Quantcast
Channel: Spiceworks Community
Viewing all articles
Browse latest Browse all 7477

AlienVault - I Like

$
0
0

Have you heard about the AlienVault integration with Spiceworks? I noticed a dashboard alert saying, "A new cloud service AlienVault was been detected..." on one of our public facing servers. Since we didn't install AlienVault I was concerned. I looked all over the server to see if I could uninstall it and could not find it in Control Panel or elsewhere so I asked around to see if anyone installed it. No one did.

I soon discovered that in my version of Spiceworks it was not properly deployed (or intergrated into Spiceworks) for the alerting.

So today I upgraded to the latest version of Spiceworks (7.0.01329) which had the patch to alter the alert verbiage. I checked my dashboard and then saw that the public facing server has been in communication with a server in Russia that "has been confirmed to be participating in reconnaissance and probing activities. This behavior is intended to discover information about a target (or victim) that can subsequently be used in an attack or exploit. The risks associated with scanning activity include potential denial of service, information disclosure, and bruteforce attacks which could lead to unauthorized access."

If you click the link in your dashboard alert it will give you more information (shown below) and you can download a full report for free.

I think I like the integration of AlienVault into Spiceworks! Nice job...


Viewing all articles
Browse latest Browse all 7477

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>