BeyondTrust

Security in Context: The BeyondTrust Blog

Welcome to Security in Context

Bringing you news and commentary on solutions and strategies for protecting critical IT infrastructure in the context of your business.

I See Dead People- and All Database Activity

Posted August 26, 2011    Peter McCalister

Remember The Sixth Sense, that movie where Haley Joel Osmond’s character can see ghosts are if they were living people? It’s an interesting premise to give a character such a unique and special capability- to see and communicate with ghosts, whether benign or hostile, is clearly something out of the ordinary. Knowledge is power, and because he knew they were there and could communicate with said entities, he eventually was able to diffuse tense situations and helped achieve solutions in the existence of the ghosts in the movie.

Since this is a blog about enterprise security, let’s take a look at the film through the eyes of an IT administrator. There is one huge parallel that I can’t help but draw- the ability to see entities that others aren’t aware of. While we may not have to deal with actual ghosts, that specific ability to see and communicate with things that otherwise go unnoticed is one of the keys to compelte enterprise security. Also known as monitoring, that communication and awareness is crucial to an effective security program.

So many things in an enterprise need to be monitored. Privileged users, what users can and cannot access, all activity (down to the keystroke level), access to systems, error reports, security controls, compliance reporting, and session activity are just a few. Without monitoring, those responsible for IT have no idea what is going on in these areas. It’s impossible to know where problems exist and what can be done to fix them, and it’s hard to be confident in the status of your company’s secure information. Monitoring is also a huge part of having a compliant IT infrastructure. The ability to oversee activity is critical, and truly a capability that must be included in each IT environment’s security strategy.

Click here to learn how to go Sixth Sense on your IT infrastructure.

Leave a Reply

Additional articles

expert-russellsmith

Best Practices for Managing Domain Admin Accounts

Posted August 3, 2015    Russell Smith

The risks of using privileged domain accounts on devices that are not secured to the same level as DCs increases the chances that domain administrator credentials could be exposed. Windows caches credentials by default to authenticate users when a domain controller can’t be reached, including those of domain administrator accounts that have previously logged in to a device. As such, a compromised workstation or member server can also lead to stolen domain administrator credentials.

Tags:
, ,
powerbroker-for-mac-diagram-small

PowerBroker for Mac: A Least-Privileged Apple a Day…

Posted July 27, 2015    Jason Silva

BeyondTrust PowerBroker for Mac reduces the risk of privilege misuse by enabling standard users on Mac OS X to perform administrative tasks successfully without entering elevated credentials.

Tags:
, ,
PrivilegedAccountManagement

On Demand Webinar – Now is the time for Privileged Account Management

Posted July 24, 2015    BeyondTrust Software

In this webinar, SANS Instructor and Founder of Voodoo Security, Dave Shackleford, will revisit several hacking and breach scenarios that involved privileged accounts, and use these as examples while discussing tools and tactics to get this problem under control once and for all.

Tags:
, ,