If you’ve got a bad memory (like me) you might some day find yourself searching for a way to configure an interface on your Ubuntu 9.04 system to use as a sniffer interface. Here is how you do it: 1) … Continue reading →

If you use the SANS Investigative Forensic Toolkit (SIFT) Workstation for your forensic analysis you can easily add log2timeline to your VMware guest image. In order to get these files using the wget, yum, and cpan methods you must ensure … Continue reading →

A colleague of mine sent me a cool little command to create, a “quick and dirty vpn over ssh”: It’s a quick and dirty vpn over ssh and only requires that ssh and pppd are installed on each end (generally … Continue reading →

Found an interesting blurb on the Mozillazine Forums: You used to be able to set this via the standard user interface pre-2.0 but now you must go to the address bar and type: about:config You can then search for the … Continue reading →

Here is a great step-by-step document for creating a Network Security Management infrastructure using Snort, Apache, SSL, PHP, MySQL, and BASE installed on CentOS 4, RHEL 4 or Fedora Core – with NTOP. Introduction from Patrick Harper, CISSP, RHCT, MCSE: … Continue reading →