Search Results for "forensics"

...Alerts are viewed and summarized in different ways, filtered, and documented until ideally no alerts remain. At any time, filters can be suppressed so that all collected alerts can be analyzed for patterns, forensics, etc. Filters can also be used to hide noisy alerts without deleting them or suppressing them at the IDS. An effective strategy for dealing with noisy alerts can be achieved by combining alert thresholding at the IDS and filtering in SNEZ. SNORT® is a registered trademark of Sourcefire, Inc. All rights reserved.

Sharing my document like SIEM | SOAR Use Cases, Incident Response Templates, Breach Runbook, Digital Forensics Tools, Penetration testing sample reports and Infosec Policies templates to help infosec community to build the SOC | MSSP's .

The Forensics Data Identifier (FDI) is a tool which allows for large data files to be easily filtered for common forensically relevant data types.The tool was intended to speed up the ediscovery and analysis processes of the forensics investigation

SQLJuicer - SQL Server Transaction Log Forensics This is a Perl tool that lists database CRUD transactions parsing SQL Server Transaction Log entries. It depends on SQL Server and SQLCMD utility. Due to this dependencies, SQLJuicer.pl script cannot run in Linux. It is prepared to be localized to any language. The output language, by this date, can be English (default) and Brazilian Portuguese

META is a decision making software which aims are to track computer attackers, computer attacks and to help investigators finding useful elements.

FreeBSD Forensics Bootable ISO

Impost is a network security auditing tool designed to analyze the forensics behind protocol exploitation.

A Java based forensics library to analyze and report on internet browser activity