PID 4 listening on Port 80 or Port 12345
Netsec
12/06/2019
0 Comments
It was interesting during one of our Vulnerability Scanning. There are lots of machines listening on port 12345, and it does has lots of con...
Read More
Friday, December 6, 2019
Friday, November 29, 2019
TRA (Threat and Risk Assessment) & Two Examples (Quantitative & Qualitative)
Netsec
11/29/2019
0 Comments
A Threat and Risk Assessment analyzes a software or hardware system for vulnerabilities, examines potential threats associated with those vu...
Read More
Monday, November 25, 2019
Palo Alto UserID Agent Configure Steps
Netsec
11/25/2019
0 Comments
One of the challenges in configuring firewall policies is the fact that they rely on IP addresses and IP subnets rather than users or user g...
Read More
Sunday, November 24, 2019
SIEM System Use Cases
Netsec
11/24/2019
0 Comments
Working on LogRhythm - Cloud SIEM project. LogRhythm's SIEM solution combines enterprise log management, security analytics, user entity...
Read More
Thursday, November 21, 2019
Palo Alto Firewall Migration Plan Tasks List
Netsec
11/21/2019
0 Comments
It is simple breakdown for a complicate firewall migration plan. It can be used to plan migration from existing firewalls to new Palo Alto ...
Read More
Wednesday, November 20, 2019
CyberArk Tips and Tricks
Netsec
11/20/2019
2 Comments
Collections some small tips and tricks to tune CyberArk meeting business requirements.
Read More
Symantec Endpoint Detection & Response (EDR) Notes
Netsec
11/20/2019
0 Comments
Symantec EDR (Endpoint Detection & Response, Previously ATP - Advanced Threat Protection) exposes advanced attacks with precision machin...
Read More
Tuesday, November 19, 2019
Vulnerability: SSL/TLS use of weak RC4(Arcfour) cipher port 3389/tcp over SSL
Netsec
11/19/2019
0 Comments
Recent during a vulnerability scan , there is RC4 cipher found using on SSL/TLS connection at port 3389. The solution in the Qualys report i...
Read More
Sunday, November 17, 2019
The Rocket-fast Syslog Server - Rsyslog Client and Server Configuration
Netsec
11/17/2019
0 Comments
Rsyslog is an Open Source logging program, which is the most popular logging mechanism in a huge number of Linux distributions. It's als...
Read More
Bulk IP Reputation Check using Security Websites and Open Source Scripts
Netsec
11/17/2019
2 Comments
This topic has been haunted in my mind for quite a while. As an information security guy, we got tons of reports about end point activities....
Read More
