Posts

Splunk ES performance fundamentals (skipped searches)

Hunting malware with Nexthink

NXQL cheatsheet (Nexthink tables)

Hunting cryptominers with NexThink

Fixing ArcSight event categorisation mapping for snort on Security Onion

Modern Honey Network ArcSight content

Modern Honey Network and ArcSight combo

Dual boot Kali + Encrypted Windows

Kali 1.1.0 upgrade to 2.0

ArcSight Security-Onion and Snort combo

Managed SIEM/MSSP dos and don'ts

SSH port stats update

Security & Forensics USB Swiss Knife (update)

SSH port Stats