본문 바로가기

syslog18

Syslog: log all bash history from every user There are sometimes I wish I had kept all of my history actions within the last 3 days, or I wish I could supervise what an other user have done to a system, I tried to find a way to log all ssh sessions to the server, logging them to syslog and keeping any action performed by every user! This is good for auditing some systems.I thought that a good idea is to pass to system wide bashrc a prompt .. 2014. 12. 15.
OSSEC Log Management with Elasticsearch Log Management System ArchitectureThe OSSEC log management system I’ll discuss here relies on three open source technologies, in addition to OSSEC:Logstash – Parses and stores syslog data to ElasticsearchElasticsearch - General purpose indexing and data storage systemKibana – User interface that comes with ElasticSearchLogstash is configured to receive OSSEC syslog output then parse it and forwa.. 2013. 11. 23.
OSSEC Server, Client, Web UI and Analogi Dashboard Installation tutorial OSSEC is an Open Source Host-based Intrusion Detection System that performs log analysis, file integrity checking, policy monitoring, rootkit detection, real-time alerting and active response. It runs on most operating systems, including Linux, MacOS, Solaris, HP-UX, AIX and Windows. It also includes agentless monitoring for use with for example Cisco, HP or Juniper hardware.This tutorial covers.. 2013. 11. 12.
MySQL UDF를 활용한 사용자 정의 함수 추가 1. 추가할 함수 구현 - syslogudf.c 파일에 기능 구현 #include #include #include my_bool logger_init(UDF_INIT *initid, UDF_ARGS *args, char *message) { initid->maybe_null=0; return 0; } long long logger(UDF_INIT *initid, UDF_ARGS *args, char *is_null, char *error) { if (args->arg_count != 1) { strcpy(error, "LOGGER(): needs message"); return 1; } if (args->arg_type[0] != STRING_RESULT) { strcpy(error, "LOGGER() .. 2010. 1. 19.
리눅스 보안 - 공격, 해킹 관련 보안 도구 및 유틸 서버취약점 점검 툴 Cops (Computerizes Oracle and Password System) : 대표적인 보안점검 도구 스캐너관련 툴 SAINT : 관리자용 네트워크 진단도구 PortSentry : 대표적인 스캐닝방어도구이며 가장 많이사용하는 보안도구 nmap : 서버의 취약점을 점검해주는 보안도구 (해킹시 상대 웹서버 포트 스캔용으로 사용됨) ISS (Internet Security Scanner) : 상업적인 스캐닝도구 Nessus : 서버내의 취약점(헛점)들을 점검해주는 도구 CGI scanner : 웹서버의 취약점을 스캐닝하는 도구 (cgi 스크립트 스캐닝) Courtney : per로 되어 있는 SATAN, SAINT 검색기 IcmpInfo : DOS공격등을 하는 ICMP 프로토콜의 .. 2009. 8. 26.
728x90

티스토리툴바