Active Ports 1.4 ZoneLog. Active Ports Overview What it does Where to get it Why use it How to use...

38
Active Ports 1.4 ZoneLog

TAGS:

Transcript of Active Ports 1.4 ZoneLog. Active Ports Overview What it does Where to get it Why use it How to use...

Page 1: Active Ports 1.4 ZoneLog. Active Ports Overview What it does Where to get it Why use it How to use it Screen Shots Observations Lessons Learned.

Active Ports 1.4ZoneLog

Page 2: Active Ports 1.4 ZoneLog. Active Ports Overview What it does Where to get it Why use it How to use it Screen Shots Observations Lessons Learned.

Active Ports Overview What it does Where to get it Why use it How to use it Screen Shots Observations Lessons Learned

Page 3: Active Ports 1.4 ZoneLog. Active Ports Overview What it does Where to get it Why use it How to use it Screen Shots Observations Lessons Learned.

What Active Ports Does Monitor TCP/UDP activity Maps processes to specific ports Easy to kill processes

Page 4: Active Ports 1.4 ZoneLog. Active Ports Overview What it does Where to get it Why use it How to use it Screen Shots Observations Lessons Learned.

Where to get it http://www.ntutility.com/freeware.ht

ml http://www.download.com

Page 5: Active Ports 1.4 ZoneLog. Active Ports Overview What it does Where to get it Why use it How to use it Screen Shots Observations Lessons Learned.

Why use it Live analysis Monitor what systems access the

Internet Detect Trojans and other malware

Page 6: Active Ports 1.4 ZoneLog. Active Ports Overview What it does Where to get it Why use it How to use it Screen Shots Observations Lessons Learned.

How To Use It Setup and Go

Page 7: Active Ports 1.4 ZoneLog. Active Ports Overview What it does Where to get it Why use it How to use it Screen Shots Observations Lessons Learned.
Page 8: Active Ports 1.4 ZoneLog. Active Ports Overview What it does Where to get it Why use it How to use it Screen Shots Observations Lessons Learned.
Page 9: Active Ports 1.4 ZoneLog. Active Ports Overview What it does Where to get it Why use it How to use it Screen Shots Observations Lessons Learned.
Page 10: Active Ports 1.4 ZoneLog. Active Ports Overview What it does Where to get it Why use it How to use it Screen Shots Observations Lessons Learned.
Page 11: Active Ports 1.4 ZoneLog. Active Ports Overview What it does Where to get it Why use it How to use it Screen Shots Observations Lessons Learned.
Page 12: Active Ports 1.4 ZoneLog. Active Ports Overview What it does Where to get it Why use it How to use it Screen Shots Observations Lessons Learned.

Observations Simple and easy to use Not very robust Little documentation Doesn’t always find the remote IP

Page 13: Active Ports 1.4 ZoneLog. Active Ports Overview What it does Where to get it Why use it How to use it Screen Shots Observations Lessons Learned.

Lessons Learned Simple tool for live analysis Must know what should be open

Page 14: Active Ports 1.4 ZoneLog. Active Ports Overview What it does Where to get it Why use it How to use it Screen Shots Observations Lessons Learned.

ZoneLog

Page 15: Active Ports 1.4 ZoneLog. Active Ports Overview What it does Where to get it Why use it How to use it Screen Shots Observations Lessons Learned.

ZoneLog Overview What it does Where to get it Why use it How to use it Screen Shots Observations Lessons Learned

Page 16: Active Ports 1.4 ZoneLog. Active Ports Overview What it does Where to get it Why use it How to use it Screen Shots Observations Lessons Learned.

Where to get it http://zonelog.co.uk/

Page 17: Active Ports 1.4 ZoneLog. Active Ports Overview What it does Where to get it Why use it How to use it Screen Shots Observations Lessons Learned.

Why use it Zone Alarm does not have a good

log viewer Get a lot more info than Zone Alarm

offers

Page 18: Active Ports 1.4 ZoneLog. Active Ports Overview What it does Where to get it Why use it How to use it Screen Shots Observations Lessons Learned.

What it does Incident Response Helps interpret Zone Alarm log file Gives information on data being

blocked

Page 19: Active Ports 1.4 ZoneLog. Active Ports Overview What it does Where to get it Why use it How to use it Screen Shots Observations Lessons Learned.

How to use it Download VB6 runtime files Download application Find ZAlog.txt C:\WINDOWS\Internet Logs

Page 20: Active Ports 1.4 ZoneLog. Active Ports Overview What it does Where to get it Why use it How to use it Screen Shots Observations Lessons Learned.
Page 21: Active Ports 1.4 ZoneLog. Active Ports Overview What it does Where to get it Why use it How to use it Screen Shots Observations Lessons Learned.
Page 22: Active Ports 1.4 ZoneLog. Active Ports Overview What it does Where to get it Why use it How to use it Screen Shots Observations Lessons Learned.
Page 23: Active Ports 1.4 ZoneLog. Active Ports Overview What it does Where to get it Why use it How to use it Screen Shots Observations Lessons Learned.
Page 24: Active Ports 1.4 ZoneLog. Active Ports Overview What it does Where to get it Why use it How to use it Screen Shots Observations Lessons Learned.
Page 25: Active Ports 1.4 ZoneLog. Active Ports Overview What it does Where to get it Why use it How to use it Screen Shots Observations Lessons Learned.
Page 26: Active Ports 1.4 ZoneLog. Active Ports Overview What it does Where to get it Why use it How to use it Screen Shots Observations Lessons Learned.
Page 27: Active Ports 1.4 ZoneLog. Active Ports Overview What it does Where to get it Why use it How to use it Screen Shots Observations Lessons Learned.
Page 28: Active Ports 1.4 ZoneLog. Active Ports Overview What it does Where to get it Why use it How to use it Screen Shots Observations Lessons Learned.
Page 29: Active Ports 1.4 ZoneLog. Active Ports Overview What it does Where to get it Why use it How to use it Screen Shots Observations Lessons Learned.
Page 30: Active Ports 1.4 ZoneLog. Active Ports Overview What it does Where to get it Why use it How to use it Screen Shots Observations Lessons Learned.
Page 31: Active Ports 1.4 ZoneLog. Active Ports Overview What it does Where to get it Why use it How to use it Screen Shots Observations Lessons Learned.
Page 32: Active Ports 1.4 ZoneLog. Active Ports Overview What it does Where to get it Why use it How to use it Screen Shots Observations Lessons Learned.
Page 33: Active Ports 1.4 ZoneLog. Active Ports Overview What it does Where to get it Why use it How to use it Screen Shots Observations Lessons Learned.
Page 34: Active Ports 1.4 ZoneLog. Active Ports Overview What it does Where to get it Why use it How to use it Screen Shots Observations Lessons Learned.
Page 35: Active Ports 1.4 ZoneLog. Active Ports Overview What it does Where to get it Why use it How to use it Screen Shots Observations Lessons Learned.
Page 36: Active Ports 1.4 ZoneLog. Active Ports Overview What it does Where to get it Why use it How to use it Screen Shots Observations Lessons Learned.
Page 37: Active Ports 1.4 ZoneLog. Active Ports Overview What it does Where to get it Why use it How to use it Screen Shots Observations Lessons Learned.

Observations Not all data about attack is true Not all features are useful

Activity graph Good documentation

Page 38: Active Ports 1.4 ZoneLog. Active Ports Overview What it does Where to get it Why use it How to use it Screen Shots Observations Lessons Learned.

Lessons Learned Lots of harmless traffic Big improvement over ZA log viewer


Steve Guest, Kongsberg Norcontrol IT AS, Norway: Maximizing radar performance for safer, cleaner ports

Steve Guest, Kongsberg Norcontrol IT AS, Norway: Maximizing radar performance for safer, cleaner ports

Dry Ports As Extensions of Maritime Deep-Sea Ports: A ...Dry Ports As Extensions of Maritime Deep-Sea Ports: A Case Study of Vietnam 69from shippers. It might also work as a transmodal/transloading

Dry Ports As Extensions of Maritime Deep-Sea Ports: A ...Dry Ports As Extensions of Maritime Deep-Sea Ports: A Case Study of Vietnam 69from shippers. It might also work as a transmodal/transloading

ACTIVE DIRECTORY REPLICATION: HOW IT WORKS

ACTIVE DIRECTORY REPLICATION: HOW IT WORKS

Ports - European Commissionec.europa.eu/.../ports/doc/2014-ports-leaflet.pdf · European ports are the gateways of the trans-European corridors. 329 ports of common interest have

Ports - European Commissionec.europa.eu/.../ports/doc/2014-ports-leaflet.pdf · European ports are the gateways of the trans-European corridors. 329 ports of common interest have

Person Centred Active Support It ain’t what we do it’s ‘just’ the way that we do it ! Promoting Active Engagement.

Person Centred Active Support It ain’t what we do it’s ‘just’ the way that we do it ! Promoting Active Engagement.

PORTS - DeepSea Power & Light · ports. Additionally, the mechanical properties of dome view ports are better suited to high-pressure environ-ments, giving them an edge when it comes

PORTS - DeepSea Power & Light · ports. Additionally, the mechanical properties of dome view ports are better suited to high-pressure environ-ments, giving them an edge when it comes

PORTS & MARINAS - Amazon S3 · Ports & Marinas: Specialist Advisory & Environmental Services 11 Ports are often historic sites with many heritage assets, making it essential that

PORTS & MARINAS - Amazon S3 · Ports & Marinas: Specialist Advisory & Environmental Services 11 Ports are often historic sites with many heritage assets, making it essential that

Active Transportation Campaign Making it Happen!...-Active School Travel (AST) - Active Transportation (AT) - Active and Sustainable School Travel (ASST) Walking, Wheeling, Rolling

Active Transportation Campaign Making it Happen!...-Active School Travel (AST) - Active Transportation (AT) - Active and Sustainable School Travel (ASST) Walking, Wheeling, Rolling

rfid.atlasrfidstore.com...16 port RFID UHF multiplexer Product codes for ordering sense, knovv, act NP = Number of Ports 4 ports 8 ports 12 ports 16 ports F = Frame enclosure no enclosure

rfid.atlasrfidstore.com...16 port RFID UHF multiplexer Product codes for ordering sense, knovv, act NP = Number of Ports 4 ports 8 ports 12 ports 16 ports F = Frame enclosure no enclosure

active - NeoBiotechnas.neobiotech.co.kr/170331/MU1_1 IS III active Catalog.pdfEB-II active SinusAll Kit PickCap Impression Kit IT-II active Prosthetic Kit / Accessory Kit Neoguide

active - NeoBiotechnas.neobiotech.co.kr/170331/MU1_1 IS III active Catalog.pdfEB-II active SinusAll Kit PickCap Impression Kit IT-II active Prosthetic Kit / Accessory Kit Neoguide

WikiLeaks Document Release · 2 Dubai Ports World was created in November 2005 by integrating Dubai Ports Authority and Dubai Ports International. It is one of the largest commercial

WikiLeaks Document Release · 2 Dubai Ports World was created in November 2005 by integrating Dubai Ports Authority and Dubai Ports International. It is one of the largest commercial

Forth Ports: Scottish Ports Brochure

Forth Ports: Scottish Ports Brochure

Troubleshooting of Passive Cabling and Active Networks Touch ‘n‘ … · 2019-10-12 · Troubleshooting of Passive Cabling and Active Networks Copper, Fibre and WiFi Test Ports

Troubleshooting of Passive Cabling and Active Networks Touch ‘n‘ … · 2019-10-12 · Troubleshooting of Passive Cabling and Active Networks Copper, Fibre and WiFi Test Ports

MY17 Highlander eBrochurepictures.dealer.com/toyotaasheville/f115b3460a0e0... · Five USB ports make it easy to power up the family road trip. With two USB ports up front, and three

MY17 Highlander eBrochurepictures.dealer.com/toyotaasheville/f115b3460a0e0... · Five USB ports make it easy to power up the family road trip. With two USB ports up front, and three

Danube ports guide - RIAria.org.ro/ria/images/platina/danube/danube ports guide.pdfdanube ports river-maritime ports • galati • braila • tulcea river ports • murfatlar •

Danube ports guide - RIAria.org.ro/ria/images/platina/danube/danube ports guide.pdfdanube ports river-maritime ports • galati • braila • tulcea river ports • murfatlar •

Baltic Ports Conference 2017 · Baltic Ports Conference 2017 Markku Mylly / Executive Director Baltic Ports Conference 2017 EMSA’s work relevant to ports

Baltic Ports Conference 2017 · Baltic Ports Conference 2017 Markku Mylly / Executive Director Baltic Ports Conference 2017 EMSA’s work relevant to ports

Active Transportation – Making It Work in Canadian ......Active Transportation - Making It Work In Canadian Communities iv November 2010 AT [Active transportation] Active transportation

Active Transportation – Making It Work in Canadian ......Active Transportation - Making It Work In Canadian Communities iv November 2010 AT [Active transportation] Active transportation

ASSOCIATED BRITISH PORTS - southwalesports.co.uk Emergency Plans... · 9 Port Director Associated British Ports ... cold stress and hypothermia ... It shows the relationship of the

ASSOCIATED BRITISH PORTS - southwalesports.co.uk Emergency Plans... · 9 Port Director Associated British Ports ... cold stress and hypothermia ... It shows the relationship of the

Cute! Isn’t it? - IT Operations and Service …...Active Directory Auditing & IT Compliance Exchange Analysis & Reporting Active Directory Management & Reporting Password Self-service

Cute! Isn’t it? - IT Operations and Service …...Active Directory Auditing & IT Compliance Exchange Analysis & Reporting Active Directory Management & Reporting Password Self-service

LabMis Intro v4arpg-serv.ing2.uniroma1.it/mostacci/didattica/lab_meas...Andrea.Mostacci@uniroma1.it Comments and rules Measurement of any typical RF device with 1-port, 2-ports, 3-ports,

LabMis Intro v4arpg-serv.ing2.uniroma1.it/mostacci/didattica/[email protected] Comments and rules Measurement of any typical RF device with 1-port, 2-ports, 3-ports,