-
Screencast: An introduction to NSM-Console
January 5, 2008Well, I’ve been working on this for the last week or so, trying to get it all working the way I wanted, and after around 15 takes, I finally have a screencast for anyone interested in the idea behind and usage of nsm-console. The version of nsm-console used in the screencast is the 0.3-DEVEL version. […]
-
Security blog roundup
January 4, 2008Talking with enhanced in IRC, I realized that I should really do a post listing some of the security blogs that I read, so without further ado, I present you with the list (in no particular order) My awesome wife’s food blog, Eatables Hex people Geek00l – http://geek00l.blogspot.com/ Enhanced – http://global-security.blogspot.com/ Giovani – http://www.cblume.com/ Chflags […]
-
Some reference for locality in infosec
January 4, 2008A week or so ago I wrote about locality of reference in regards to network security, I found some *actual* research done on the topic and wanted to share it: http://www.cert.org/netsa/publications/Nspw2003-gates-locality.pdf I’m still in eager anticipation of the first tool to use locality for malicious activity assesment.
-
Development version of nsm-console (0.3-DEVEL)
January 1, 2008I just pushed out a newer development version of nsm-console out to navi.eight7.org, here are some of the new features: Snort module with community rules self-contained snort module will all the community rules and configuration file, this’ll generate alerts into a file after reading the pcap file. I wasn’t sure whether to use community or […]