by Eric Ooi | Jan 28, 2020 | firewall, how-to, information security, network security monitoring
Palo Alto manufactures industry-leading firewall hardware, combining a number of traditional security point solutions into one single platform. The following is a collection of how-to guides to help you get the most from your Palo Alto firewall on a home or small... 
by Eric Ooi | Jan 22, 2020 | how-to, incident response, information security, network security monitoring
This is part of the Zeekurity Zen Zeries on building a Zeek (formerly Bro) network sensor. Overview In our Zeek journey thus far, we’ve: Set up Zeek to monitor some network traffic. Used Zeek Package Manager to install packages. Configured Zeek to send logs to... 
by Eric Ooi | Aug 22, 2019 | how-to, incident response, information security, network security monitoring
This is part of the Zeekurity Zen Zeries on building a Zeek (formerly Bro) network sensor. Overview In our Zeek journey thus far, we’ve: Set up Zeek to monitor some network traffic. Now we’ll introduce the Zeek Package Manager to extend Zeek’s... 
by Eric Ooi | Aug 22, 2019 | cool tools, featured, how-to, incident response, information security, network security monitoring
Zeek is my favorite network security monitoring platform, and I’ve used it throughout my career. It generates rich network metadata that’s incredibly valuable for incident response, forensics, and general troubleshooting. For most people, the main challenge with... 
by Eric Ooi | Jan 2, 2019 | how-to, incident response, information security, network security monitoring
This is part of the Zeekurity Zen Zeries on building a Zeek (formerly Bro) network sensor. Overview In our Zeek journey thus far, we’ve: Set up Zeek to monitor some network traffic. Used Zeek Package Manager to install packages. Now we’ll send our Zeek... 
by Eric Ooi | Oct 12, 2018 | cool tools, how-to, incident response, information security, network security monitoring
This is part of the Zeekurity Zen Zeries on building a Zeek (formerly Bro) network sensor. Overview This guide assumes you’ll be installing Zeek on Ubuntu 22.04 LTS. However, the guide should work for any reasonably recent versions of Ubuntu. Kicking things...