suleymanpetek.com

keremozt.blogspot.com

A Blog on IT, Information Security and SIEM: SIEM Deployment - Windows Local Security Policy (Audit Policy) Configuration

http://keremozt.blogspot.com/2015/06/siem-deployment-windows-local-security.html

A Blog on IT, Information Security and SIEM. Thoughts on IT Management, Information Security and Compliance. Wednesday, June 10, 2015. SIEM Deployment - Windows Local Security Policy (Audit Policy) Configuration. In my previous blog article on collecting logs from Windows Servers, I missed a control point which can be very important while getting results from your SEM installation. By default, the main categories have precedence over subcategories, even if you configured both. The way how the default...

keremozt.blogspot.com

A Blog on IT, Information Security and SIEM: SIEM Deployment - Configuring Failover Destinations on HP ArcSight SmartConnectors

http://keremozt.blogspot.com/2015/07/siem-deployment-configuring-failover.html

A Blog on IT, Information Security and SIEM. Thoughts on IT Management, Information Security and Compliance. Saturday, July 11, 2015. SIEM Deployment - Configuring Failover Destinations on HP ArcSight SmartConnectors. Solutions so far seem to be too much focusing on security offerings they propose and they are not offering solid redundancy and disaster solutions. From architectural perspective, there should be a redundancy option at all layers of the solution architecture. SmartConnectors. In HP ArcSight...

keremozt.blogspot.com

A Blog on IT, Information Security and SIEM: July 2014

http://keremozt.blogspot.com/2014_07_01_archive.html

A Blog on IT, Information Security and SIEM. Thoughts on IT Management, Information Security and Compliance. Wednesday, July 9, 2014. Perimeter Security Devices Evaluation - Part 1. Firewall (Next Generation Firewall, UTM) Selection Criteria – Part 1. So, let’s begin naming those criteria one by one. But how far should a firewall go with functionalities? Today most firewall products offer additional functionalities such as Intrusion Prevention, Web Content Filtering (Web Proxy), Remote Connectivity Gatew...

keremozt.blogspot.com

A Blog on IT, Information Security and SIEM: May 2014

http://keremozt.blogspot.com/2014_05_01_archive.html

A Blog on IT, Information Security and SIEM. Thoughts on IT Management, Information Security and Compliance. Monday, May 5, 2014. CISSP - Passed exam in 2 months and at the 1st attempt. My journey to get CISSP certification started with my wish to prove my experience and competency on Information Security, almost a year ago. If you need guidance or a second opinion (even if you do not need anything, go and read! 8217;s Official Guide, the bible of CISSP is the AIO book. You can definitely count on it...

keremozt.blogspot.com

A Blog on IT, Information Security and SIEM: February 2015

http://keremozt.blogspot.com/2015_02_01_archive.html

A Blog on IT, Information Security and SIEM. Thoughts on IT Management, Information Security and Compliance. Wednesday, February 25, 2015. Introduction to Security Event and Log Management. Starting from this article, I will share my experiences and insight on Security Event Management and Log Monitoring. I hope you will find some useful information for yourself in them. So, at the kick-off it is important that you know and make sure that others understand:. 8221; and maybe they should stay so. Peer ...

keremozt.blogspot.com

A Blog on IT, Information Security and SIEM: SIEM Deployment - Installing ArcSight Systems on Amazon EC2

http://keremozt.blogspot.com/2015/08/siem-deployment-installing-arcsight.html

A Blog on IT, Information Security and SIEM. Thoughts on IT Management, Information Security and Compliance. Sunday, August 2, 2015. SIEM Deployment - Installing ArcSight Systems on Amazon EC2. SIEM systems can be easily considered as “Big Data” systems as the resources they use and the amount of information they process fit into Big Data systems scale. Running SIEM components require serious computing resources not only RAM, CPU and hard disk space but also a high IOPS rate. In Step 2, we should choose ...

keremozt.blogspot.com

A Blog on IT, Information Security and SIEM: SIEM Deployment - ArcSight SmartConnector Build 7.1.4.7475 is out

http://keremozt.blogspot.com/2015/07/siem-deployment-arcsight-smartconnector-7.1.4.html

A Blog on IT, Information Security and SIEM. Thoughts on IT Management, Information Security and Compliance. Friday, July 10, 2015. SIEM Deployment - ArcSight SmartConnector Build 7.1.4.7475 is out. ArcSight SmartConnector Build 7.1.4.7475 is now available! New Amazon Web Services CloudTrail SmartConnector. Which includes support for Identity and Access Management (IAM), Elastic Compute Cloud (EC2), and CloudTrail Services. Enhanced support for Logger clustering. Enhanced WinC international support.

keremozt.blogspot.com

A Blog on IT, Information Security and SIEM: SIEM Deployment - Securing HP ArcSight Web Interfaces

http://keremozt.blogspot.com/2015/07/siem-deployment-securing-hp-arcsight-web-servers.html

A Blog on IT, Information Security and SIEM. Thoughts on IT Management, Information Security and Compliance. Saturday, July 4, 2015. SIEM Deployment - Securing HP ArcSight Web Interfaces. 2014 and 2015 have been years full of discoveries on cryptographic and algorithmic vulnerabilities starting with Heartbleed. And several others. These vulnerabilities pushed many administrators patch their webservers, disable vulnerable protocols ( SSLv2, SSLv3 and even TLS1.0. Cp httpd.conf httpd.conf.backup. We should...

keremozt.blogspot.com

A Blog on IT, Information Security and SIEM: SIEM Deployment – Configuring Peering Between ArcSight Loggers

http://keremozt.blogspot.com/2015/07/siem-deployment-configuring-peering.html

A Blog on IT, Information Security and SIEM. Thoughts on IT Management, Information Security and Compliance. Saturday, July 25, 2015. SIEM Deployment – Configuring Peering Between ArcSight Loggers. When deploying your SIEM Solution Infrastructure with HP ArcSight products, you may consider installing more than one Logger systems for several reasons. Whatever the reason for using several ArcSight Loggers, the problem of lookup in several databases appears. Authentication with a logger user credentials.