Hello and welcome to the Thursday, July 16th,

2006 edition of the Sands Internet Storm Center's Stormcast.

My name is Johannes Ulrich, recorded day from Washington, D.C.

And this episode is brought you by the Sands.edu graduate certificate program in cyber defense

operations. Well, today, Guy gave a talk in the evening here at Sands Fire about the honeypot

and some of the additions that Ghee created for the honeypot like our scene. And with that, Gie also made life and made available a new version of the seam for the

DeShield Honeypot.

The two most notable edition is the addition of Suricada logs to the Honeypot dashboard.

And then also the addition of Cowry TTY logs.

Cowri, the Honeypot that we are using for SSH and Telnet traffic, has the ability to lock all the commands that attacker may send to the honeypot and this new addition to the

dashboard will summarize these commands and also allow you to look up which particular attacker

did execute what attacks against the honeypot so you're getting more insight into what they

actually attempted to do in the nice format of a Kibana interface.

Well, and given the size of yesterday's Microsoft Patch used the update, it's no surprise that, well, we have some problems with this update.

Microsoft today announced that there is an incompatibility with Dell

devices that use the Intel Innovative Platform Framework or IPF. The drivers installed with this

framework are in conflict with some of these patches, not causing problems. So Microsoft temporarily has disabled the update for these devices.

If you are affected, you may see some changes in performance, power consumption or system

behavior.

Some people have reported overheating of the devices.

A fix should be available in the next few days.

And of course, we do still have some patches that were released by vendors other than Microsoft to talk about.

...