Paul Melson's Blog

Bill Roth of LogLogic commented on my Twitter exchange with Rocky DeStefano of Visible Risk where we talked about LogLogic's announcem...

I've been really busy both in my personal and professional life for the past year or so, with no signs of slowing down soon. But I have...

The first rule is actually how we caught the first incident. The binary is served on non-standard HTTP ports via fast-flux servers. It...

I've just finished compiling the security incident handler case statistics for 2009. This is the second year in a row that I've use...

Back in 2008 I posted a list of the tools I use for doing malware analysis. The tools I use have changed over time, and rather than just ta...

You are here because you are searching for information on Splunk vs. ArcSight Logger. I actually wrote this post months before posting it, ...

With more and more exploits being written in JavaScript, even some 0-day , there is a need to be able to reverse exploits written in JavaScr...