Comments for secauditor speaks: hmmmm...Security - Imagine That

Comment on The Tai Chi of Active Directory in the DMZ by altonius

altonius — Thu, 16 Apr 2009 23:57:34 +0000

Here’s a question regarding this DMZ layout. What happens to a user from the Internal Domain when they logon to a DMZ domain computer? What is the traffic flow from the DMZ domain computer, does the traffic from the DMZ computer talk to the forest root and the forest root domain controller talk back to the Internal domain DMZ or is there any direct communication from the DMZ computer to the internal domains DC?

Comment on To Catch a Crook: Pt 2 The Pigman by salma

salma — Thu, 19 Mar 2009 06:23:35 +0000

what do you recommend if you already have snort and other log files that need analyzing. how can you add or parse log file to add to mysql for ACID to create reports. any thoughts

Comment on Paper Published on Breaking WPA TKIP by Thor

Thor — Mon, 16 Mar 2009 05:31:58 +0000

Any new posts?

Comment on SANS brings CISSP training to Anchorage, Alaska by CISSPME

CISSPME — Thu, 18 Dec 2008 22:14:26 +0000

Thanks for this post. My goal is to be certify CISSP. Here is a link to a page where security professionals work towards CISSP and other certs

Comment on Now the Tools – Pt.3 Hydra by » Now the Tools - Pt3. Hydra » Free Software

» Now the Tools - Pt3. Hydra » Free Software — Thu, 23 Oct 2008 17:32:50 +0000

[...] Software news by secauditor [...]

Comment on Insiders Pose Biggest Threats by Rob Douglas - Editor, InsideIDTheft.info

Rob Douglas - Editor, InsideIDTheft.info — Wed, 15 Oct 2008 16:21:03 +0000

Study after study shows that most breaches are a result of insiders – either through negligence or criminality.

Comment on Port Knocking and using fwknop by secauditor

secauditor — Tue, 14 Oct 2008 04:50:14 +0000

Thor your devious mind is always at work. I like it. Currently there is not a zero day for fwknop.

Comment on Port Knocking and using fwknop by Thor

Thor — Mon, 13 Oct 2008 06:48:48 +0000

Very nice… A great way to hide services, as long as there isn’t a zero-day for fwknop.

Comment on Nipper – Network Device Configuration Security Auditing Tool and Training by Nipper - Network Device Auditing Tool anf Training « Binary Insanity

Nipper - Network Device Auditing Tool anf Training « Binary Insanity — Wed, 01 Oct 2008 18:42:49 +0000

[...] read more | digg story [...]

Comment on Utilizing winexe to create a backdoor by secauditor

secauditor — Wed, 01 Oct 2008 00:49:01 +0000

Port 123424 ultimately though you are accessing the IPC$ share so access across the Internet is not an option. This is more valuable for Incident Handling or Forensics.