Comments on: Stay Interested, Stay Alert http://www.securitycatalyst.com/stay-interested-stay-alert/ Michael Santarcangelo delivers Awareness that Works™ Mon, 28 Jun 2010 13:51:54 +0000 hourly 1 http://wordpress.org/?v=3.0.1 By: Jerry http://www.securitycatalyst.com/stay-interested-stay-alert/comment-page-1/#comment-2175 Jerry Sat, 02 May 2009 03:39:51 +0000 http://www.securitycatalyst.com/?p=1487#comment-2175 This is a good post, Wim. Logs are often overlooked, and can be cheaply and effectively exploited to improve other aspects IT and business operations, such as availability. Since your post is in the spirit of "just get in there and start looking at your logs", I'll throw this open source tool out that I found a while: http://devialog.org/ I think the way that tool works lends itself well to this kind of effort. It can be tricky to get working, but it is quite interesting in that it will send you alerts for anything out of the normal once you have trained it up a bit. (and it's free) By the way, I had never seen secviz.org before. I want to thank you for turning me on to that. This is a good post, Wim. Logs are often overlooked, and can be cheaply and effectively exploited to improve other aspects IT and business operations, such as availability.

Since your post is in the spirit of “just get in there and start looking at your logs”, I’ll throw this open source tool out that I found a while: http://devialog.org/

I think the way that tool works lends itself well to this kind of effort. It can be tricky to get working, but it is quite interesting in that it will send you alerts for anything out of the normal once you have trained it up a bit. (and it’s free)

By the way, I had never seen secviz.org before. I want to thank you for turning me on to that.

]]>