Scribd Logo
Загрузить

Добро пожаловать в Scribd!

  • Dec 6

    Загружено:

    dbvruthwiz
    7 просмотров7 страниц
    sdfsdfkk

    Авторское право

    © © All Rights Reserved

    Доступные форматы

    PDF, TXT или читайте онлайн в Scribd

    Этот документ был вам полезен?

    Это неприемлемый материал?

    Пожаловаться на этот документ
    sdfsdfkk

    Авторское право:

    © All Rights Reserved
    Скачайте в формате PDF, TXT или читайте онлайн в Scribd
    Отметить как неприемлемый контент
    7 просмотров7 страниц

    Dec 6

    Загружено:

    dbvruthwiz
    sdfsdfkk

    Авторское право:

    © All Rights Reserved
    Скачайте в формате PDF, TXT или читайте онлайн в Scribd
    Отметить как неприемлемый контент
    из 7

    Daily reports Postilion

    Alarms - A05W063 from: 2018-12-06 to: 2018-12-06

    No Alarms Found for A05W063

    Alarms - A05L020 from: 2018-12-06 to: 2018-12-06

    No Alarms Found for A05L020

    Alarms - A05W067 from: 2018-12-06 to: 2018-12-06

    No Alarms Found for A05W067

    Alarms - A05W068 from: 2018-12-06 to: 2018-12-06

    No Alarms Found for A05W068

    Alarms - A05W069 from: 2018-12-06 to: 2018-12-06

    Alarm Risk Source Destination


    Delivery & Attack - Bruteforce Authentication - Multiple 1 A05W069 I05L002
    login failures - HIDS reported (1 events)
    Delivery & Attack - Bruteforce Authentication - SSH (1 events) 1 A05W069 I05L002

    Alarms - A05W070 from: 2018-12-06 to: 2018-12-06

    No Alarms Found for A05W070

    Alarms - A05L015 from: 2018-12-06 to: 2018-12-06

    No Alarms Found for A05L015

    Alarms - A05L016 from: 2018-12-06 to: 2018-12-06

    No Alarms Found for A05L016

    Alarms - A05L017 from: 2018-12-06 to: 2018-12-06

    No Alarms Found for A05L017

    Alarms - A05L019 from: 2018-12-06 to: 2018-12-06

    User: admin / 2018-12-07 10:17:49 Page 1 / 7


    Daily reports Postilion

    No Alarms Found for A05L019

    Alarms - a03l020 from: 2018-12-06 to: 2018-12-06

    No Alarms Found for a03l020

    Alarms - A05W065 from: 2018-12-06 to: 2018-12-06

    No Alarms Found for A05W065

    Alarms - I05W002 from: 2018-12-06 to: 2018-12-06

    No Alarms Found for I05W002

    Alarms - I05L001 from: 2018-12-06 to: 2018-12-06

    No Alarms Found for I05L001

    Alarms - I05L002 from: 2018-12-06 to: 2018-12-06

    Alarm Risk Source Destination


    Delivery & Attack - Bruteforce Authentication - Multiple 1 A05W069 I05L002
    login failures - HIDS reported (1 events)
    Delivery & Attack - Bruteforce Authentication - SSH (1 events) 1 A05W069 I05L002

    Alarms - I05L000 from: 2018-12-06 to: 2018-12-06

    No Alarms Found for I05L000

    Alarms - I05W003 from: 2018-12-06 to: 2018-12-06

    No Alarms Found for I05W003

    Alarms - A01W031 from: 2018-12-06 to: 2018-12-06

    No Alarms Found for A01W031

    Alarms - A01W024 from: 2018-12-06 to: 2018-12-06

    No Alarms Found for A01W024

    User: admin / 2018-12-07 10:17:49 Page 2 / 7


    Daily reports Postilion

    Alarms - A00W195 from: 2018-12-06 to: 2018-12-06

    Alarm Risk Source Destination


    Delivery & Attack - Bruteforce Authentication - Cisco ACS 2 A00W195 A03L012
    (90 events)
    Delivery & Attack - Bruteforce Authentication - Cisco ACS 2 A00W195 0.0.0.0
    (90 events)
    Delivery & Attack - Bruteforce Authentication - SSH (1 events) 1 A00W195 A07L004
    Delivery & Attack - Bruteforce Authentication - SSH (1 events) 1 A00W195 A07L004

    Alarms - I05W001 from: 2018-12-06 to: 2018-12-06

    No Alarms Found for I05W001

    Alarms - A05W060 from: 2018-12-06 to: 2018-12-06

    No Alarms Found for A05W060

    Alarms - A05W061 from: 2018-12-06 to: 2018-12-06

    No Alarms Found for A05W061

    Alarms - A05W062 from: 2018-12-06 to: 2018-12-06

    No Alarms Found for A05W062

    Alarm events - Alarm events. Last 25 Events: from: 2018-12-06 to: 2018-12-06

    Event Name Date GMT+2:00 Source Destination Risk


    directive_event: AV Bruteforce attack, login
    2018-12-06 22:51:17 A00W195 0.0.0.0
    authentication attack against 192.168.179.10
    directive_event: AV Bruteforce attack, login
    2018-12-06 22:51:17 A00W195 A03L012:49
    authentication attack against 192.168.179.10
    directive_event: AV Bruteforce attack, login
    2018-12-06 22:51:15 A00W195 0.0.0.0
    authentication attack against 192.168.179.10
    directive_event: AV Bruteforce attack, login
    2018-12-06 22:51:15 A00W195 A03L012:49
    authentication attack against 192.168.179.10

    User: admin / 2018-12-07 10:17:49 Page 3 / 7


    Daily reports Postilion

    AlienVault HIDS: SSH insecure connection


    2018-12-06 18:04:54 192.168.116.11 I05L002
    attempt (scan).
    AlienVault HIDS: SSH insecure connection
    2018-12-06 18:04:53 192.168.116.11 I05L002
    attempt (scan).
    AlienVault HIDS: SSH insecure connection
    2018-12-06 18:04:27 192.168.116.11 I05L002
    attempt (scan).
    AlienVault HIDS: SSH insecure connection
    2018-12-06 17:43:01 192.168.116.11 I05L002
    attempt (scan).
    AlienVault HIDS: SSH insecure connection
    2018-12-06 17:42:59 192.168.116.11 I05L002
    attempt (scan).
    AlienVault HIDS: SSH insecure connection
    2018-12-06 17:42:58 192.168.116.11 I05L002
    attempt (scan).
    directive_event: AV Bruteforce attack, login
    2018-12-06 17:26:51 A05W069 I05L002
    authentication attack against 10.21.20.13
    directive_event: AV Bruteforce attack, SSH
    2018-12-06 17:26:50 A05W069 I05L002
    authentication attack against 10.21.20.13
    AlienVault HIDS: SSH insecure connection
    2018-12-06 17:26:46 192.168.116.11 I05L002
    attempt (scan).
    AlienVault HIDS: SSH insecure connection
    2018-12-06 17:26:46 192.168.116.11 I05L002
    attempt (scan).
    AlienVault HIDS: SSH insecure connection
    2018-12-06 17:26:46 192.168.116.11 I05L002
    attempt (scan).
    AlienVault HIDS: SSH insecure connection
    2018-12-06 17:26:46 192.168.116.11 I05L002
    attempt (scan).
    AlienVault HIDS: SSH insecure connection
    2018-12-06 17:26:46 192.168.116.11 I05L002
    attempt (scan).
    AlienVault HIDS: SSH insecure connection
    2018-12-06 17:26:46 192.168.116.11 I05L002
    attempt (scan).
    AlienVault HIDS: SSH insecure connection
    2018-12-06 17:26:46 192.168.116.11 I05L002
    attempt (scan).
    AlienVault HIDS: SSH insecure connection
    2018-12-06 17:26:46 192.168.116.11 I05L002
    attempt (scan).
    AlienVault HIDS: SSH insecure connection
    2018-12-06 17:26:46 192.168.116.11 I05L002
    attempt (scan).
    AlienVault HIDS: SSH insecure connection
    2018-12-06 17:26:46 192.168.116.11 I05L002
    attempt (scan).
    AlienVault HIDS: SSH insecure connection
    2018-12-06 17:26:46 192.168.116.11 I05L002
    attempt (scan).
    AlienVault HIDS: SSH insecure connection
    2018-12-06 17:26:46 192.168.116.11 I05L002
    attempt (scan).
    AlienVault HIDS: SSH insecure connection
    2018-12-06 17:26:46 192.168.116.11 I05L002
    attempt (scan).

    Logins - Logins. Last 25 Events: from: 2018-12-06 to: 2018-12-06

    Date
    Event Name Device IP Username Source Dest.
    GMT+2:00

    User: admin / 2018-12-07 10:17:49 Page 4 / 7


    Daily reports Postilion

    AlienVault HIDS:
    2018-12-06
    Windows Network Logon 192.168.179.10 A00W125$ 0.0.0.0 A00W195
    23:59:30
    AlienVault HIDS:
    2018-12-06
    Windows Network Logon 192.168.179.10 A00W125$ 0.0.0.0 A00W195
    23:59:30
    AlienVault HIDS:
    2018-12-06
    Windows Network Logon 192.168.179.10 A00W125$ 0.0.0.0 A00W195
    23:59:30
    AlienVault HIDS:
    2018-12-06
    Windows Network Logon 192.168.179.10 A00W125$ 0.0.0.0 A00W195
    23:59:30
    AlienVault HIDS:
    2018-12-06
    Windows Network Logon 192.168.179.10 A00W125$ 0.0.0.0 A00W195
    23:59:30
    AlienVault HIDS:
    2018-12-06
    Windows Network Logon 192.168.179.10 A00W125$ 0.0.0.0 A00W195
    23:59:30
    AlienVault HIDS:
    2018-12-06
    Windows Network Logon 192.168.179.10 A00W125$ 0.0.0.0 A00W195
    23:59:01
    AlienVault HIDS:
    2018-12-06
    Windows Network Logon 192.168.179.10 A00W125$ 0.0.0.0 A00W195
    23:59:01
    AlienVault HIDS:
    2018-12-06
    Windows Network Logon 192.168.179.10 A00W125$ 0.0.0.0 A00W195
    23:59:01
    AlienVault HIDS:
    2018-12-06
    Windows Network Logon 192.168.179.10 A00W125$ 0.0.0.0 A00W195
    23:59:01
    AlienVault HIDS:
    2018-12-06
    Windows Network Logon 192.168.179.10 A00W125$ 0.0.0.0 A00W195
    23:59:01
    AlienVault HIDS:
    2018-12-06
    Windows Network Logon 192.168.179.10 A00W125$ 0.0.0.0 A00W195
    23:59:01
    AlienVault HIDS:
    2018-12-06
    Windows Network Logon 192.168.179.10 A00W125$ 0.0.0.0 A00W195
    23:59:01
    AlienVault HIDS:
    2018-12-06
    Windows Network Logon 192.168.179.10 A00W125$ 0.0.0.0 A00W195
    23:59:01
    AlienVault HIDS:
    2018-12-06
    Windows Network Logon 192.168.179.10 A00W125$ 0.0.0.0 A00W195
    23:58:41
    AlienVault HIDS:
    2018-12-06
    Windows Network Logon 192.168.179.10 A00W125$ 0.0.0.0 A00W195
    23:58:41
    AlienVault HIDS:
    2018-12-06
    Windows Network Logon 192.168.179.10 A00W125$ 0.0.0.0 A00W195
    23:58:41
    AlienVault HIDS:
    2018-12-06
    Windows Network Logon 192.168.179.10 A00W125$ 0.0.0.0 A00W195
    23:58:41
    AlienVault HIDS:
    2018-12-06
    Successful login during 197.97.220.130 SQLSERVERAGENT I05W001 I05W001
    23:58:32
    non-business hours.
    AlienVault HIDS:
    2018-12-06
    Successful login during 197.97.220.130 SQLSERVERAGENT I05W001 I05W001
    23:58:32
    non-business hours.
    AlienVault HIDS:
    2018-12-06
    Successful login during 197.97.220.130 SQLSERVERAGENT I05W001 I05W001
    23:58:32
    non-business hours.
    AlienVault HIDS:
    2018-12-06
    Successful login during 197.97.220.130 SQLSERVERAGENT I05W001 I05W001
    23:58:32
    non-business hours.
    AlienVault HIDS:
    2018-12-06
    Successful login during 192.168.158.11 swmu A00W195:49529 A07L009
    23:58:22
    non-business hours.
    AlienVault HIDS:
    2018-12-06
    Successful login during 192.168.158.11 swmu A00W195:49530 A07L009
    23:58:22
    non-business hours.
    AlienVault HIDS:
    2018-12-06
    Windows Network Logon 192.168.179.10 A00W125$ 0.0.0.0 A00W195
    23:58:21

    Cleartext - Cleartext. Last 25 Events: from: 2018-12-06 to: 2018-12-06

    No data available

    User: admin / 2018-12-07 10:17:49 Page 5 / 7


    Daily reports Postilion

    FTP Failed Logons - FTP Failed Logons. Last 25 Events: from: 2018-12-06 to: 2018-12-06

    No data available

    PCI - Protect Stored Data - Database Succesful Logins. Last 25 Events: from: 2018-12-06 to: 2018-12-06

    Event Name Date GMT+2:00 Source Destination Risk


    AlienVault HIDS: MS SQL Server Logon
    2018-12-06 18:00:36 A05W062 A05W062
    Success.
    AlienVault HIDS: MS SQL Server Logon
    2018-12-06 18:00:36 A05W062 A05W062
    Success.
    AlienVault HIDS: MS SQL Server Logon
    2018-12-06 18:00:36 A05W062 A05W062
    Success.
    AlienVault HIDS: MS SQL Server Logon
    2018-12-06 18:00:36 A05W062 A05W062
    Success.
    AlienVault HIDS: MS SQL Server Logon
    2018-12-06 18:00:36 A05W062 A05W062
    Success.
    AlienVault HIDS: MS SQL Server Logon
    2018-12-06 18:00:36 A05W062 A05W062
    Success.
    AlienVault HIDS: MS SQL Server Logon
    2018-12-06 18:00:36 A05W062 A05W062
    Success.
    AlienVault HIDS: MS SQL Server Logon
    2018-12-06 18:00:36 A05W062 A05W062
    Success.
    AlienVault HIDS: MS SQL Server Logon
    2018-12-06 18:00:36 A05W062 A05W062
    Success.
    AlienVault HIDS: MS SQL Server Logon
    2018-12-06 18:00:36 A05W062 A05W062
    Success.
    AlienVault HIDS: MS SQL Server Logon
    2018-12-06 18:00:14 A05W061 A05W061
    Success.
    AlienVault HIDS: MS SQL Server Logon
    2018-12-06 18:00:14 A05W061 A05W061
    Success.
    AlienVault HIDS: MS SQL Server Logon
    2018-12-06 18:00:14 A05W061 A05W061
    Success.
    AlienVault HIDS: MS SQL Server Logon
    2018-12-06 18:00:14 A05W061 A05W061
    Success.
    AlienVault HIDS: MS SQL Server Logon
    2018-12-06 18:00:14 A05W061 A05W061
    Success.
    AlienVault HIDS: MS SQL Server Logon
    2018-12-06 18:00:14 I05W001 I05W001
    Success.
    AlienVault HIDS: MS SQL Server Logon
    2018-12-06 18:00:14 I05W001 I05W001
    Success.
    AlienVault HIDS: MS SQL Server Logon
    2018-12-06 18:00:14 I05W001 I05W001
    Success.
    AlienVault HIDS: MS SQL Server Logon
    2018-12-06 18:00:14 I05W001 I05W001
    Success.

    User: admin / 2018-12-07 10:17:49 Page 6 / 7


    Daily reports Postilion

    AlienVault HIDS: MS SQL Server Logon


    2018-12-06 18:00:14 I05W001 I05W001
    Success.
    AlienVault HIDS: MS SQL Server Logon
    2018-12-06 18:00:14 I05W001 I05W001
    Success.
    AlienVault HIDS: MS SQL Server Logon
    2018-12-06 18:00:14 I05W001 I05W001
    Success.
    AlienVault HIDS: MS SQL Server Logon
    2018-12-06 18:00:14 I05W001 I05W001
    Success.
    AlienVault HIDS: MS SQL Server Logon
    2018-12-06 18:00:14 I05W001 I05W001
    Success.
    AlienVault HIDS: MS SQL Server Logon
    2018-12-06 18:00:14 I05W001 I05W001
    Success.

    Custom Security Events - Windows User Logons. Last 25 Events: from: 2018-12-06 to: 2018-12-06

    No data available

    User: admin / 2018-12-07 10:17:49 Page 7 / 7

    Вам также может понравиться