One Article Review
| Source |  Errata Security |
|---|---|
| Identifiant | 333439 |
| Date de publication | 2017-03-09 19:30:33 (vue: 2017-03-09 19:30:33) |
| Titre | FBI: what to look for in the Trump/AlfaBank connection |
| Texte | As CNN reports, the FBI seems to be looking into that connection between Trump and Alfa Bank. Here are some things to look for.First, get your own copy of the logs from root name servers. I don't trust the source of the original logs. I suspect they've been edited in order to show a relationship with Alfa Bank. You've got lots of sources both inside government and in private industry that can provide a copy of these logs without a warrant. (Which sucks, you should need a warrant, but that's the current state of affairs).Second, look at the server in question. It's probably located at 140 Akron Road, Ephrata, PA. What you are looking for are the logs of anything sent from the server during that time, specifically any e-mails.Third, talk to Cendyn, and ask them what that server was used for during that time. Their current statement is that it was used by the Metron meeting software. In other words, they say that after they stopped using it to send marketing emails, they started using it for their meeting product. They seem a little confused, so it'd be nice to pin them down. Specifically, get logfiles indicating precisely what happened, and figure out how Metron works, what sorts of messages it will generate.Fourth, talk to Cendyn, and ask them about customers of their Metron meeting software, namely who used it to arrange meetings with Alfa Bank or the Trump organization. My guess is that this is where you'll really get the juicy information, getting a list of what meetings happened when and who was invited.Fifth, talk to Cendyn and get logfiles form their DNS servers to figure out who was resolving that domain name (mail1.trump-email.com) during that time period.Sixth, ask Alfa Bank for logfiles from their DNS resolvers that would tell you which machines internally were generating those requests.My guess is that all of this will come up empty. There's a coincidence here, but a small one. Much of the technical details have been overhyped and mean little. |
| Envoyé | Oui |
| Condensat | 140 about affairs after akron alfa all any anything are arrange ask bank been between both but can cendyn cnn coincidence com come confused connection copy current customers details dns domain don down during edited email emails empty ephrata fbi fbi: fifth figure first form fourth from generate generating get getting got government guess happened have here how indicating industry information inside internally invited juicy list little located logfiles logs look looking lots machines mail1 mails marketing mean meeting meetings messages metron much name namely need nice one order organization original other out overhyped own period pin precisely private probably product provide question really relationship reports requests resolvers resolving road root say second seem seems send sent server servers should show sixth small software some sorts source sources specifically started state statement stopped sucks suspect talk technical tell that them there these they things third those time trump trump/alfabank trust used using warrant what when where which who will without words works would you your |
| Tags | |
| Stories | |
| Notes | ★★★★ |
| Move | 
|
L'article ne semble pas avoir été repris aprés sa publication.
L'article ne semble pas avoir été repris sur un précédent.