Hi !
I would like to know if it is possible to know hwo has scanned the sources ports and destinations ports ?
Thank you in advance :)
Best regards,
Siawash
Best answer by Nils Krumey
View original
Userlevel 4
+7
You will need logs from somewhere that show those scans - either from the machines where the scans originate, or something that captures this on the network, e.g. a firewall this passes through, a router that logs this passing through its Access Control Lists etc.
Once you HAVE those logs, alerting and analysing on this activity is quite simple in Logpoint.
Userlevel 1
Hi
Thank you so much for your help.
Best regards,
Siawash
Hello ,
How can we query the SIEM for this information ?
thank you
Reply
Sign up
Already have an account? Login
Already a Partner or Customer? Login with your LogPoint Support credentials. Don‘t have a LogPoint Support account? Ask your local LogPoint Representative. Only visiting? Login with LinkedIn to gain read–access.
LOGIN AS PARTNER OR CUSTOMER Login with LinkedInLogin to the community
Already a Partner or Customer? Login with your LogPoint Support credentials. Don‘t have a LogPoint Support account? Ask your local LogPoint Representative. Only visiting? Login with LinkedIn to gain read–access.
LOGIN AS PARTNER OR CUSTOMER Login with LinkedInEnter your username or e-mail address. We'll send you an e-mail with instructions to reset your password.