Wireshark doesn’t just work in real time. If you save a history of network activity in a pcap file using a tool such as tcpdump, you can filter the data with Wireshark to search for evidence.

Sometimes error messages or log entries are too verbose for their own good, disclosing valuable information to attackers.

The more IT infrastructure complexity increases, the more indispensable vulnerability scanners become. If you are not interested in retaining the consulting services of a professional hacker, you might want to entrust the task of detecting vulnerabilities to a specialized software tool, such as OpenVAS.

Your database can be one of the most vulnerable elements in your organization. We share some tips for detecting and preventing attacks.

How do you monitor the network when your client systems are connecting to secure web servers through HTTPS? We’ll show you how to keep watch using the Squid proxy server and share some inventive certificate tricks.

For its size, fail2ban, a utility that scans logfiles and bans suspicious IP addresses, punches well above its weight.

PortSentry monitors your ports and lets you know when they’ve been scanned.

Full release of BackTrack Linux 5 R2 is now available.