CentOS6 again. Download the latest version of kibana from http://www.elasticsearch.org/overview/kibana/installation/cd /var/www/ wget http://www.elasticsearch.org/overview/kibana/installation/ tar zxvf kibana* rm kibana*.gz mv kibana* kibana3 Create a kibana configuration file for Apache. <VirtualHost YOURIP:80> ServerName FQDN DocumentRoot /var/www/kibana3 <Directory /var/www/kibana3> Allow from all Read more…
I needed to determine the average traffic seen at the internet gateway in order to scope full packet capture, Bro and flow data.Then i needed to find traffic to eliminate and gain storage retention. Mon-Fri are peak, and Sat-Sun are Read more…
All done on CentOS6 There are scripts to automate this, but I like installing everything from source to learn more about the packages. Here’s an example script along with a gui for SiLK rw commands.FlowBat Download the following source code Read more…
Logstash InstallationThe Logstash package shares the same GPG Key as Elasticsearch, and we already installed that public key, so let’s create and edit a new Yum repository file for Logstash:sudo vi /etc/yum.repos.d/logstash.repo Add the following repository configuration:[logstash-1.4]name=logstash repository for 1.4.x Read more…
These installs are on the latest CentOS6 as of October 2014. First we have to install PF_RING to take advantage of the performance boost and to load balance bro processes. Bro is not multithreaded. Package Prerequisites: sudo yum install subversion Read more…
Let’s say you’re using Bro, and you have this bad assed app called ELSA to search through the mountains of logs produced. You find exactly what you’re looking for but you need the payload from the stream. One option is Read more…
WordPress MU uses a PHP mailer function to send email. Therefore you have to change the setting in /wp-includes/pluggable.php. Unlike regular wordpress, where you can change the setting in wp-functions.php or wp-mail.php. Edit pluggable.php // From email and name// If Read more…
Engineering Principles for IT SecurityPrinciples and Practices for Securing ITComputer Security Act of 1987Government Information Security Reform ActFIPSPrivacy Act of 1974Recommended Security Controls
NCSA Security PoliciesSANS Policy TemplatesInformation Security Policies and Standards
Risk Management Guide For IT SystemsSEPM Certificate ProgramsRisk Management and Business Continuity PlanningPerformance Measurement Guide for Information SecurityThreat and Risk Assessment Working Guide