Phil Hagen's Scratch Pad

How Not To Capitalize On A Security Compromise

By Phil Hagen On December 13, 2010 · 3 Comments · In Information Security

Permanently Ban Repeat Offenders With fail2ban (UPDATED)The fail2ban suite is a very useful tool in the battle against brute force login attempts. Where it's capabilities broke down for me, however, was in addressing repeat offenders. This post includes a configuration to permanently block repeat offenders using the iptables firewall.
Comcast Sets Customers Up as Phishing TargetsToday I received an e-mail message from Comcast extolling the [...]
Logstash: BFD (Big Forensic Data)Presentation video and slides from last week's Security Weekly show, where I talked about Logstash in forensic investigations.
iptables Processing FlowchartI've created a flowchart that details the flow traffic takes through the various tables and chains of the Linux iptables firewall.

Logstash: BFD (Big Forensic Data)Presentation video and slides from last week's Security Weekly show, where I talked about Logstash in forensic investigations.
Slides from SANS @Night, Bangalore IndiaI really enjoyed giving a SANS @Night talk in Bangalore, [...]
iptables Processing FlowchartI've created a flowchart that details the flow traffic takes through the various tables and chains of the Linux iptables firewall.
Slides from SANS @Night: There's GOLD in Them Thar Package Management DatabasesI still need to pull the commands out of this [...]