264 matches found
Cowrie - SSH/Telnet Honeypot
Cowrie is a medium interaction SSH and Telnet honeypot designed to log brute force attacks and the shell interaction performed by the attacker. Cowrie is developed by Michel Oosterhof. Features Some interesting features: Fake filesystem with the ability to add/remove files. A full fake filesystem...
How to Configure NetScaler MAS Simplified Audit Log Management
This article describes how to configure NetScaler MAS simplified audit log management. Background Audit logs are generated and stored centrally in the NetScaler MAS server's database for all the changes you make on the NetScaler instances through NetScaler MAS. These logs can be filtered by modul...
CVE-2017-5199
The editbanner feature in SolarWinds LEM aka SIEM through 6.3.1 allows remote authenticated users to execute arbitrary code by editing /usr/local/contego/scripts/mgrconfig.pl...
CVE-2016-6269
Multiple directory traversal vulnerabilities in Trend Micro Smart Protection Server 2.5 before build 2200, 2.6 before build 2106, and 3.0 before build 1330 allow remote attackers to read and delete arbitrary files via the tmpfname parameter to 1 logmgtadhocqueryajaxhandler.php, 2...
VMware vRealize Log Insight Cross-Site Request Forgery Vulnerability
VMware vRealize Log Insight is a suite of log management and analysis tools. A cross-site request forgery vulnerability exists in VMware vRealize Log Insight, which allows remote attackers to construct malicious URIs, trick users into parsing them, and can target user contexts to perform maliciou...
HP HPE ArcSight Logger Certificate Upload Security Bypass Vulnerability (CNVD-2016-00362)
HP HPE ArcSight Logger is a suite of log management software. The software collects and integrates data from any log generation source for log management, searching, indexing, reporting, analysis and retention. A vulnerability in the HP HPE ArcSight Logger client certificate upload processing...
Huawei LogCenter Denial of Service Vulnerability
Huawei LogCenter is a set of log management software from Huawei, China. A denial of service vulnerability exists in Huawei LogCenter. An attacker could exploit this vulnerability to cause the application to deny service to legitimate users...
Security Onion - Linux Distro For Intrusion Detection, Network Security Monitoring, And Log Management
Security Onion is a Linux distro for intrusion detection, network security monitoring, and log management. It's based on Ubuntu and contains Snort, Suricata, Bro, OSSEC, Sguil, Squert, ELSA, Xplico, NetworkMiner, and many other security tools. The easy-to-use Setup wizard allows you to build an...
IT Security – Do it the hard or easy way!
Whether you are a one-stop-shop IT guy or a network admin on a large IT team you owe it to yourself to learn about Security Information and Event Management SIEM technology. Why? SIEM lets you correlate between events recorded in different logs for related systems. This is significant because...
USB Defense: Stop Data Walking Out The Door
The bad news is that internal data breaches are on the rise. And one of the biggest culprits? USB devices. In the past few years, there has been many organizations tracking down the loss of sensitive/confidential information due to the usage of USB drives and other mass storage media...
How to perform Forensic Analysis using Log Data
An often overlooked feature of log management software is the ability to conduct forensic analysis of historical events. If your network goes down, your network monitoring tool can tell you what happened, but knowing why it happened is even more valuable. SolarWinds Log & Event Manager has...
Directory traversal
Multiple directory traversal vulnerabilities in SeedDMS formerly LetoDMS and MyDMS before 4.3.4 allow 1 remote authenticated users with access to the LogManagement functionality to read arbitrary files via a .. dot dot in the logname parameter to out/out.LogManagement.php or 2 remote attackers to...
AlienVault Unified Security Management: Real-Time Threat Detection Starting on Day 1
IT Infrastructure of organizations is growing ever more distributed, complex and difficult to manage. To manage such networks, a log management solution is not enough. The AlienVault Unified Security Management™ USM platform is the perfect solution to help manage the flood of information and...
Top 3 Focus Areas that can help you in Data Loss Prevention
One of the most intimidating issues that gives nightmares to IT teams across organizations is data breaches or data loss. Typically, data loss happens when security is compromised and corporate sensitive data is accessed. It might fall under any of these categories: Unauthorized, intentional or...
Top 3 Focus Areas that can help you in Data Loss Prevention
One of the most intimidating issues that gives nightmares to IT teams across organizations is data breaches or data loss. Typically, data loss happens when security is compromised and corporate sensitive data is accessed. It might fall under any of these categories: Unauthorized, intentional or...
Importance of Logs and Log Management for IT Security
IT Security is the name of the game and no matter how big or small the size of your organization, you will always invest enough on securing certain aspects of your IT network. In many organizations, it starts with monitoring your network for vulnerabilities that may enter the network to access...
Importance of Logs and Log Management for IT Security
IT Security is the name of the game and no matter how big or small the size of your organization, you will always invest enough on securing certain aspects of your IT network. In many organizations, it starts with monitoring your network for vulnerabilities that may enter the network to access...
SolarWinds Log & Event Manager for Log Management and SEIM Security
SolarWinds® Log & Event Manager LEM, a full-function Security & Information Event Management SIEM solution, delivers powerful log management capabilities in a highly affordable, easy-to-deploy virtual appliance. SolarWinds LEM combines real-time log analysis, event correlation, and a groundbreaki...
SolarWinds Log & Event Manager for Log Management and SEIM Security
SolarWinds® Log & Event Manager LEM, a full-function Security & Information Event Management SIEM solution, delivers powerful log management capabilities in a highly affordable, easy-to-deploy virtual appliance. SolarWinds LEM combines real-time log analysis, event correlation, and a groundbreaki...
PostgreSQL Patches DOS Vulnerability, Other Security Issues
PostgreSQL, a database management system for Linux, FreeBSD and other platforms patched a hole today that could have opened the system up to a denial-of-service DOS vulnerability in addition to a slew of other security flaws. An attacker could have leveraged the DOS vulnerability CVE-2013-0255 as...