Author Archives: Seth
Validating Credentialed Nessus Scans (Part 2)
Authenticated Nessus scans are good. For many reasons. That said, when they fail, it can be difficult to figure out WHY they fail. This will be the second in a 3 part series of troubleshooting credentialed scans (Part 1). Today’s … Continue reading
Validating Credentialed Nessus Scans (Part 1)
Authenticated Nessus scans are good. For many reasons. That said, when they fail, it can be difficult to figure out WHY they fail. This will be the first in a 3 part series of troubleshooting credentialed scans (Part 2). Today’s … Continue reading
Antivirus policies for specific types of hosts
This was also posted on Pauldotcom here. ~ Seth In many enterprise environments business needs for performance often trump security (Ok, more often then not). A good example of this is Exchange Administrators getting grumpy about your AV client causing … Continue reading
SNMP for fun and profit!
Because you never turn off SNMP.. right? This is a pretty good article over here on Attack Vector about basics of using SNMP to further your pentest and/or using your manager’s personal networked printer against them. Most network infrastructure devices have snmp … Continue reading
Cyber Security Awareness Month Ideas?
So I saw the recent post on ISC about the upcoming Cyber Security Awareness Month in October. It’s already prompted some discussion at work that looks like it’ll have a productive end, and I’ve also got a SANS class starting … Continue reading
Application whitelisting, good or bad?
(This was a draft that’s been hiding for a few months, but it’s still relevant, even if the initial post it references is 3 months old.) So whitelisting has been brought up again. Those of you familiar with Marcus Ranum … Continue reading
GSEC Mentor Session in Sept – Germantown, MD
Found a fun email in my mailbox this morning. Starting September 21st, SANS will be running Security Essentials in Germantown, MD. This course will be taught by SANS Mentor Seth Matheson. For complete event details visit http://www.sans.org/info/60983. Security Essentials teaches … Continue reading
About the BOF at #SANSFIRE: Mac Security
So I’ve gotten a few questions about what the Mac Security BOF (Birds of a Feather – SANS event that’s essentially a discussion on a given talk by SANS attendees for SANS attendees) is about on Thursday night. So I’ll give … Continue reading
Day 1 – GWAPT
So aside from the multitude of updates today (Safari, iTunes, iPhone, etc etc), and fun releases (Josh Wright and WiMAX hacking), my brain is a little melted. Just spent a day with Kevin Johnson and SEC542. Good material, great teaching … Continue reading
SANSFIRE 2010!
Well that time of year is upon us again. No, I’m not talking about summer, your local DC heat wave of wetness, or my angry time of the month. SANSFIRE. It’s a yearly IT Security conference held in Baltimore each … Continue reading