Collaborate Disseminate
How do you figure out Snort’s source & destination IP and port if the question is so vague? For example:
Write a snort rule that detects a UK NI number sent from a client’s web browser to a web server.
I understand how to write the reg… Continue reading How to determine Snort rules source & destination IP and port
Specifically do they, but not "Can they" only because I’m fully aware that they are, and always have been, capable of intruding on any/all personal/sensitive data that isn’t encrypted on a local drive or removable hard drive. I’… Continue reading Does Microsoft scan the contents of documents uploaded to onedrives personal vault?
I have an app that I expect to run only locally when I’m debugging. I modified the app so that if it’s running in debug mode on a device I don’t recognize, it phones home to tell me the details of what it’s running on. My report() method… Continue reading Why is my unpublished app being run remotely?
Someone is spying on me. Someone is running a version of my app that I haven’t published. Under certain conditions the app phones home. And that’s what it did.
I’m working on my app. It had a bug, and it crashed. I trap the Java uncau… Continue reading Is someone spying on me?
While IT security decision makers often consider cyberattacks a serious concern and are allocating a significant share of their IT budget to address their cybersecurity challenges, data breaches have still been uncomfortably commonplace, an INTRUSION s… Continue reading While IT budget allocations for cybersecurity are significant, data breaches still very common
The volume of cyber intrusion activity globally jumped 125% in the first half of 2021 compared with the same period last year, according to the Cyber Investigations, Forensics & Response (CIFR) mid-year update from Accenture. Cyber intrusion activ… Continue reading Cyber intrusion activity volume jumped 125% in H1 2021
After reformatting my hard disk and rebuilding/re-installing the latest macOS operating system, I found the following IP addresses after running Kerberos.internal.com:
kerberos.internal.com has address 96.126.123.244
kerberos.internal.com … Continue reading Odd Kerberos Hosts After HD Wipe, and fresh OS re-install
A few hours ago, I spotted my unattended mouse moving and seeming to click on tabs. I promptly rebooted my system and removed Teamviewer (it’s the only remote connection app that I have installed), Remmina, expressvpn, and a whole bunch of… Continue reading Mouse moving while unattended, how can I check for intrusions
I am currently learning about IPS and was wondering about a query that applies to how IPS works. I have knowledge of CSRF and XSS attacks, however I am unsure if Intrusion Prevention Systems can prevent these attacks as it aims to block in… Continue reading Can an Intrusion Prevention System (e.g. Snort) prevent CSRF and XSS attacks?
We are building a packet based anomaly detection system and I’m trying to find labeled packets.
Such dataset doesn’t exist based on my search, but I can find labeled flows.
Can we say that every packet is hostile which is part of a flow th… Continue reading Is every packet of a hostile network flow hostile?