46 matches found
Not Your Average FIM: Why Customers Choose Qualys FIM
Choosing the right FIM solution is a crucial step for an organization. One should not need professional services just to onboard or manage. Traditional FIM solutions with legacy architecture are either too noisy or too hard to use. The market demands an intelligent FIM solution that is easy to...
Qualys FIM: Be Compliance Ready with Intuitive, Ready-to-Use File Monitoring Profiles
Requirements for file-level security are often set by laws, regulations, and audit standards. These include identification of what must be protected, the various controls required to implement security, and outcomes required to successfully pass audits for compliance. This blog describes these an...
Upgrade Your FIM Program to Detect Risk and Streamline Compliance
File integrity monitoring FIM tools are essential for defending business and customer data, but legacy tools are falling short by swamping security analysts with irrelevant alerts. This blog describes how Qualys FIM easily solves such issues by accurately isolating file-level breaches and sending...
Reinforce Defense with File Reputation and Trusted Source Intelligence in Qualys FIM
Monitoring change events in the file system is both a crucial aspect of security and a critical compliance requirement. A file integrity monitoring tool functions as an essential layer of defense to identify illicit activities across critical system files and registries, diagnose changes, and sen...
Qualys FIM Profile Library Updates, December 2019
The library of out-of-the-box profiles in Qualys File Integrity Monitoring FIM, with their preconfigured content, provide a scalable solution to detect and identify critical changes, incidents, and risks resulting from normal as well as malicious events. With the help of these profiles, users can...
Proper File Integrity Monitoring Critical in Light of Big Breaches & Regulatory Pressure
In light of the recent mega data breaches that have plagued our market over the last year, and the continued escalation of attempted cyberattacks against critical systems during peak periods i.e. the retail sector POS and payment systems, reported in the Carbon Black Threat Analysis Unit TAU...
CVE-2016-10690
The CVE-2016-10690 entry relates to openframe-ascii-image, an Openframe plugin that loads resources over HTTP. Connected advisories (GHSA-XJ6F-X7JM-85FF and OSV/NVD entries) confirm the root cause: insecure HTTP downloads of a binary/executable, enabling a man-in-the-middle attack where an attack...
ZeroNights 2017: back to the cyber 80s
Last Friday, 17th of November, I attended the ZeroNights 2017 conference in Moscow. And it was pretty awesome. Thanks to the organizers! Here I would like to share some of my impressions. First of all, I want to say that two main Moscow events for information security practitioners, PHDays and...
OS Instrumentation Framework: osquery
OS Instrumentation Framework osquery exposes an operating system as a high-performance relational database. This allows you to write SQL-based queries to explore operating system data. With osquery, SQL tables represent abstract concepts such as running processes, loaded kernel modules, open...
Log and Event Manager now with File Integrity Monitoring
Security pros everywhere rely on SolarWinds Log & Event Manager for powerful, affordable, and efficient Security Information and Event Management SIEM. Our All-In-One SIEM combines log management, event correlation, visualization, reporting, File Integrity Monitoring, USB defense, SQL database...
PT-2008-2120 · WordPress · Gallery
Name of the Vulnerable Software and Affected Versions: fGallery plugin for WordPress version 2.4.1 Description: The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the album parameter in the fim rss.php file. Recommendations: For version 2.4.1, consider...
FIM2010R2-AddInsAndExtensionsLP-Existence-Detectoid
This detectoid detects the existence of FIM 2010 R2 Add-ins and Extensions Language Packs + any subsequent cumulative updates...
FIM2010R2-CMClient-Existence-Detectoid
This detectoid detects the existence of FIM 2010 R2 CM Client + any subsequent cumulative updates prior to SP1...
FIM-CMClient-Existence-Detectoid
Checks for FIM Certificate Management Client RTM existence...
FIM2010R2-AddInsAndExtensions-Existence-Detectoid
This detectoid detects the existence of FIM 2010 R2 Add-ins and Extensions + any subsequent cumulative updates...
FIM2010R2-CMBulkIssuanceClient-Existence-Detectoid
This detectoid detects the existence of FIM 2010 R2 CM Bulk Client + any subsequent cumulative updates prior to SP1...
FIM-ServiceAndPortal-Existence-Detectoid
Checks for FIM Service and Portal existence...
FIM-AddInsAndExtensions-Existence-Detectoid
This detectoid checks for the existence of FIM Add-Ins and Extensions RTM Update1 build...