Question: Please answer all parts (2-3 lines answer only) for Upvote. 1. a) What is Grey Listing? b) Why is important to periodically monitor and provide

Please answer all parts (2-3 lines answer only) for Upvote.

1. a) What is Grey Listing?

b) Why is important to periodically monitor and provide a baseline of the top 5000 domain names being accessed by your organization?

c) Assume that alter the grep command to search the var/log/messages file for the IP address of 5.79.11.202. For example;

Please answer all parts (2-3 lines answer only) for Upvote. 1. a)

What type of network forensic evidence can we discover about IP address 5.79.11.202 from the preceding grep example?

d)

Linux will store DNS network forensic evidence in /var/log/messages file. Since Linux stores a lot of evidence, the grep commands is used to filter the message log and will search for www.reddit.com

The following is a sample of one DNS forward lookup.

What is Grey Listing? b) Why is important to periodically monitor and

Describe and explain the network forensic evidence for each field of this entry using the following table

provide a baseline of the top 5000 domain names being accessed by

# grep 5 . 79. 11. 202 /var/log/messages 1457131141.17235911192.168.75.4511192.168.75.111INI Idcs.cb.philips.com. I JA115.79.11.2021119101 11

Step by Step Solution

There are 3 Steps involved in it

1 Expert Approved Answer
Step: 1 Unlock blur-text-image
Question Has Been Solved by an Expert!

Get step-by-step solutions from verified subject matter experts

Step: 2 Unlock
Step: 3 Unlock

Students Have Also Explored These Related Databases Questions!