Comments for Thoughts of a Security ProfessionalSharing thoughts with the community about my everyday practice with special focus on incident response management, security information event management, and network monitoring.Comment by BurtonTechSupport on Is it too quiet- April 30, 2007 Consider this scenario: We already know that the 'casual' way of breaking into computer networks is long past and now it's highly organised. So the organisations get together and decide to ease up deliberately on attacks - IT security staff get to do less and less - accountants see this and the cut backs get going in earnest, then when everyone is at their most vulberable a major and coordinated assault is launched. All those bot-nets that seem to be sleeping weren't set up for nothing !http://networking.ittoolbox.com/r/rss.asp?url=http://it.toolbox.com/blogs/pa5kl/is-it-too-... Comment by rohnskii on Self-imposed Denial-of-Service- April 18, 2007 Hey Danger:snipIs it that there are viruses on computers waiting for a specific moment or action to activate snipYes, several ways. One of the things that a freeware AV I run, Adware Remover, looks for is File Fingerprints (signatures). And don't forget, cookies are files that are inactive until the site is visited. But they can be the key to triggering all sorts of malware downloads. And something like a file (ie pron) sharing botnet can download files that sit onhttp://networking.ittoolbox.com/r/rss.asp?url=http://it.toolbox.com/blogs/pa5kl/selfimpose... Comment by Danger_Danger on Self-imposed Denial-of-Service- April 17, 2007 Surfing the Web I have come across the http:www.infectedornot.com site, which includes two online scanners that apparently scan the PC in a very short time. They also claim to detect more malware than any other antivirus installed on the computer. Supposedly these tools can detect viruses running on the computer. I tried one of them and was actually quite surprised at how fast it was. It didnt detect anything unusual, but asked me to use the second scanner which, so it says, can detect anythhttp://networking.ittoolbox.com/r/rss.asp?url=http://it.toolbox.com/blogs/pa5kl/selfimpose... |