Zen 2.0

Eventlog to Syslog Utility from Purdue University. The Eventlog to Syslog utility is a program that runs on Microsoft Windows NT, 2000, or 2003 server, monitoring eventlog messages. When a new message appears in the eventlog, it is read, formatted, and forwarded to a UNIX syslog server. Depending on the facility and priority of the [...]

SC Magazine has a new article today on measuring security performance. Five recommendations were made: Recommendation #1:  Establish a Risk Baseline Recommendation #2 – Conduct Real-Time Measurements of Changes in Risk Levels Recommendation #3 – Benchmark the “Mean Time to Repair” for Security Problems Recommendation #4 – Compare Baseline Information to Desired Outcome Recommendation #5 [...]

Did I post this one before? I am not sure any of the companies mentioned in the article are actually doing anything to define a new log format standard, other than maybe IBM’s Common Event Infrastructure and Common Base Event format. But even IBM’s making a single log extremely complicated. Security point products such as [...]

Here’s a list of open source log analysis tools that I know of. Lire by LogReport.org Simple Event Correlator (SEC) Apache Chainsaw Sisyphus toolkit Open Source Security Information Management Logsurfer LMon Automated Incident Reporting Crusoe Correlated Intrusion Detection System Monitoring, Intrusion Detection, [and] Administration System SGUIL Please let me know if you know of others [...]

Welcome to the sisyphus toolkit! Version 0.9beta (Nov 5, 2004) This is a snapshot of some tools created by a project with the following charter: With the specific goal of increasing supercomputer RAS (reliability, availability, and serviceability), we intend to produce a machine-learning analysis system which enables content-novice analysts to efficiently understand evolving trends, identify [...]

Amazon has setup a great way for everyone to donate cash to the Indian ocean tsunami victims. As of this moment, amazon users have donated over $6.6 million!! Wikipedia provides up-to-date information on the event. The death toll from the Indian Ocean Earthquake and subsequent tsunamis on December 26 has exceeded 130,000 people in 13 [...]

Anders Nordby released his new tool, LMon. LMon is a package for near real-time monitoring of logs, sending e-mail alerts upon known (rule hits) or unknown data (rule misses). Features: – Buffer multiple rule hits within a given interval, cap at a given maximum number of lines, wait for a given interval before sending next [...]

Approximately sixty to eighty percent of your company’s asset is defined as Intellectual Properties, or IP. IP includes everything from patents, trademarks, brands, trade secrets, designs, architectures, copyrights, algorithms, software code, hardware schematics, inventions, business processes, and many other intangible assets. These are properties that may or may not have no physical presence. They exist [...]

I was searching the web for information on Cisco IDS and found this link. Obviously it’s not available as it has been password protected by Network Intelligence. However, if you use the Google Cache, you are able to see the content at the time Google indexed it. A bit more poking around, I found a [...]

This is for you stats buffs who are doing market research. 23% of US banks are planning major updates to infrastructure About 23% of all US banks are planning major initiatives related to core banking systems, according to Gartner. US banks lag behind financial institutions in other parts of the world such as Europe, where [...]