently unveiled vulnerability in Windows Textservices Framework. "Project Zero: Down the rabbit hole" https://googleprojectzero.blogspot.com/2019/0...
Quest InTrust 11.3.2 maintenance release happened last week. One of the main features is improved and expanded support for Linux OS. Let me focus on this topic and provide some details about how InTru...
Change Auditor 7.0 is now available for download as of May 23rd. Look what's new: Event forwarding to Splunk Event forwarding to HP ArcSight, IBM QRadar (preview) High availability of the Cha...
Hello everyone, InTrust can collect event log information from many different sources (you can reed more in the datasheet), but what is mostly unknown is that it can collect information from custom lo...
We just released a new three-minute video that shows how you can monitor, detect and mitigate attacks happening using PowerShell commands. PowerShell became very popular among penetration testers and ...
