13 min
Vulnerability Disclosure
Multiple Disclosures for Multiple Network Management Systems, Part 2
As you may recall, back in December Rapid7 disclosed six vulnerabilities
that
affect four different Network Management System (NMS) products, discovered by
Deral Heiland of Rapid7 and independent
researcher Matthew Kienow . In March, Deral
followed up with another pair of vulnerabilities
13 min
Automation and Orchestration
OSSEC Series: Configuration Pitfalls
Synopsis:
OSSEC is a popular host intrusion and log analysis system. It’s a great tool,
and when configured and customized properly it can be a very powerful and
holistic addition to your environment.
In this article I will list a number of problems I’ve encountered while using
OSSEC over the years. Many of these are the result of incomplete documentation.
The purpose of this article is to save you time if you’re having trouble getting
things working while doing similar tasks.
Pitfalls:
A gro
2 min
Security Strategy
The One Aspect of Selling Security That You Don't Want to Miss
This is a guest post from our frequent contributor Kevin Beaver
. You can read all of his previous guest posts here
.
When it comes to being successful in security, you must master the ability to
“sell” what you're doing. You must sell new security initiatives to executive
management. You must sell security policies and controls to users. You even have
to sell your customers and business partners on what you're doing to minimize
information risks. Thi
2 min
Authentication
Credential Status in Reporting Data Model
The new version of Reporting Data Model (1.3.1) allows Nexpose
users to create CSV reports providing
information about credential status of their assets, i.e. whether credentials
provided by the user (global or site specific) allowed successful login to the
asset during a specific scan.
Credential Status Per Service
The new Reporting Data Model version contains fact_asset_scan_service enhanced
with the new column containing the information about creden
5 min
Log Management
Log Search Simplified
Hi, I'm Laura, UX Designer at Logentries and today I'm going to discuss how just
about anyone can use Logentries to search and analyze their log data no matter
what their job title or technical skill level.
What is Logentries?
At Logentries, the team works tirelessly to provide an easy to use log
management service that allows users to
stream their logs from just about anything. Logentries can accept data from
almost any device that generates log data, inclu
4 min
Security Strategy
UX Research: Steps & Methodologies to Inform Product Redesign
The user experience (UX) design and research teams are preparing to revamp
Rapid7's customer learning and online help. As such, I thought I would take the
opportunity to provide our community insight into the role UX research plays in
bringing new designs – of both new and existing features and experiences – to
fruition.
Before I begin, I'll tell you a little bit about our “research” team. The Rapid7
UX research team, which sits within the greater UX team, consists of myself and
my colleague Ge
5 min
IT Ops
Get your work done even faster with the Logentries REST API
Now you can get your work done even faster by automating tasks with the
Logentries REST API. With the ability to programmatically query data, manage
users, create alerts and integrate third party tools, it’s now easier to finish
the job and get on with your day.
Table of contents
* Query API- Example Usage
* Team and User Management API- Example Usage
* Tags and Alerts API- Example Usage
* LeExportPy- Read More
* LeCLI- Read More
On-demand Webinar
Interested in learning more about the
4 min
Automation and Orchestration
Secure Password Storage in Web Apps
Synopsis
We like writing web applications. Increasingly, software that might have once
run as a desktop application now runs on the web. So how do we properly
authenticate users in web contexts? Passwords, of course! Let’s look at how to
handle password authentication on the web.
What not to do
It’s very tempting to use plaintext authentication for web applications. Let’s
whip up a quick python web server that we’ll use to test authentication. Let’s
say we want to provide access to magic number
5 min
Komand
5 Reasons Companies Are Losing Security Talent (And What to Do)
It’s hard enough finding security talent, but losing the talent you already have
can be a particularly painful blow. That’s why we’ve put together a quick guide
to help you:
* Address some of the underlying causes of attrition
* Increase retention of your security talent
* Solve the security gap at your organization
Here are five common talent-retention challenges and how to address them
head-on.
Challenge #1: Constrained Budgets and Disproportionate Strategy
According to Kaspersky Labs, 8
5 min
Komand
Filtering and Automated Decisions with PEG.js and React-Mentions
Here at Komand, we needed an intuitive way to filter data from a trigger step.
When automating security operations and processes, sometimes you don’t want a
workflow to start on every trigger. Splunk logs may be firing off millions of
events, but running a workflow for each one may not really be what you need. If
we were to set up a privilege escalation rule in Sysdig Falco and index it in
Splunk, we would want to run a specific workflow for that rule, but a separate
workflow for detecting SQ
5 min
IT Ops
Hashing Infrastructures
Engineers in fast moving, medium to large scale infrastructures in the cloud are
often faced with the challenge of bringing up systems in a repeatable, fast and
scalable way. There are currently tools which aid engineers in accomplishing
this task e.g. Convection, Terraform, Saltstack, Chef, Ansible, Docker. Once the
system is brought up there is a maintenance challenge of continually deploying
and destroying the resources. What if we can hash the inputs for describing an
infrastructure, where
4 min
Disaster Preparedness: It's Not Thought Of Until It Is Needed Most
...and then it might be too late.
> An update from Delta CEO Ed Bastian: pic.twitter.com/udNN0kzbKs
— Delta (@Delta) August 8, 2016
Recently, Delta Airlines suffered a weeklong outage that, if you take it on it's
face, ticks just about every box on a security person's disaster recovery
planning scenario.
Delta has given
3 min
Komand
Defining the Roles & Responsibilities of Your Security Team
Muddling together security responsibilities often leads to tasks falling through
the cracks. Instead, organizations should be as clear as possible about which
member of the security staff is responsible for which tasks. Moreover, the
division of those tasks should reflect the unique capabilities and strengths of
each team member.
For instance, SOC personnel should be given tasks that require immediate
attention, such as alert handling and incident response. Security engineers, on
the other hand
3 min
Nexpose Now Notes: August 2016
We build Nexpose to help security practitioners get from find to fix faster.
With the launch of Nexpose Now
, Rapid7 delivered
Liveboards
to help
you know what's weak in your world right now. Liveboards combine your live
threat exposure data, powerful analytics and intuitive querying so you can spend
less time compiling data, and more time improving your security program.
3 min
Komand
Does Security Automation Mean SOC Employees Will Be Obsolete?
Telephones, computers, and robots all have one thing in common: People thought
they’d replace the need for human input, putting us all out of a job. On the
contrary, these technologies were widely embraced once the public realized what
their true purpose was: to automate tedious work and enable us to do things we
actually enjoy doing, and faster, too. The same benefits apply to security
operations, and this is a great thing for security operations centers (SOCs)