Search Results for "network activity indicator"

...This allows you to write SQL queries to explore operating system data. With osquery, SQL tables represent abstract concepts such as running processes, loaded kernel modules, open network connections, browser plugins, hardware events or file hashes.Osquery queries your devices like a database. Osquery uses basic SQL commands to leverage a relational data-model to describe a device. Frequently, attackers will leave a malicious process running but delete the original binary on disk. This query returns any process whose original binary has been deleted, which could be an indicator of a suspicious process.

The software program (SarBox) parses and analyzes SAR data in charts or text formats. SAR is cumulative activity counters in the operating system. It is the most comprehensive command which helps to monitor performance of various Linux / Solaris subsystems (CPU, Memory, I/O, Disk, Network, etc) all in same log. This makes it difficult to analyze since every counter data is dumped into the log file. SarBox helps to analyze this log file and present data in graphical charts or text format. ...

If you are managing hosts, you want to see what's happening on the console. Ideally you want to interact with the console as well via a managed solution. multicons will watch that console for you and allow users to interact with the console keeping complete logs. multicons is a daemon that provides multiplexed access to network accessible consoles (e.g. terminal servers, Serial Over LAN, etc). Features include kerberised authentication, ACL based entitlements, multiple viewers/editors, full...

Nuhe is a log monitoring system, which is capable of alarm generation and action when rules are matched against log(s) activity.

Pace-IDS is an Intrusion Detection system designed to replace Tripwire, in that it is faster, and more effective of detecting trojan activity, and is easier to configure. All you have to do usually is simply change one variable to your email address.