Forensics: Analyzing a WordPress Attack / Hack

Analysis Website Security Hack

Recently one of our honeypots was it by an attacker and in the process we were able to gather a bunch of good intelligence on the actions taken by the attacker. I write and detail the forensics of the attack in my latest post, for Sucuri: Case Study: Analyzing a WordPress Attack – Dissecting the…

Read More

Analysis of Top 1 Million Domains

Analysis Top Websites

Over at Sucuri, our researchers have been having fun downloading the internet, in the process they found some interesting data… Also be sure to check out the blog post, Over 10 of Alexa Top Million Websites Are Not Safe, on the subject.

Read More

OSSEC: Stop Agent Email Notifications from Being Grouped

email

This a quick post, for those of you that manage multiple agents under your manager, there might be instances where your email notifications will group different agent notifications together. This has to do with two things: Number of emails sent in an hour Grouping setting is On Default Max Emails By default, OSSEC has a…

Read More

Create an Email Distribution List Using Google Apps

Google Distribution List

**Updated August 2017 to reflect the most current changes** I am personally a big fan of Google Apps for all Small Businesses. I find it to be a comprehensive solution, offering a wide range of productivity tools – including email. As a small business, one of the things that helps establish trust and authority with…

Read More

OSSEC – Detecting New Files – Understanding How it Works

Security

I recently saw some discussion in the OSSEC distribution list of someone having an issue with getting OSSEC syscheck to work right in real-time. It reminded me of a similar issue I had with my own configuration and others I have read about, so I figured I’d write something to shed light on how OSSEC’s…

Read More