It’s been awhile since we posted anything here. Things have been busy in my personal life, and I haven’t had time to sit down and work on much.

I am looking for ideas as far as methods and concepts for Intrusion Detection go. Right now my short-term project is to finish building a few servers with parts I have laying around and setup a small network to test out various concepts on, as well as forensics.

Another thing i’m trying to get started on is something that allows easier tracking of events stemming from an alarm on the IDS.

Is there a way to self-train in forensics without spending a couple firstborn children on Encase?

-Chris