security_wiki:main

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision 		Previous revision
Next revision Both sides next revision
security_wiki:main [2017/01/17 03:37]
mikeofmany [IDS/IPS] 		security_wiki:main [2017/02/18 01:44]
wizard [The Rules of Network Security]
Line 9: Line 9:
  
 ===== IDS/IPS ===== ===== IDS/IPS =====
-  * Qradar+  * Cisco SourceFire
   * Snort IDS   * Snort IDS
   * CheckPoint   * CheckPoint
   * BroNSM   * BroNSM
 +  * TrendMicro Tipping Point
  
 ---- ----
  
 ===== The Rules of Network Security ===== ===== The Rules of Network Security =====
-  - Never self incriminate+  1) Never self incriminate
     * Never admit     * Never admit
     * Deny everything     * Deny everything
Line 23: Line 24:
     * Make counter-allegations     * Make counter-allegations
     * Act belligerent and throw stuff     * Act belligerent and throw stuff
-  - No excuses +  2) No excuses 
-  - Don't put your dick in crazy +  3) Don't put your dick in crazy 
-    * **Alternate:** Don't let crazy put its dick in you +          3a) Don't let crazy put its dick in you 
-  - Don't be "**that guy**" +          3b) No DP 
-  - Be excellent to each other +  4) Don't be "**that guy**" 
-  - Document all the things!!+  5) Be excellent to each other 
 +  6) Document all the things!!
     * Is it in the wiki?     * Is it in the wiki?
     * Paper trail or it didn't happen, CC everyone or you didn't do it.     * Paper trail or it didn't happen, CC everyone or you didn't do it.
     * If it isn't in an email, or ticket, it never happened.     * If it isn't in an email, or ticket, it never happened.
-  - Always trust your wingman+  7) Always trust your wingman
  
 ---- ----
Line 50: Line 52:
 ---- ----
  
 +==== SIEMs ====
 +  * [[ HPE ArcSight ]]
 +  * [[ LogRhythm ]]
 +  * IBM QRadar
 +  * McAfee Nitro
 +
 +----
  • security_wiki/main.txt
  • Last modified: 2019/05/25 23:50
  • (external edit)