Leveraging Open Source for Business Intel
By Bozidar Spirovski, CISSP, MCSA, MCP
Open source intelligence (OSINT) is a form of intelligence collection management that involves finding, selecting, and acquiring information from publicly available sources and analyzing it to produce actionable intelligence…
Cloud Computing Challenges Infrastructure
By Bozidar Spirovski, CISSP, MCSA, MCP
Cloud Computing is becoming more and more the buzzword of every conference, meeting and article. Yet it is still in it’s inception, and there are multitude of issues and problems. Here are the mechanisms by which we can approach the level of trust that we have in our infrastructure for the cloud.
Windows Security Logs and MS Log Parser
By Bozidar Spirovski, CISSP, MCSA, MCP
Reading through a Windows security log or any other log can be very difficult and time consuming, so a lot of companies have created their own tools to analyze windows event logs. But before you start going commercial, there is a tool that will get you going without any cost. Against all odds, it’s a tool made by Microsoft!
Microsoft Threat Assessment & Modeling
By Bozidar Spirovski, CISSP, MCSA, MCP
Every organization has some form of Information Security Risk Assessment - some perform a formal risk assessment, others simply use their practical experience. There aren’t that many tools that assist the organization in performing risk assessment. The most widely used one is Excel, but it is far from a good choice.
Two Vulnerability Scanning Tools Evaluated
By Bozidar Spirovski, CISSP, MCSA, MCP
In terms of speed, Retina performed much faster. In terms of scan depth, Nessus has a small advantage, since it includes a web mirroring tool that is very helpful in HTTP. In a direct comparison, Nessus wins simply because Retina manifested erroneous results on repeat scans.
