News for hackers. Stuff that matters.

A comment on Marriott CEO shares post-mortem on last year's hack. Parent comment

Re:Marriott CEO shares post-mortem on last year's hack by cmroanirgo on Tuesday March 12, 2019 @02:16PM (#19371260)
My db security is rather lax, and wouldn't notice an anomalous row count, and certainly wouldn't generate a "red flag" as a result.

Anyone know of some lightweight foss monitoring tools that are in this arena? (for single server MySQL setups).

[ Parent | on HN ]
Re:Marriott CEO shares post-mortem on last year's hack by xemdetia on Tuesday March 12, 2019 @04:32PM (#19372704)
For single host MySQL setups there is the mysql audit plugin and related configuration. It's not perfect but if you already have other SIEM/alert infrastructure it should glue in OK. You'll want to test it to make sure it doesn't interfere with expected SLA's.
[ Parent | on HN ]