KFSensor Administration Guide

Overview

The Administration Guide contains detailed instructions on how to install KFSensor and the next steps that should be taken to test and configure the system.

Installation

This section of the guide contains detailed instructions on the set up options and how to configure KFSensor for maximum security.

• Installing KFSensor
  
• Choosing the Database System
  
• Configuring the Database
  

Getting Started

This section contains advice on how to get started with KFSensor. It covers basic configuration, how to test your new honeypot and what to do next.

• Using the Set Up Wizard
  
• Basic testing
  
• What to do next
  

System Configuration

This section of the guide contains detailed instructions on how to configure KFSensor for maximum security and correct port errors.

• Correcting Port Errors
  
• Windows Audit configuration
  
• Windows Shared Folder honeypot configuration
  
• Windows Remote Desktop honeypot configuration
  

KFSensor Enterprise

This section deals with the advanced features of KFSensor Enterprise Edition and how to plan and configure it.

• KFSensor Enterprise administration
  
• How KFSensor Enterprise works
  
• KFSensor Enterprise configuration
  

Advanced Service Configuration

This section contains detailed information on the more complex service configurations and provides background information on them.

• Signature maintenance
  

• Network Protocol Analyzer Administration
  

• KFSensor proxy server emulation
  
• SOCKS and HTTP proxy configuration
  

Extreme System Configuration

• Secure configuration
  
• Server lock down
  

• Window networking / NetBIOS / SMB / CIFS
  
• Configuring Windows networking for KFSensor
  
• KFSensor Windows networking emulation
  
• Testing KFSensor Windows networking emulation
  

• MS RPC, Port 135, DCOM Buffer Overrun and the Blaster worm
  

KFSensor On-Line Manual Contents