forensic
RSS forensicThe Case for Security Information and Event Management (SIEM) in Proactive Network Defense
White Paper It's widely accepted that Security Information and Event Management (SIEM) systems are excellent tools for regulatory compliance, log management and analysis, trouble-shooting and forensic analysis. What's surprising to... [13 Nov 2009]
What FIPS and Common Criteria Certifications Mean to SIEM: Understanding the Relevance of Security Standards in the Context of a Security Information Management Systems
White Paper A SIEM attempts to collect as much information as possible to determine security threats, and to help mitigate and remediate those threats by making as much forensic evidence available for analysis as is possible. [13 Nov 2009]
SQL Server Anti-Forensics: Techniques and Countermeasures
White Paper It takes a close look at SQL Server anti-forensic techniques, then follow with a discussion of how to protect audit trail and evidence in the event one of systems is attacked. This paper attempts to get ahead of the... [13 Nov 2009]
The Importance of Integrating Host and Network Forensics
White Paper It is against list of requirements and with the objective of solving this exact problem that AccessData has integrated its host- (AD Enterprise) and network- (SilentRunner Sentinel) based forensic technologies into a... [12 Nov 2009]
Forensic Analysis for Network Security
White Paper Forensic analysis for network security involves capturing network data for analysis minutes, hours, or even days after a network event has occurred. How can forensic analysis help organizations tighten... [01 Oct 2009]
PKWARE Case Study: Consulting Services #2
White Paper They offer specialized expertise in five separate areas that operate as a coordinated whole, including corporate finance, economic consulting, forensic and litigation consulting, strategic communications, and technology. [01 Oct 2009]
Divide & Conquer: Overcoming Computer Forensic Backlog Through Distributed Processing and Division of Labor
White Paper Until an organization is able to efficiently leverage existing resources, it will find itself trapped in the vicious cycle of too much work, too few people. Implementing a solution that amplifies existing resources by streamlining the... [19 Sep 2009]
Photos: Inside the RSA cybercrime war room
Photo Once a phishing site is detected by the AFCC, fraud analysts within the centre will begin a forensic investigation. At RSA's Anti-Fraud Command Centre (AFCC) in Herzelia, Israel, more than 100 staff work to detect,... [18 Sep 2009]
De-Anonymizing the Internet Using Unreliable IDs
White Paper With this information, one is able to analyze the host population, to conduct forensic analysis, and also to blacklist malicious hosts dynamically. Today's Internet is open and anonymous. While it permits free traffic... [16 Sep 2009]
Data Acquisition From Cell Phone Using Logical Approach
White Paper This paper describes a forensic tool to acquire cell phone flash memory data using a logical level approach. Cell phone forensics to acquire and analyze data in the cellular phone is nowadays being used in a national... [11 Sep 2009]
Bloor Research Case Study: SenSage at O2 Ireland
White Paper The Event Data Warehouse has been specifically designed to ingest and store large volumes of event data (such as log data, CDRs and so on) for compliance purposes and to support (forensic) analysis, reporting and alerting. [01 Sep 2009]
Forensic Toolkit: Processing Performance Testing and System Configuration
White Paper A great deal has been done to improve the performance of Forensic Toolkit (FTK). A combination of factors affects the performance of this solution, but ultimately, hardware is the key. This next generation solution was... [01 Aug 2009]
Leveraging Security Data for Business Intelligence: IBM Smart Surveillance Solution
White Paper Traditional systems perform the task of providing restricted access to facilities and collecting surveillance data for forensic purposes. The security industry is in transition. The lack of return from traditional... [31 Jul 2009]
Secure and Cost-Effective Log Management With NetIQ Security Manager 6.0
White Paper The attendee will learn about new file-based log archive server technology, integrity controls for collected log data OLAP, summary and forensic reporting through a single console. The presenter of this webcast will... [04 Jul 2009]
Extreme Makeover: Security Manager Edition
White Paper The attendee will receive a comprehensive view of the new product capabilities and features, including an intuitive, engaging user interface, simplified incident management process "Packages" to simplify grouping and accessing incident... [04 Jul 2009]
