Web blog d'un ingénieur en sécurité informatique. IT Security watcher's blog: news, threats analysis, AV issues, PoC, IT security, bugs... Contact: philippe.vialle@wanadoo.fr
Cela fait plusieurs fois que la question m'est posée de comment renforcer la sécurité d'un PC Windows, typiquement grand public. Voici donc quelques conseils simples : Appliquer les 12 conseils de Kaspersky : http://cybersecurite.over-blog.com/2014/09/securite-informatique-12-conseils-pour-se-proteger.html...
Lire la suiteAs you may know, some folks out there have published interesting SYSMON config parts. Basically, to exclude stuff that is legit and noisy, and include things that are suspicious by essence (even linking them with TTP!). For instance: https://github.com/MotiBa/Sysmon/blob/master/config_v17.xml...
Lire la suite