Tag Info

New answers tagged

0

What you are looking for is called AWS Security Group visualization. It's essentially turning your security groups, their rules, and their relationships into a diagram or set of diagrams. Commercial solutions like Dome9 and VisualOps IDEprovide visualizations given access to your accounts: http://www.dome9.com/clarity ...


0

The meaning of syscall you can find out simply by executing: $ ausyscall 102 socketcall $ ausyscall 132 getpgid The first one is upstream bug, now fixed (reported [1]). ix86 is using this system call to shutdown socket (close one way). The second looks like problem of packaging or some downstream patch (what distribution are you using?), because this can ...


0

auditd to the rescue: ausearch -m USER_AUTH yields (among others): type=USER_AUTH msg=audit(1435161396.088:342): pid=17550 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.x terminal=ssh res=success


0

You can use the command "last" which will show users who logged into the server, ip address, and date. http://linux.die.net/man/1/last


3

Meaning which admin set a GPO in the GPMC? You can with auditing, using tools like Netwrix or similar, or you can if you deploy the AGPM (https://technet.microsoft.com/en-us/windows/hh826067). You can also make sure DS auditing is enabled and look on the DC the change was made to (good luck!) and find event 566 I believe. Personally, I like the 3rd party ...


0

It is a good idea to have the ability to use both: you can tune either Nessus or OpenVAS to run 'fast scans', and given that OpenVAS is free, this allows you to run numerous on-demand scans of any kind. Nessus may be preferred/required by some compliance auditors you interact with in the future. Some of this may be rooted in logic, but because of the ...


0

auditd is the userspace daemon that hooks into the kernel's audit subsystem and transfers those logs to the file system. Although all signs were that yours was running, you have found that restarting it caused the logs to start appearing on disc. What was wrong? Who can now say. But you may want to take away from this the lesson that all daemons that ...


1

First off, this sounds very much like trying to use technology to solve a non-tech problem, which I'm always weary of. That said, I can't imagine any off-the-shelf/out-of-box software that will do this, since it's a slightly odd, if not somewhat valid, requirement. What you could do however is intercept the requests with methods of concern and foward them ...


0

You can do it in Apache. Something like (writing from memory) should do it: <Location /api> AuthType Basic AuthName "API authentication" AuthUserFile /path/to/htusers AuthGroupFile /path/to/htgroups Require valid-user # Write user group <Limit DELETE> Require group superusers </Limit> </Location> This will ...



Top 50 recent answers are included