Quest InTrust is a very powerful log management framework which also contains a lot of possible ways to notify about triggered alerts: Email alerts SCOM connector Alert Reports in SRS Alerts in SQL D...
It is well known for anyone who tried to run a VM in the cloud that RDP port if left opened will be attacked with massive waves of brute-force attempts from IPs all around the world. I run a detection...
In recently released Update 1 for InTrust 11.4.1 there is a hidden gem – Suspicious process was started rule, it allows detection of hidden steps that ransomware and malware would do to achieve persis...
Something really cool about honeypots and deception technology, in general, is that you can see a hacker or a penetration tester in action with very little false positive notifications. Deception also...
The cyber-security community is buzzing about this recently unveiled vulnerability in Windows Textservices Framework. "Project Zero: Down the rabbit hole" https://googleprojectzero.blogspot.com/2019/0...
Quest InTrust 11.3.2 maintenance release happened last week. One of the main features is improved and expanded support for Linux OS. Let me focus on this topic and provide some details about how InTru...
