nicklauscombs

@unicityd wrote:

I don’t think that IDS is worthless.  I just suspect that it’s not the best use of scarce resources.

you can always go the no/low cost securityonion route for your IDS monitoring.

@unicityd wrote:

I’m focused on the existing rule sets, either those available from the IDS vendor or a third-party project such as Emerging Threats.

When just talking about standard default rules I think is where having mutiple IDS devices working together becomes valuable. High level example being maybe you run Cisco IDS/IPS along with…[Read more]

there’s too much grey area in what you’re asking. The person tuning the IDS/IPS is the one that will catch potentially malicious traffic using a variety of resources including the IDS. You can’t rely on any one tool to do the work. Can you tune the device and write custom signatures to help aid in the work and narrow it down to what you want? of…[Read more]

It is only that: a tool. By itself without staff who can interpret, other security controls, etc…. it probably would be a paperweight.

I believe a properly configured and maintained IDS used along with other aids adds value to a security program. Ultimately any additional alerts, data, insight, etc… I can get I will be more than happy to take.

while certainly pricey. those new retina displays are something to behold. i currently am using an early 2011 i7 macbook pro and have upped the ram to 16 gigs and couldn’t be happier.

@zeroflaw wrote:

I never see any of you guys on IRC. Different nicks perhaps?

yes my nick on there is nconco

nice find! thanks for the share.

this is a fantastic prize. i’m going to be very very jealous to whomever gets this.

i have some free time in life again and i bought another block of lab time. about halfway through my 30 days now and i definitely agree that taking some time between my first go through of the labs and this time has helped me focus and be a lot more successful.

if you want to chat more let me know i’m always lurking in the irc channel and on here.

since this is the ethical hacker network and all…. this seems like the wrong place to be asking about sharing a subscription/login that is very clearly marked as being for only one person on the hackin9 site.

😀

@chrisj wrote:

Kind of hi-jacking the thread, but any recommendations on what and where to get Juniper firewalls to learn on?

SRX100 is the cheapest you can pick up new they sit around 600 or 700 bucks.

@Agoonie wrote:

Thanks nicklauscombs.  Yeah I am looking at ebay now, and they have kits for half the price including a warranty.  I might have to try that.  Books are already expensive. Thanks everyone for the info. 

i meant more for you to buy the “kit” piece by piece and stay away from the bundled packages as they are always overpriced and…[Read more]

GNS3 is an excellent option if it will suit your needs. if you really want a full hands on lab going through one of these companies is definitely the “easy way” but if you go the ebay route you will save yourself a TON of money. and i mean a TON of money.

status update: one month down

i figure i would jump back in and give an update on the progress and my thoughts so far. one month down and i’ve been pretty good with sticking to my goal of at least an hour in the lab per day and studying the materials for a good amount of time each day i’m at work.

i have a month left in the labs and as others…[Read more]

Hello! Welcome!

dynamik hurry up and get in here!

??? 😮 :'( – that’s been me the past fifteen days in the labs  😀 :D.

so far the course has been wonderful and i really can’t say enough good things about the learning materials. really if you have been thinking about signing up i would encourage you to do it asap.

after spending about 2 hours per days in the lab i finally had my aha moment and…[Read more]

@dynamik wrote:

Nick, nice to see you on EH.

I’m going to try to knock out my OSWP in a couple of weeks, and then I’m going to be diving back into the OSCP (both have been outstanding for about a year now /lackoftime). Let me know if you want a study partner.

absolutely, i’ll be in there for at least 50 more days and more than likely will add…[Read more]

@Cthulhucalling wrote:

@nicklauscombs wrote:

now that i’ve had a few months off the study wagon after picking up my CCNP i have officially signed up for the OSCP with a start date of this sunday. i suppose this makes me a glutton for punishment but i’m really looking forward to this challenge. any encouraging words of advice would be much…

[Read more]

congrats!