Security

In this guide, we are going to learn how to configure Nagios Availability Monitoring on AlienVault USM/OSSIM. We will cover how to configure host as well as service availability monitoring. Host monitoring reports whether an asset is up or down while Services monitoring discovers services on an asset and monitors their availability. AlienVault uses Nagios by default for host availability...

NSClient++ is a monitoring agent/daemon for Windows systems that makes it easier to collect performance metrics by Nagios. In this tutorial, we are going to learn how to install and configure NSClient++ nagios monitoring agent for Windows systems. Follow through the following steps to install NSClient++. Download NSClient Agent Download the latest version of NSClient from here. Agent Installation Once the download is done,...

In our previous article, we covered how to install and setup Nessus on Linux System. In this tutorial, we are going to learn how to scan a target host for Vulnerabilities with Nessus vulnerability scanner. Create New Scan To create a new scan, login to Nessus web UI and click Scans tab in the top navigation bar. This opens My Scans folder...

Identifying vulnerabilities is the first step towards securing your environment. Nessus is the de-facto industry standard vulnerability assessment solution. It helps to easily identify and fix vulnerabilities - including software flaws, missing patches, malware, and misconfigurations across a variety of operating systems, devices and applications. In this tutorial, we are going to learn how to install, setup and use Nessus...

There are two ways in which AlienVault HIDS agent can be installed on a Microsoft Windows system. Automatically install a pre-configured agent on the host from the AV server or download it and install it on the host yourself. The pre-configured installer has the server IP and authentication key configured automatically. Download a binary installer and manually install and...

In this tutorial, we are going to learn how to install and configure AlienVault HIDS (Host Intrusion Detection) agents on a Linux as well as a Windows system. AlienVault uses OSSEC HIDS agents for Host Intrusion Detection. To actively monitor all aspects of system activity; file integrity monitoring, log monitoring, rootcheck, and process monitoring, OSSEC agents that collect all these...

In this article, we are going to learn how to import assets to AlienVault USM/OSSIM using CSV file. The assets in this case refers to hosts, servers, routers, or any other device or endpoint you want to monitor for HIDs, NIDs, file integrity, vulnerability using AlienVault USM/OSSIM server. In our previous article, we learned how to install and set up...

In this tutorial, we are going to learn how to install and set up AlienVault OSSIM 5.5 SIEM on VirtualBox. If you are a Blue Team security analyst, in one way or another you must have heard of or interact with not one, not two SIEM (Security Information and Event Management) solutions. Well, AlienVault is one of the leading SIEM...

In our previous article, we discussed how to install and setup OpenVAS Vulnerability Scanner on Ubuntu 18.04. In this tutorial, we are going to learn how to add and scan a target host for any vulnerability using OpenVAS Scanner. Want to use PostgreSQL database with OpenVAS 9 instead of the default SQLite? See the link below on how to configure OpenVAS...