2 replies
by dmiles
n recent times, your greatest exposure to trouble comes from the internet on TCP ports familiar to you and previously considered reasonably safe. For example, a happenstance session from one of your subnet workstations with a web site run by malicious practitioners, or one infected by the same kind of people, can eventually destroy your entire network by opening up vulnerability doors. We suggest you brush up on browser technology and make certain that you are using the latest available e-mail client and browser for the type of system you run. You likely know already that its the simpler things that appear innocuous in their incipient stages that eventually expose you to network-wide intrusion.
Another simple tip, be sure to visit the Sans Institute at http://www.sans.org .
If you seek some free hacker/samarai (not cracker) tools, visit our downloads server here. You will find some good solid tools and handy scripts ranging from port scanners to packet sniffers to help you watch your favourite box for intruders and to develop a better understanding of what is happening on your networks.
An extensive array of Traceroute facilities is available here.
Click this link for extended Whois queries.
DNS / BIND (Berkeley Internet Name Domain) tools are here.
by joseph moore
There are steps to do.
You can enable Failed Login Attempts (and Successful ones also) in the Event Viewer Security log. YOu could then go over the logs and see what is in there, and if there are things in there that shouldn't be.
If it is a web server you are worried about, then check the web server logs. Apache and IIS both log connection information. You can check the logs to see if people are launching exploit attempts.
This discussion is closed to new replies.
Trending Windows Forum posts
Sort by Trending