SIEM ,IDS, DLP Development for Industrial Control Networks

 hhh

Comments

Post a Comment

Popular posts from this blog

Building an Active Directory Homelab for Detection & Monitoring

  In Cybersecurity, it could be a daunting task to apply and implement security concepts if there is an unavailability of practical and safe infrastructure to carry out these activities. I approached this project with that in mind. This home lab walks through the process of configuring, optimizing, and securing an IT infrastructure. Although this will be at a relatively small scale, you will be able to apply the knowledge gained in a real-world large-scale/enterprise infrastructure. What is a Homelab? A Homelab, as the name implies, is an environment in your home that is used to practice and improve your skills in a specific field. This home lab has components and tools similar to large-scale infrastructures. It’s a safe environment to work with these components and learn how they work.
Read more

Implementation Open Source SOC using ELK stack,TheHive, Cortex,MISP

Image
  Jan 2022 - Feb 2022 Jan 2022 - Feb 2022 Associated with Research forum of city university Implementation Open Source SOC using ELK stack,TheHive, Cortex,MISP: Soc Open Source is a Project Designed for Security Analysts and all SOC audiences who want to play with implementation and explore the Modern SOC architecture. All of the components are used based on Open Source Projects(Available at the time of first commit). This is Part-1, we will show the base of the model with ELK, TheHive- Cortex-MISP and we will use some dummy data to ingest in ELK. In upcoming episodes, we will include more data sources to ELK- Wazuh, Snort, Honeypot and Also we will integrate Atomic Red Team to ELK for Attack Simulation. We will also show how you can automate your flows with Shuffle. So watch this space out!
Read more

The implementation of Server Virtualization Based Endorsement of a user-level service and Banthwith Management Application in an Active Directory

Image
Sep 2022 - Present Sep 2022 - Present Associated with Cybersecurity Audit & Resilience Enterprise - CARE Nowadays IT infrastructure is more and more being virtualized. Almost every kind of component like servers, storage, and network devices can be virtualized to provide a highly available, scalable, and sustainable environment. This paper describes a new approach for developing and implementing an advanced authentication method within active directory network services. For the advanced authentication process, a new type of user multi-factor authentication based on the classical three-factor authentication extended by the position information and time is described in this paper. The main objectives of our applied research are extended security features for a more robust and secure user authentication process. Application scenario of advanced multi-factor authentication method within corporate networks based on the Microsoft Active Directory network services is presented. Five diff...
Read more