AlienVault Blog
alienvault.com · Company blog · on HN since 2013
AlienVault's security team publishes threat research and malware analysis, and the company makes the OSSIM security monitoring platform.
What HN saysHN mentions it mainly for OSSIM, its open source security tool, along with SOC guides, a Google dork cheat sheet, and job postings.
26HN people shared it
8linked it in comments
19stories submitted
293story points
7 years agolast shared
2013people per year2026
Most-shared posts
- 1MacSpy: OS X RAT as a Service2 people · 2 points · first shared 2017 · discussion on HN
- 2Shell Shock Exploit Being Used in the Wild2 people · 1 points · first shared 2014 · discussion on HN
- 3Homepage2 people · first shared 2016
- 4Building a Home Lab to Become a Malware Hunter – A Beginner’s Guide1 people · 210 points · first shared 2016 · 7 comments on HN
- 5Analysis of yesterday's PHP.net exploit1 people · 52 points · first shared 2013 · 13 comments on HN
- 6A North Korean Monero Cryptocurrency Miner1 people · 5 points · first shared 2018 · discussion on HN
- 7How the Vote Hacking Was Done at DefCon251 people · 4 points · first shared 2017 · discussion on HN
- 8Attackers abusing IE to enumerate software and detect security products1 people · 3 points · first shared 2014 · discussion on HN
- 9How Hackers Manipulate Email to Defraud You and Your Customers1 people · 2 points · first shared 2017 · discussion on HN
- 10Threat Intelligence – Beyond the Hype1 people · 2 points · first shared 2015 · 1 comments on HN
- 11Heartbleed is a vulnerability with a CVSS score of only 5.0/10.1 people · 2 points · first shared 2014 · discussion on HN
- 12The Cybersecurity of Persona 51 people · 2 points · first shared 2017 · discussion on HN
- 13Ransomware: PowerWare or PoshCoder? Comparison and Decryption1 people · 1 points · first shared 2016 · discussion on HN
- 14Maximizing the Customer Experience for Training Organizations1 people · 1 points · first shared 2016 · discussion on HN
- 15The Life of a Security Researcher | AlienVault1 people · 1 points · first shared 2014 · discussion on HN
What HN people wrote when they linked it
startuphacker · 2016-06-25
Security Onion intrigued me a couple years back when I heard about it. I think it was on the Linux Action Show.
I have been using Alien Vault OSSIM (https://www.alienvault.com) for a few years and haven't seen any reason to switch. But this does look like a great project still.
awaterman · 2018-06-11
AlienVault | Product Manager | Austin, TX | ONSITE | https://www.alienvault.com
AlienVault was founded to help organizations of all shapes and sizes achieve world-class security without the headaches and huge expenses of other solutions. If you have network security experience and “BlackHat” doesn’t first make you think of noggin protection, please reach out!
In particular, we’re looking for a product manager with prior network security experience to help define our roadmap for security capabilities and threat research focus. Qualified candidates must have a bachelor’s degree in Engineering/CS, prior product management experience, fluent in network security technologies and approaches, and a passion to deliver exceptional products and user experience.
Interested in joining the Alien Nation? Please apply at https://www.alienvault.com/who-we-are/careers?p=job%2Foc185fwa
Fnoord · 2019-08-15
AlienVault, or its FOSS version, OSSIM. [1]
[1] https://www.alienvault.com/products/ossim
vuln · 2019-04-25
lgregg · 2018-06-20
I've had a similar experience which is why I almost always use dork search queries now. You'll get pinged by Google's anti-bot recapcha often but you'll find things much more effectively.
Heres a cheat sheet I keep bookmarked, https://www.alienvault.com/blog-content/GoogleHackingCheatSheet.pdf.
dglass · 2018-03-19
I could be wrong but I'm pretty sure the word "breach" is reserved for specific security incidents that fall above a certain threshold. Something like if X amount of users were affected it must be considered a breach, which means the company must alert the authorities and alert all users who have been affected.
If he's saying it wasn't a breach it's probably because it doesn't fit the actual criteria for considering something a breach, but doesn't mean he's trying to downplay the severity of what happened.
Edit: difference between a data breach vs. a security incident - https://www.alienvault.com/blogs/security-essentials/whats-the-differe…
jgritty · 2017-06-13
The information is in the links provided:
https://www.alienvault.com/blogs/labs-research/macspy-os-x-rat-as-a-se…
https://blog.fortinet.com/2017/06/09/macransom-offered-as-ransomware-a…
jeffmcjunkin · 2014-09-25
Very true. To be clear to other readers, busybox is more common in smaller embedded devices, though today's AlienVault blog post [1] showed that Mitel VoIP systems (which use Debian/ARM, if I recall) use bash and are vulnerable.
[1] http://www.alienvault.com/open-threat-exchange/blog/attackers-exploiti…