Enterprise Security

Preventing and Containing Data Loss by Detecting and Analyzing Data Security Issues
In Part 1 we defined data incident management and examined how to prepare for incidents when they occur. In this article, we continue the series by examining how to prevent data loss and network outages. The methods of detecting, analyzing, and reporting...

Published by Tom Olzak, CISSP (6,821 pts ) on Aug 27, 2009 to
Enterprise Security Articles
Map system configs with PsInfo
PsInfo is a free, downloadable utiliy which enables both local and remote Windows platform configuration retrieval. The Challenge Both system administrators and security analysts frequently need information about Microsoft Windows patch levels, applications...

Published by Tom Olzak, CISSP (6,821 pts ) on Aug 26, 2009 to
Enterprise Security Articles
Phishme: The Easy Way to Enhance Employee Phishing Awareness
Phishing is a common problem, growing at a rapid rate. Organizations not addressing employee weaknesses for great buys or other appealing reasons to click on links in email messages will soon feel the pain. This is a review of Phishme, an online solution...

Published by Tom Olzak, CISSP (6,821 pts ) on Aug 26, 2009 to
Enterprise Security Reviews

PSExec: Free Security Testing and System Management Tool
PSExec is a free Sysinternals utility. With it, system administrators can manage remote desktops via scripts or command line. Security analysts can use it to test system vulnerabilities. The Challenge System administrators and help desk personnel often...

Published by Tom Olzak, CISSP (6,821 pts ) on Aug 26, 2009 to
Enterprise Security Articles
PsLogList: Free Utility to Parse & Review Windows Logs
PsLogList is a free Sysinternals (Microsoft) download which allows security and system administrators access to local and remote system application, security, and system log entries. It's also a great forensics tool. The Challenge Microsoft...

Published by Tom Olzak, CISSP (6,821 pts ) on Aug 26, 2009 to
Enterprise Security Articles
Streamline Kiosk Operation with Auto-logon
Many organizations need shared workstations, kiosks providing general information to most or all its employees. The challenge is getting a network-connected computer to access resources without giving every employee a network login. Auto-logon can help...

Published by Tom Olzak, CISSP (6,821 pts ) on Aug 26, 2009 to
Enterprise Security Articles

Use Autoruns to improve performance and identify malware
Over time, all Windows-based computers accumulate services, drivers, and other applications that load at boot up or on logon. Some just slow down the system while others might perform more insidious tasks. Understanding what exists, what's new, and...

Published by Tom Olzak, CISSP (6,821 pts ) on Aug 26, 2009 to
Enterprise Security Articles
Use SigCheck to validate system files
Knowing the system files and other application components on your computer are genuine is an important part of troubleshooting anomalous behavior or cleaning critical systems. It can also come in handy when determining who to blame when your computer...

Published by Tom Olzak, CISSP (6,821 pts ) on Aug 26, 2009 to
Enterprise Security Articles
Validate system access with AccessChk
AccessChk is a free utility, which allows you to quickly assess access to folders, files, processes, or services on Windows workstations or servers. The Challenge System administrators and security professionals usually know what to do to ensure trustworthy...

Published by Tom Olzak, CISSP (6,821 pts ) on Aug 26, 2009 to
Enterprise Security Articles
ISO 27001 AND 27002- Information Security Standards
This article looks at information security standards for enterprise-level businesses and data protection and privacy as well as the certification process. Security Standards for Your Company ISO 27001 AND 27002- Information Security Standards ISO 2700x...

Published by Steve Mallard (12,177 pts ) on Aug 24, 2009 to
Enterprise Security Articles