NETSEC

Latest

Sunday, December 15, 2019

Symantec DLP Operation Notes (Reboot and Backup Oracle DB Procedures)

Netsec 12/15/2019 0 Comments

Here are some notes I recorded when I was working on Symantec DLP project, mostly focusing on operation DLP servers, not involving installa...

Read more No comments:

Friday, December 6, 2019

Windows

PID 4 listening on Port 80 or Port 12345

Netsec 12/06/2019 0 Comments

It was interesting during one of our Vulnerability Scanning. There are lots of machines listening on port 12345, and it does has lots of con...

Read more No comments:

Friday, November 29, 2019

Architecture

TRA (Threat and Risk Assessment) & Two Examples (Quantitative & Qualitative)

Netsec 11/29/2019 0 Comments

A Threat and Risk Assessment analyzes a software or hardware system for vulnerabilities, examines potential threats associated with those vu...

Read more No comments:

Monday, November 25, 2019

Palo Alto

Palo Alto UserID Agent Configure Steps

Netsec 11/25/2019 0 Comments

One of the challenges in configuring firewall policies is the fact that they rely on IP addresses and IP subnets rather than users or user g...

Read more No comments:

Sunday, November 24, 2019

SIEM

SIEM System Use Cases

Netsec 11/24/2019 0 Comments

Working on LogRhythm - Cloud SIEM project. LogRhythm's SIEM solution combines enterprise log management, security analytics, user entity...

Read more No comments:

Thursday, November 21, 2019

Palo Alto

Palo Alto Firewall Migration Plan Tasks List

Netsec 11/21/2019 0 Comments

It is simple breakdown for a complicate firewall migration plan. It can be used to plan migration from existing firewalls to new Palo Alto ...

Read more No comments:

Wednesday, November 20, 2019

CyberArk

CyberArk Tips and Tricks

Netsec 11/20/2019 2 Comments

Collections some small tips and tricks to tune CyberArk meeting business requirements.

Symantec Endpoint Detection & Response (EDR) Notes

Netsec 11/20/2019 0 Comments

Symantec EDR (Endpoint Detection & Response, Previously ATP - Advanced Threat Protection) exposes advanced attacks with precision machin...

Read more No comments:

Tuesday, November 19, 2019

Vulnerability Scan

Vulnerability: SSL/TLS use of weak RC4(Arcfour) cipher port 3389/tcp over SSL

Netsec 11/19/2019 0 Comments

Recent during a vulnerability scan , there is RC4 cipher found using on SSL/TLS connection at port 3389. The solution in the Qualys report i...

Read more No comments:

Sunday, November 17, 2019

SIEM

The Rocket-fast Syslog Server - Rsyslog Client and Server Configuration

Netsec 11/17/2019 0 Comments

Rsyslog is an Open Source logging program, which is the most popular logging mechanism in a huge number of Linux distributions. It's als...

Read more No comments:

Threat Hunting

Bulk IP Reputation Check using Security Websites and Open Source Scripts

Netsec 11/17/2019 2 Comments

This topic has been haunted in my mind for quite a while. As an information security guy, we got tons of reports about end point activities....

Latest

NETSEC

Sunday, December 15, 2019

Symantec DLP Operation Notes (Reboot and Backup Oracle DB Procedures)

Friday, December 6, 2019

PID 4 listening on Port 80 or Port 12345

Friday, November 29, 2019

TRA (Threat and Risk Assessment) & Two Examples (Quantitative & Qualitative)

Monday, November 25, 2019

Palo Alto UserID Agent Configure Steps

Sunday, November 24, 2019

SIEM System Use Cases

Thursday, November 21, 2019

Palo Alto Firewall Migration Plan Tasks List

Wednesday, November 20, 2019

CyberArk Tips and Tricks

Symantec Endpoint Detection & Response (EDR) Notes

Tuesday, November 19, 2019

Vulnerability: SSL/TLS use of weak RC4(Arcfour) cipher port 3389/tcp over SSL

Sunday, November 17, 2019

The Rocket-fast Syslog Server - Rsyslog Client and Server Configuration

Bulk IP Reputation Check using Security Websites and Open Source Scripts

Search

About + Social

NETSEC Blog

Categories

Popular

Recent Comments

51SEC Sites

Blog Archive

Translate

Pages

YouTube

Contact Us