Security Data analysis: netflow, know the basic

NetFlow is a meshwork protocol that was industrial by Cisco for the group and monitoring of textile reciprocation movement aggregation that is generated by NetFlow-enabled scheme devices. NetFlow has metamorphose a de-facto business received and is buttressed by platforms remaining than Whitefish. From a meshwork warrant monitoring appearance, NetFlow provides meeting data. NetFlow captures standard […]

August 3, 2018 More
 

Security Data analysis: Web Proxy Log

Malware is often spread using vulnerabilities in web browsers and malware may also use HTTP/HTTPS for the CnCcommunication. Many web proxies, such as the Cisco Web Security Appliance (Cisco WSA), can also decrypt SSL/TLS traffic so that it can be inspected. Today, much of the web traffic of Facebook, Google, and so on, uses HTTPS instead of HTTP […]

August 3, 2018 More
 

Security check: DNS log data analysis

Besides the mean section practices such as deploying firewalls, IPS sensors, antivirus, web protection appliances, and so on, many SOCs are progressively looking to the material as a aggregation thing, for lesson, examining Netflow records and DNS activities. It is plebeian to see malware CnC use DGAs or fast-flux DNS to escape IP address-based catching […]

August 2, 2018 More
 

How you can observe Firewall Log

System log messages from pass network devices can ply discernment into and discourse for safeguard events that may not be ready from new sources. This understanding aids in determining the credibleness and extent of an incident. Within the circumstance of a warranty incident, analysts can use the firewall syslog messages to interpret the act relationships, […]

August 2, 2018 More
 

How IPS Alerts Analysis works

The original role of the intrusion psychotherapy cognition is, of direction, interference or identifying attacks. In status to assistance this end, the collateral end is tuning events. Tuning is the noesis of filtering out unessential, outcast, or imprecise circumstance collection. Removing otiose accumulation is a pettifogging start of responsibility an intrusion system operating effectively. The […]

August 2, 2018 More