Useful to determine if someone is on the network or a persistent connection Using Netstat, how do you show *ALL* connections / the *PROCESS* / *ETHERNET* stats on sent/received data (flow) / display *ROUTING* info -a / -0 / -e / -r How do you access firewall logs on Cisco? show logging What is theHarvester? Information Aggregation tool (gathers emails, domains, hostnames, employee names, open ports, banners, etc. Not as full featured as nmap or Zenmap What is Metasploit Port scanner (Active Reconnaissance tool) What is Qualys Vulerability Magement? Port scanner (Active Reconnaissance tool) What is Tenable's Nesus? Port scanner (Active Reconnaissance tool) What is Netstat? - Provides you with active TCP/UDP connections Linux: service -status-all Name some active reconnaissance tools NMAP / ZENMAP / Nessus Scanner / Qualsys Scanner Angry IP Scanner is / does what? - Active reconnaissance tool W: accounts logged on, who ran process How do you check if a service is up or down on Window / Linux? Win: services.msc (GUI) or sc (command line) Monitors CPU/RAM/disk usage Name some Linux System monitoring tools ps: CPU, memory utilization, process info SNMP What is Performance Monitor (aka perfmon) Windows System Monitoring Tool What is Resource Monitor (aka resmon) Windows System Monitoring Tool What does Performance Monitor do? Windows tool supports collection from remote systems What does Resource Monitor do? Windows tool What does Nagios do? Network / system log monitorĬritical is not based on CVEs but on thresholds that you set in the config What does Catci do? Network moitor

Prtg linux process monitor