Popular Articles

  1. Installing Security Onion w/ BRO

    Overview What is Security Onion? Security Onion (SO) is a Linux distrobution for intrusion detection, network security monitoring, and log management. It’s based on Ubuntu and contains Snort, Suricata, Bro, OSSEC, Sguil, Squert, ELSA, Xpli...
  2. Collecting Logs and Events from Windows Machines

    Explains how to obtain windows events from your windows machines to DefenseStorm.
  3. Download Links

    DefenseStorm Virtual Machine When upgrading to DVM version 1.2.0, there is no upgrade path; a new image must be spun up and the old one shut down. Open a Connect Ticket for instructions and assistance. VMWare (OVA File) v1.2.0 Microsoft Hype...
  4. Advanced

    Managing PowerShell Current reports on the use of Windows PowerShell as an attack platform bring up the increased need to detect and prevent the abuse of our system administration ecosystem. The recent release of Mandiant’s M-Trends 2017 annu...
  5. FAQ's

    Common questions answered simply.
  6. The DefenseStorm Virtual Machine

    Information on how to install, upgrade, and configure your DVM.
  7. Gathering Data from Third-Party IT Systems

    This article provides links to third-parties for device setup as well as DefenseStorm specific instructions to ensure data is gathered.  CarbonBlack Defense What Anti-virus Reference https://github.com/DefenseStorm/cbdefenseEventLo...
  8. User Manual

    Welcome Welcome to DefenseStorm Put simply, DefenseStorm is a network security system for financial institutions. We monitor for suspicious activity, alert you when its found, and work with you to stop any potential attacks and prevent them from...
  9. DVM Modifications (SNMP & accepting SSL)

    Overview Overview One of the many advantages of the DefenseStorm GRID is the level of customization and modifications available. Two of those options include,  Enabling the DVM to accept Syslog over TLS Setting to Receive SNMP Traps Ac...
  10. DVM TroubleShooting

    This playbook provides detailed instructions for common DVM troubleshooting resolutions. Knowing what to do when your system displays certain symptoms could greatly reduce data loss.  First Step As soon as your DVM goes down - contact Defense...