Overview
KFSensor is a security solution that acts as a honeypot to attract and detect hackers and worms by simulating vulnerable system services and trojans.
By acting as a decoy server it can divert attacks from critical systems and provide a higher level of information than can be achieved by using firewalls and NIDS alone.
KFSensor is designed for use in a Windows based corporate environment and contains many innovative and unique features such as remote management, a Snort compatible signature engine and emulations of Windows networking protocols.
With its GUI based management console, extensive documentation and low maintenance, KFSensor provides a cost effective way of improving an organization's network security.
Moreover, KFSensor allow a easy integration with a common SIM/SOC & Syslog systems & Databases.
Prerequisites
a. Supported Windows Operating System.
b. Latest Wincap driver (can be download from the following link).
* Its recommended to install KFSensor on a dedicated machine.
Configuration Steps
KeyFocus Ltd. developer team created a user friendly “Set Up Wizard” that allow you to complete a common deployment scenario in a few minutes:
Read more: Yuval Sinay
QR: 