Learn step by step how to export and import Okta SIEM logs in to your open source Graylog! After many failed attempts to import Okta SIEM logs in to Graylog (using Okta Documentation and some PowerShell scripts I found online)…
Goal: Whitelist an Entire Country with ipset For this article i’ll be referencing the github repository I set up at We have a few files there, specifically: * cidr_to_ipset.sh (a script to create an ipset ruleset) * Some example…
What to do when barnyard2 won’t log to the database…. Are you seeing something like this? [SignatureReferencePullDataStore()]: No Reference found in database … Full text: # /usr/local/bin/barnyard2 -c -d /var/log/snort -f snort.log -w Running in Continuous mode –==…
Product Review – Mandiant Highlighter Today we are looking at Mandiant Highlighter; Log and Text File Viewer Product home page can be found here Cost: Free! Overview MANDIANT Highlighter is a log file analysis tool. Highlighter provides a graphical component to log analysis…
Using TCP DUMP on windows This will cover how to use command line TCPDUMP on Windows. Software Windump Winpcap Examples windump.exe -Ap -s65535 port 80 > c:\example_dump.txt
To check if twitter acct hacked you can look at the recent pastebin posts ( page 1 | page 2 | page 3 | page 4 | page 5 ) and do a find for your username. Additionally a number of…
Let’s say you wanted to hash windows files against a known good set of hashes. Here’s how to do it! Required Tools md5deep nsrlquery You’ll also need a server to query against. Luckily Kyrus has provided a nsrlserver (beta), known…
looking for a hash windows shell extension? Hashtab is probably one of the best. HashTab provides OS extensions to calculate file hashes. HashTab supports many hash algorithms such as MD5, SHA1, SHA2, RipeMD, HAVAL and Whirlpool. HashTab is supported as a Windows shell extension…
Honeynet/Honeywall Implementation Routing of malicious traffic and forensic analysis Steve Stonebraker 11/22/2010 A detailed implementation of a full interaction honeypot and honeywall in a virtualized VMWare environment is presented. The benefits and drawbacks of this type of this type…
to detect the mac flashback virus (courtesy of cnet.com) How does it work? The Flashback malware injects code into applications (specifically Web browsers) that will be executed when they run, and which then send screenshots and other personal information to…
