http://www.brighthub.com/computing/enterprise-security.aspxenhttp://www.brighthub.com/computing/enterprise-security/articles/14989.aspxSat, 17 Oct 2009 18:59:38 GMTb133e95a-c263-4882-8f2a-b24547eff78e:14989SteveMallardSecurity Analyst often aren't trained in the dangers of file streaming through NTFS's Alternate Data Streams. This tutorial teaches you how to create and detect it. Files can be hidden within files. These files can hide porn, company secrets or may contain information on terrorism. File Streaming Alternate Data Streams with the NTFS file sy...http://www.brighthub.com/computing/enterprise-security/articles/5510.aspxSat, 17 Oct 2009 18:58:59 GMTb133e95a-c263-4882-8f2a-b24547eff78e:5510SteveMallardWhat is 8570.1 Compliance? 8570.1 provides guidance and procedures for the training, certification, and management of the Department of Defense contractors and workforce who work in Information Assurance and Information Technology. This line of security is important for contractors of the DoD. 8570.1 The Importance of 8570.1 Compliance 8570.1 p...http://www.brighthub.com/computing/enterprise-security/articles/9805.aspxWed, 26 Aug 2009 21:31:01 GMTb133e95a-c263-4882-8f2a-b24547eff78e:9805tomolzakPSExec is a free Sysinternals utility. With it, system administrators can manage remote desktops via scripts or command line. Security analysts can use it to test system vulnerabilities. The Challenge System administrators and help desk personnel often need access to perform a quick lookup on a remote system. They might also want to check system st...http://www.brighthub.com/computing/enterprise-security/articles/11257.aspxWed, 26 Aug 2009 21:30:46 GMTb133e95a-c263-4882-8f2a-b24547eff78e:11257tomolzakPsLogList is a free Sysinternals (Microsoft) download which allows security and system administrators access to local and remote system application, security, and system log entries. It's also a great forensics tool. The Challenge Microsoft Windows platforms can generate a large number of Event Log entries, spanning application, securit...http://www.brighthub.com/computing/enterprise-security/articles/6752.aspxWed, 26 Aug 2009 21:30:28 GMTb133e95a-c263-4882-8f2a-b24547eff78e:6752tomolzakMany organizations need shared workstations, kiosks providing general information to most or all its employees. The challenge is getting a network-connected computer to access resources without giving every employee a network login. Auto-logon can help. The Challenge Delivering information to employees using computers for day-to-day tasks is easy. ...http://www.brighthub.com/computing/enterprise-security/articles/7991.aspxWed, 26 Aug 2009 21:30:14 GMTb133e95a-c263-4882-8f2a-b24547eff78e:7991tomolzakOver time, all Windows-based computers accumulate services, drivers, and other applications that load at boot up or on logon. Some just slow down the system while others might perform more insidious tasks. Understanding what exists, what's new, and what should go is often tedious. Enter Autoruns. The Challenge Normal use of systems on which use...http://www.brighthub.com/computing/enterprise-security/articles/13389.aspxWed, 26 Aug 2009 21:28:33 GMTb133e95a-c263-4882-8f2a-b24547eff78e:13389tomolzakKnowing the system files and other application components on your computer are genuine is an important part of troubleshooting anomalous behavior or cleaning critical systems. It can also come in handy when determining who to blame when your computer frequently displays the BSOD. The Challenge System admnistrators and security analysts often need t...http://www.brighthub.com/computing/enterprise-security/articles/5784.aspxWed, 26 Aug 2009 21:28:13 GMTb133e95a-c263-4882-8f2a-b24547eff78e:5784tomolzakAccessChk is a free utility, which allows you to quickly assess access to folders, files, processes, or services on Windows workstations or servers. The Challenge System administrators and security professionals usually know what to do to ensure trustworthy processing environments. After all, there are plenty of blogs, articles, books, etc. on the ...http://www.brighthub.com/computing/enterprise-security/articles/9584.aspxWed, 29 Jul 2009 16:56:36 GMTb133e95a-c263-4882-8f2a-b24547eff78e:9584tomolzakMicrosoft's task manager is fine for high-level looks at running processes. However, we often require a deeper look into process resource use, dependencies, registry entries, executable paths, etc. Process Explorer, a free Sysinternals download, provides these views, and more. The Challenge Today's Microsoft Windows-based systems are relatively...http://www.brighthub.com/computing/enterprise-security/articles/6191.aspxTue, 28 Jul 2009 17:10:58 GMTb133e95a-c263-4882-8f2a-b24547eff78e:6191tomolzakAccessEnum is a member of the free Sysinternals security utilities suite. It allows system administrators to list individual accounts with READ, WRITE, and DENY permission to files, folders, and registry entries. It can also report on security changes. The Challenge You will often run into circumstances where certain files and folders should only b...http://www.brighthub.com/computing/enterprise-security/articles/3078.aspxTue, 28 Jul 2009 17:10:42 GMTb133e95a-c263-4882-8f2a-b24547eff78e:3078tomolzakIn this final installment in the BCP series, we walk through Steps 4 and 5 of the planning process: testing and managing test results. BCP continued... In Part 2 we saw how to develop BCP strategies and a plan for implementing them. The plans are useless if they are not tested via team training and hot site system recovery. Ensuring your plans ...http://www.brighthub.com/computing/enterprise-security/articles/3077.aspxTue, 28 Jul 2009 17:10:26 GMTb133e95a-c263-4882-8f2a-b24547eff78e:3077tomolzakIn this, the second in a series exploring Business Continuity Planning, we examine Steps 2 and 3: Risk Assessment and Strategy/Plan Development. BCP continued... In Part 1 we defined BCP and the five steps leading to business continuity assurance. We also examined Step 1, analyzing the business to identify critical people, processes, and te...http://www.brighthub.com/computing/enterprise-security/articles/3047.aspxTue, 28 Jul 2009 17:09:51 GMTb133e95a-c263-4882-8f2a-b24547eff78e:3047tomolzakThis is the first in a series of articles in which we examine five basic steps to business continuity assurance: analyze, assess, plan, test, and manage. An overview of business continuity and step 1, analyze, are the topics of this installment. Business Continuity Planning The purpose of Business Continuity Planning (BCP) is to ensure the unin...http://www.brighthub.com/computing/enterprise-security/articles/5270.aspxMon, 15 Jun 2009 16:29:47 GMTb133e95a-c263-4882-8f2a-b24547eff78e:5270SteveMallardEveryone including myself use to think that https:// (the internet protocol for secure hypertext transfer protocol) was secure. This may not be the case anymore. With different tools, https has vulnerabilities that can be compromised by a malicious user. Everyone including myself use to think that https:// (the internet protocol...http://www.brighthub.com/computing/enterprise-security/articles/7156.aspxMon, 15 Jun 2009 16:26:15 GMTb133e95a-c263-4882-8f2a-b24547eff78e:7156SteveMallardEncryption plays a major role in the security of any organization. One of the biggest nightmares IT personnel face is the use of flash drives. These thumbdrives (flash drives) are often lost with personal and confidential information. Encrypt your USB Flash Drive Encypting your flash drive is a necessary step in protecting the assests of yo...http://www.brighthub.com/computing/enterprise-security/reviews/553.aspxTue, 12 May 2009 16:55:53 GMTb133e95a-c263-4882-8f2a-b24547eff78e:553tonyNet Nanny is one of the best-known brands in its genre, but as other products added features it lacked, it fell behind the competition. After ContentWatch bought it and merged with its ContentProtect, though, Net Nanny is a leader again. Introduction Note: to find out more about the latest version of Net Nanny, check out our Net Nanny 6.0 Review . ...http://www.brighthub.com/computing/enterprise-security/articles/8395.aspxWed, 21 Jan 2009 22:15:16 GMTb133e95a-c263-4882-8f2a-b24547eff78e:8395CharlesCrustHere are eight common things you might be guilty of... If you think being an IT person is easy these days, you might be in for a surprise. Just a few years ago, it seemed that anybody and their brother could be an IT "professional" with little more than a screwdriver and a basic knowledge of Windows. But times have changed and a true IT professiona...http://www.brighthub.com/computing/enterprise-security/reviews/799.aspxThu, 15 Jan 2009 20:58:27 GMTb133e95a-c263-4882-8f2a-b24547eff78e:799davePersonal Firewall for up to three PCs, from iolo Technologies, is one of the flashiest apps on the block, but in such a competitive market, will it do enough to really impress? Introduction Here we have a fairly small company launching a product that's competing in a packed niche full of large corporations. Other products from Iolo include the ...http://www.brighthub.com/computing/enterprise-security/reviews/623.aspxMon, 12 Jan 2009 21:14:05 GMTb133e95a-c263-4882-8f2a-b24547eff78e:623ppardiA robust, powerful firewall with lots of extras, including a panic button and instant lockdown switch. ZoneAlarm Pro is a great security package. Introduction ZoneAlarm Pro by Check Point Software Technologies is a competitive security package that has carved a niche as a robust firewall that can be customized to your specifications. ZoneAlarm is d...http://www.brighthub.com/computing/enterprise-security/reviews/530.aspxMon, 12 Jan 2009 20:49:33 GMTb133e95a-c263-4882-8f2a-b24547eff78e:530ianjirkaNorton Confidental has great potential, delivering a suite of features to make browsing safer. Unfortunately, quality problems and privacy concerns make the overall package uncompelling. Introduction Norton Confidential provides a suite of features to make browsing the Internet safer. These include a password manager, two kinds of scam site filters...