Biography
Books
|
|
Blog
Anton Logging Tip of the Week #15: Fear and Loathing in Event 560 (and 562 and 567)
May 08 2008
Following the new "tradition" of posting a security tip of the week (mentioned here, here ; SANS jumped in as well), I decided to follow along and join the initiative. One of the bloggers called it "pay it forward" to... read morePoll #8: What additional information is most useful for log analysis?
May 05 2008
So, my next poll is up - and it is fun: Which of the types of information are most useful when trying to make sense of a log entry? Vote here! Past polls: Poll #7 "What tools do you use... read moreAnton Security Tip of the Week #14: More access_log Fun: What Are You Not GETting?
March 12 2008
Following the tradition of posting a tip of the week (mentioned here, here ; SANS jumped in as well), I decided to follow along and join the initiative. One of the bloggers called it "pay it forward" to the... read morePoll #7: What tools do you use for Windows Event Log collection?
March 07 2008
My next fun logging poll is here - please vote! It is about tools for centralized collection of Windows Event Log from servers and other systems. One of the somewhat surprising discoveries from my previous poll was that few people... read moreTop 11 Reasons to Analyze Your Logs
March 05 2008
As promised, here is another "Top 11 Reasons" which is about log analysis. Don't just read your logs (definitely don't just collect them); analyze them. Why? Here are the reasons: Seen an obscure log message lately? Me too - in... read morePoll: What logs do you actually LOOK at?
March 05 2008
This is my 6th logging poll (vote here now!)- links to the previous five polls below. This one is deceptively similar to the #1 below, but it is not. This poll is What logs do you actually LOOK at? and... read morePoll: What are your top challenges with logs and logging?
January 21 2008
This poll is especially fun: What are your top challenges with logs and logging? Vote here. Past polls were: Poll #4 "Who looks at logs in your organization?" (analysis) Poll #3 "What Do You Do With Logs?" (analysis) Poll #2... read moreJanuary 10 2008
I just have to start with this quote from Rich Mogul: "... Legions of armchair futurists slobber over their keyboards, spilling obvious dribble that they either predict every year until it finally happens or is so nebulous that they claim... read moreTop Popular "Security Warrior" Blog Posts for 2007
January 07 2008
Even though these posts are from my main blog ( see "Security Warrior" blog) and not from this one, the top posts would still be of interest to my readers here. So, enjoy! These are my top popular "Security Warrior"... read morePoll: Who looks at logs in your organization?
December 19 2007
Here is my next poll about logs: Who looks at logs at your organization? Vote here! Also, my past polls and analysis are here. read moreNovember 29 2007
Following the new “tradition” of posting a security tip of the week (mentioned here, here ; SANS jumped in as well), I decided to follow along and join the initiative. One of the bloggers called it “pay it forward” to the community. So, Anton Security Tip of the Day #13: Into… read morePoll: What Do You Do With Collected Logs?
November 26 2007
Time for another fun logging poll: What Do You Do With Collected Logs? Vote here! This is my Logging Poll #3, links to past polls: Poll#2 “Why Collect Logs?” (vote here, results so far, my analysis) Poll #1 “Which Logs Do You Collect?” (vote here, results so far here, analysis here) read moreNovember 05 2007
The idea came from Jeremiah Grossman (here) when he described “The Best Web Application Vulnerability Scanner in the World” thus: “Within a few moments of pressing the scan button it’ll find every vulnerability, with zero false positives, generate a pretty looking report, and voila you’re compliant with GLBA, HIPAA, and… read moreTop 11 Reasons to Secure and Protect Your Logs
November 02 2007
Following my now-famous Top 11 Reasons to Collect and Preserve Computer Logs and Top 11 Reasons to Look at Your Logs, here is the promised “Top 11 Reasons to Secure and Protect Your Logs” Let’s review why you are reviewing logs. Will logs that might have been changed by somebody,… read morePoll: Why Do You Collect Logs?
October 31 2007
The previous poll (vote here, live results here, analysis here) proved to be a success so the next one is here. This time the question is: “Assuming that you centrally COLLECT system, network or security logs from their originating sources, what is THE MAIN reason for doing it?” Vote on! Results in… read more
