QRadar – Network Design
IBM QRadar Security Information and Event Management (SIEM) helps security teams accurately detect and prioritize threats across the enterprise. Keep reading →
QRadar CE – v7.3.3
IBM released a new version of the QRadar Community Edition to keep up with the commercial version. Keep reading →
QRadar CE – Under the Hood
IBM is bringing free QRadar to a wider audience with Community Edition. Community Edition is a fully-featured version of QRadar that is low memory, low EPS, and includes perpetual license.
QRadar CE – Installation
IBM QRadar Community Edition is a free version of QRadar that is based off of IBM core enterprise SIEM. Users, students, security professionals, and app developers are encouraged to download QRadar Community Edition to learn and become familiar with QRadar.
KeePass(X)(C)
If you are not just try to meet the very minimal password policies that your service providers try to enforce, but really care about your security and privacy, you should already use a of password manager…
redsocks
redsocks is a transparent proxy relay solution for those dummy applications that do not support communication via proxy servers. Transparent because the clients will not even notice if this traffic is passed to a proxy. As this solution is working on TCP/UDP layers, this means almost any application’s traffic can be pushed through and forced to use a real proxy.
SIEM @Home
I’m already mentioned in my previous article about Traffic Analysis in Qubes OS, that the IDS system alerts and logs should be passed to a log management system where we can correlate them with other logs and alerts. That system can be called SIEM
However a real SIEM system makes sense in an enterprise environment only, because it is requires 7×24 monitoring, and it is also needs special knowledge and experience to analyze the results.
Traffic Analysis in Qubes OS
One of the best thing in Qubes OS that you can use special type of VMs called ProxyVM (or FirewallVM). The special thing is that your AppVMs see this as a NetVM, and the NetVMs see it as an AppVM.
Qubes – 3.2
Qubes OS version 3.2 have been released.
Qubes – 3.1
Qubes OS version 3.1 have been released.