Security Basics mailing list archives

Re: Honeypot Server


From: p1g <killfactory () gmail com>
Date: Thu, 17 Jan 2008 20:54:43 -0500

Hey Mo,

Keyfocus is the company,  KFSensor is the product.

This is of course, just another layer on the onion I call security. I
have a handful of them and I rotate them around a large network.
Placing them in locations where I don't have the view I have in other
locations.

Kfsensor has a central admin console where you can centrally view activity.

It has the ability to send syslog events and email alerts.

I send the events to my SIM and handle alerting there but you can
handle the alerts on each sensor.

very easy to use. go download the 15 day demo and put it up right
away. No telling what you may find. ;)

On 1/17/08, m.farid.shawara () gmail com <m.farid.shawara () gmail com> wrote:
Dear All :

Can you advise what is the best honeypot server available
Open-source or commercial - it doesn't matter as long as it will be easy to
administrate and easy to monitor and alerted ...

Mohamed Farid ...





-- 
-p1g
SnortCP
  ,,__
o"     )~  oink oink
   ' ' ' '

If you spend more on coffee than on IT security, you will be hacked.
What's more, you deserve to be hacked.
-- former White House cybersecurity czar Richard Clarke


Current thread: