Focus-IDS

Date Index

Real world experience with HIDS, Paul Schmehl
PaulDotCom Security Weekly - Interview with Richard Bejtlich, Paul Asadoorian
Type of Attack Vector, jono29
snort & regular expressions, Sevil SEN
- Re: snort & regular expressions, Martin Roesch
  - Re: snort & regular expressions, Sevil SEN
    - Re: snort & regular expressions, Martin Roesch
Sources for IP geolocation data, NetSecGuy
- Re: Sources for IP geolocation data, Patrick Walsh
- Re: Sources for IP geolocation data, Adam Powers
- Re: Sources for IP geolocation data, Jose Nazario
- Re: Sources for IP geolocation data, NetSecGuy
- <Possible follow-ups>
- RE: Sources for IP geolocation data, Colby DeRodeff
ANN: New release of CORE FORCE free endpoint security package, Core FORCE team
Evasion Techniques still in use?, leonardo
RE: Tuning false positives (SIM and VM), Jasun Tate
Announcement: The Web Application Firewall Evaluation Criteria v1 Released, contact
Signatures taking down network, David Williams
- Re: Signatures taking down network, Ramon Kagan
- Re: Signatures taking down network, Paul Schmehl
- Re: Signatures taking down network, Dhruv Soi
- RE: Signatures taking down network, Mike Barkett
- <Possible follow-ups>
- RE: Signatures taking down network, Craddock, Larry
- RE: Signatures taking down network, Palmer, Paul (ISSAtlanta)
  - Re: Signatures taking down network, Sam Evans
    - Message not available
    - Re: Signatures taking down network, Sam Evans
- RE: Signatures taking down network, Palmer, Paul (ISSAtlanta)
- RE: Signatures taking down network, Ghetti, Tim
- RE: Signatures taking down network, Gary Halleen (ghalleen)
BASE 1.2.2 (cindy) released, Kevin Johnson
TCP ACK/RST packets with data in the Reset Cause, Mike Gibson
- Re: TCP ACK/RST packets with data in the Reset Cause, Mike Frantzen
- <Possible follow-ups>
- RE: TCP ACK/RST packets with data in the Reset Cause, Palmer, Paul (ISSAtlanta)
HIDS/HIPS Selection Process, astalavista . box . sk
- <Possible follow-ups>
- RE: HIDS/HIPS Selection Process, Andrew Plato
- Re: HIDS/HIPS Selection Process, Drew Simonis
  - RE: HIDS/HIPS Selection Process, Spyro Malaspinas
IPS project - wanted translators, JEMF
Testing IDS/IPS Solutions, Jimmy Stewpot
- RE: Testing IDS/IPS Solutions, Tony Haywood
- Re: Testing IDS/IPS Solutions, Andres Riancho
  - Re: Testing IDS/IPS Solutions, Aaron Turner
    - Re: Testing IDS/IPS Solutions, Nomellames nunca
study on subverting IDSs, Nomellames nunca
- Re: study on subverting IDSs, jipi dini
WMF and IPS products?, Sam Evans
- Re: WMF and IPS products?, Haseeb Abdali
  - Re: WMF and IPS products?, David W. Goodrum
- Re: WMF and IPS products?, Jason Haar
- RE: WMF and IPS products?, Mike Barkett
  - RE: WMF and IPS products?, Alan Shimel
- Re: WMF and IPS products?, Pukhraj Singh
- <Possible follow-ups>
- RE: WMF and IPS products?, Murat Korkmaz
- RE: WMF and IPS products?, Palmer, Paul (ISSAtlanta)
- RE: WMF and IPS products?, Mills, Alvin R
Re: Denial of Service: Commercial Defense products, avi chesla
- <Possible follow-ups>
- Re: Denial of Service: Commercial Defense products, Securesolutions
  - Re: Denial of Service: Commercial Defense products, avi chesla
    - Re: Denial of Service: Commercial Defense products, Securesolutions
- Re: Denial of Service: Commercial Defense products, Stefano Zanero
Re: Tuning false positives, Joel M Snyder
- <Possible follow-ups>
- RE: Tuning false positives, mhellman
  - Re: Tuning false positives, Raffael Marty
    - Re: Tuning false positives, mhellman
    - Re: Tuning false positives (SIM and VM), Ron Gula
    - Re: Tuning false positives (SIM and VM), David W. Goodrum
- Re: Tuning false positives, Devdas Bhagat
- RE: Tuning false positives, Gary Halleen (ghalleen)
Re: challenges in capturing Gigabit ethernet, Michael J. Semaniuk
- Re: challenges in capturing Gigabit ethernet, Richard Bejtlich
- <Possible follow-ups>
- Re: challenges in capturing Gigabit ethernet, Securesolutions
- Re: challenges in capturing Gigabit ethernet, Stefano Zanero
Re: Fortinet's fortigate 100 devices, Louis Wang
- <Possible follow-ups>
- Re: Fortinet's fortigate 100 devices, Joel M Snyder
  - RE: Fortinet's fortigate 100 devices, Jonathan Lebowitsch
- Re: Fortinet's fortigate 100 devices, hank . schupp
- RE: Fortinet's fortigate 100 devices, Andrew Plato
  - Re: Fortinet's fortigate 100 devices, Bob Walder
RE: RE: Tuning false positives - SIM is not the answer, Gary Halleen (ghalleen)
- Re: Tuning false positives - SIM is not the answer, Stefano Zanero
- <Possible follow-ups>
- RE: RE: Tuning false positives - SIM is not the answer, Andrew Plato
- Re: RE: RE: Tuning false positives - SIM is not the answer, rassel_k
- Re: RE: RE: Tuning false positives - SIM is not the answer, brent
  - Re: Tuning false positives - SIM is not the answer, Jason
    - Re: Tuning false positives - SIM is not the answer, Brent Stackhouse
    - Re: Tuning false positives - SIM is not the answer, Jason
- Re: RE: RE: Tuning false positives - SIM is not the answer, brent
- RE: Tuning false positives - SIM is not the answer, Hellman, Matthew
  - Re: Tuning false positives - SIM is not the answer, Brent Stackhouse
  - RE: Tuning false positives - SIM is not the answer, Bruce Young
- RE: Tuning false positives - SIM is not the answer, Matthew Caldwell
- RE: Tuning false positives - SIM is not the answer, Mike Owen
  - Message not available
    - RE: Tuning false positives - SIM is not the answer, Ron Gula
- Re: RE: Tuning false positives - SIM is not the answer, Anton Chuvakin