Differences

This shows you the differences between two versions of the page.

--- security_wiki:main [2015/12/30 17:05]
mikeofmany adding CB
+++ security_wiki:main [2019/05/25 23:50] (current)
@@ Line 1: / Line 1: @@
 ====== Security ======
 {{ :security_wiki:security.jpeg?nolink&150|}}
-==== Firewalls ====
+===== Firewalls =====
   * [[ Cisco ASA Packet Capture ]]
   * [[ Ports Used by LWAPP/CAPWAP ]]
-==== IDS/IPS ====
+----
-  * Qradar
-  * ArcSite
+===== IDS/IPS =====
+  * Cisco SourceFire
   * Snort IDS
   * CheckPoint
   * BroNSM
-==== The Rules of Network Security ====
+  * TrendMicro Tipping Point
-  - Never self incriminate
+----
+===== The Rules of Network Security =====
+) Never self incriminate
     * Never admit
     * Deny everything
@@ Line 18: / Line 24: @@
     * Make counter-allegations
     * Act belligerent and throw stuff
-  - No excuses
+) No excuses
-  - Don't put your dick in crazy
+) Don't put your dick in crazy
-    * **Alternate:** Don't let crazy put its dick in you
+a) Don't let crazy put its dick in you
-  - Don't be "**that guy**"
+) Don't be "**that guy**"
-  - Be excellent to each other
+) Be excellent to each other
-  - Document all the things!!
+) Document all the things!!
     * Is it in the wiki?
     * Paper trail or it didn't happen, CC everyone or you didn't do it.
     * If it isn't in an email, or ticket, it never happened.
-  - Always trust your wingman
+) Always trust your wingman
-===Carbon Black===
+----
+===== Carbon Black =====
   - Trust me, the community isn't the best, but it's better than nothing.
     * https://community.bit9.com/login.jspa?referer=%252Findex.jspa
   - [[ Quick Guide to Carbon Black ]]
+----
+===== Kippo HoneyPot =====
+  - {{ security_wiki:kbkippoinstalonamazon.pdf }}
+  - http://how-to.linuxcareer.com/deployment-of-kippo-ssh-honeypot-on-ubuntu-linux
+  - http://bruteforce.gr/kippo-reveals-itself-with-w-and-uptime-commands.html
+----
+==== SIEMs ====
+  * [[ HPE ArcSight ]]
+  * [[ LogRhythm ]]
+  * IBM QRadar
+  * McAfee Nitro
+----