Security Onion

Just a quick note that there is a bug in the setup script in the current version of Security Onion. If you double-click the Setup desktop s...

Suppose that a web page has some Javascript that contains some hex encoding like this: \x74\x65\x73\x74\x69\x6e\x67\x20\x31\x20\x32\x20\x33\...

My SANS MGT414 CISSP class is about to study the Cryptography domain. An excellent resource that I recommend to anybody learning about Cryp...

Mark Baggett and I learned a few things this week about using tshark to decrypt SSL. Mark posted our lessons learned here: Tshark/Wireshark...

I'm mentoring SANS MGT414 Training Program for CISSP right now. Here are some additional resources for students studying for the CISSP...

Congratulations to the latest SANS GSEs! Doug Burks Mike Cardosa Jim Clausing Vishal Hariprasad Seth Misenar Chris Mohan If you are consider...

Security Onion Live 20101010 is now available! Thanks to Matt Jonkman and Emerging Threats for hosting! You can download the ISO here: htt...

Please join us at the Greater Augusta ISSA Q4 meeting on Thursday, October 28. This is our last public meeting of 2010! I will be presenting...

I'm currently working on building the next version of the Security Onion LiveCD. It will be based on a fully-updated Xubuntu 10.04 and ...

Have you ever considered pursuing the CISSP certification? It *can* be intimidating, but SANS and the Greater Augusta ISSA are here to help...

The Greater Augusta ISSA is extremely excited to welcome Rob Lee this quarter! Rob Lee is the Curriculum Lead for Digital Forensic Training ...

The Greater Augusta ISSA will present a 2-hour preview of the upcoming SANS 560 Mentor class on Thursday, July 15th. Please join us for a F...

I will be mentoring SANS 560 Network Penetration Testing and Ethical Hacking in Augusta starting Tuesday, August 17. Typical SANS Mentor se...

Recently, I had a need to be alerted by email each and every time a certain user logged in. After a few false starts, I eventually settled ...

These days, it's imperative to keep all your software updated. Not only is it extremely important that you update your Microsoft softwa...

Russ McRee wrote an excellent article about OSSEC for the October 2009 issue of ISSA Journal. (Disclaimer: I contributed to the article.)...

Mark Baggett posted some excellent videos at PaulDotCom showing solutions to the CSAW Exercises for a burgeoning Army of Ninjas : http://p...

I'm joining Joel Esler in a quest to help kill Adobe Flash . Go to http://www.youtube.com/html5 to use HTML5 instead of Flash in your...

SANS has a new web site for those interested in Computer Security Training: Computer Security Training

I've written about NSMnow a few times before and I'm a big fan. They already had at least partial support for Fedora and I suggeste...

I'll be mentoring SANS 401 Security Essentials in Augusta, GA on Tuesday nights starting January 12, 2010. ISSA members are eligible fo...

I've been getting more and more feedback on each successive release of the Security Onion LiveCD. Thanks to all those who've sent i...

A new version of the Security Onion LiveCD has been released! Here's the changelog: 2009/07/31: New Release! * All Xubuntu 9.04 updates...

UPDATE: This issue has been fixed in the Security Onion LiveCD 20090731 release . I was testing the new Security Onion LiveCD yesterday and...

A new version of the Security Onion LiveCD has been released! Here's the changelog: * All Xubuntu 9.04 updates as of 2009/07/24. * Adde...

From http://www.pcworld.com/article/168160/ussouth_korea_cyberattack_lessons_learned.html : "Investigators may not yet know who was be...

Announcement from SANS: "In August, SANS will be running 5 tracks in support of the US-CERT GFIRST conference taking place at the Omni ...

I'm currently working on the next version of the Security Onion LiveCD. What specific packages/features would you like to see added to ...

A new version of the Security Onion LiveCD is now available! Here's the changelog: -All Xubuntu 9.04 updates as of 2009/06/13. -Adde...

The Security Onion LiveCD is now available! You can download it from the following location: http://distro.ibiblio.org/pub/ linux/distribut...

My previous Sguil/NSMnow recipes used Ubuntu 8.04. I thought I'd play with the new Ubuntu 9.04 and see if there were any differences. ...

One of my SANS 503 Mentor students has started his own blog. Check it out at: http://detroitdavesraves.blogspot.com/

At work, one of our remote business units was experiencing slowness in their WAN link. Our Network Architect began looking into the problem...

My SANS GCIA Gold Paper on Snort 3.0 Beta 3 has been posted to the SANS Reading Room!

Wireshark 1.0.7 has been released. Please upgrade ASAP! For more information about the release, please see: http://www.wireshark.org/docs/...

Snort 2.8.4 has been released. From http://www.snort.org/pub-bin/snortnews.cgi#864 : Snort 2.8.4 is now available on snort.org, at http://w...