Andrew Hay

Monthly Archives: November 2009

November 24, 2009
by Andrew Hay
0 comments

links for 2009-11-24

Windows Incident Response: Working with Volume Shadow Copies (tags: forensics shadow windows) Windows Incident Response: Even More Linky Goodness… (tags: windows revealertoolkit tsk) Facebook Memory Forensics » SANS Computer Forensics, Investigation, and Response (tags: forensics facebook tools)

November 16, 2009
by Andrew Hay
0 comments

Who is Marketing Writing These Press Releases For?

Whilst looking through some of my Google News RSS feeds I noticed a press release that made me groan, laugh, and angry…all at the same time. Who is marketing writing these press releases for anyway? They certainly aren’t writing them … Continue reading →

November 16, 2009
by Andrew Hay
0 comments

Review of EventTracker 6.4 in November Network Computing Issue

My recent review of Prism Microsystems’ EventTrack 6.4 update has been published in the November issue of Network Computing. You can download the story for free here – http://www.informationweek.com/nwcdigital/nov09/index.jhtml. Enjoy

November 5, 2009
by Andrew Hay
0 comments

Upcoming Webcast: The Top 5 Fastest ROI Projects Around Identity Assurance

I’ve been asked to participate in an upcoming SANS Ask the Expert Webcast entitled The Top 5 Fastest ROI Projects Around Identity Assurance with Benjamin Cunningham from IBM. Here are the details: Webcast Overview: The Top 5 Fastest ROI Projects … Continue reading →

November 5, 2009
by Andrew Hay
0 comments

Configuring a Promiscuous Interface on Ubuntu 9.04

If you’ve got a bad memory (like me) you might some day find yourself searching for a way to configure an interface on your Ubuntu 9.04 system to use as a sniffer interface. Here is how you do it: 1) … Continue reading →

November 2, 2009
by Andrew Hay
0 comments

Response: 5 QUESTIONS and ANSWERS for SIEM Solutions Buyers

Over the past few weeks SIEM vendor Intellitactics has attempted to answers some of the most commonly received questions about their product. Here are the problems I have with their summary of their responses: Question 1) Will Intellitactics’ PCI DSS … Continue reading →