OSINT

STUDENT USE ONLY

Copyright 2020, Ervin Frenzel

Student:

(LastName)_____________________(FirstName)_______________

Class______________________Section______________Semester:___________________

Week:________________Project:___________________________________

Copyright 2020, Ervin Frenzel

Instructions:

For identifying SIEM/Security products:

Identify and rank 10 components (data sets or logs) that can be imported to a SIEM - rank them

upon, do this with 2 separate SIEM products (LogRythm, Splunk, QRadar, ArcSight, AlienVault,

NuSiem, Dell SecureWorks, Rapid 7) Rank according to Application Programming Interface

(API):

API rating "0" - Data integration is not possible with non-proprietary data sets

API rating "1" - manual retrieval of information

API rating "2" - We can produce API

API rating "3" - Community will produce API

API rating "4" - Organization will produce and deploy API

API rating "5" - Existing API produced and backed by Vendor

For Cost Associations (Highest cost to Lowest cost):

1 – ________________ to _________________ (example over $50,000)

2 – ________________ to _________________ (example $40,000 to $49,999)

3 – ________________ to _________________ (example $25,000 to $39,999)

4 – ________________ to _________________ (example $10,000 to $24,999)

5 – ________________ to _________________ (example under $9,999)

For Identifying Indicators of Compromise (IoC):

Rank according to:

1 – No association (validated or confirmed)

2 – Suspected not association

3 – Association unknown (status unknown)

4 – Suspected association

5 – Association confirmed (validated or confirmed)

1. LastName:
2. FirstName:
3. Class:
4. Section:
5. Semester:
6. Week:
7. Project:
8. 1:
9. to:
10. 2:
11. to_2:
12. 3:
13. to_3:
14. 4:
15. to_4:
16. 5:
17. to_5:
18. Value 1:
1. 0:
1. 0:
2. 1:
3. 2:
4. 3:
5. 4:
6. 5:
7. 6:
2. 1:
1. 0:
2. 1:
3. 2:
4. 3:
5. 4:
6. 5:
7. 6:
3. 2:
1. 0:
2. 1:
3. 2:
4. 3:
5. 4:
6. 5:
7. 6:
4. 3:
1. 0:
2. 1:
3. 2:
4. 3:
5. 4:
6. 5:
7. 6:
5. 4:
1. 0:
2. 1:
3. 2:
4. 3:
5. 4:
6. 5:
7. 6:
6. 5:
1. 0:
2. 1:
3. 2:
4. 3:
5. 4:
6. 5:
7. 6:
7. 6:
1. 0:
2. 1:
3. 2:
4. 3:
5. 4:
6. 5:
7. 6:
8. 7:
1. 0:
1. 0:
2. 1:
2. 1:
1. 0:
2. 1:
3. 2:
1. 0:
2. 1:
1. 0:
2. 1:
4. 3:
1. 0:
2. 1:
1. 0:
2. 1:
5. 4:
1. 0:
2. 1:
1. 0:
2. 1:
6. 5:
1. 0:
2. 1:
1. 0:
2. 1:
7. 6:
1. 0:
2. 1:
1. 0:
2. 1:
1. 0:
2. 1:
9. 8:
1. 0:
1. 0:
2. 1:
2. 1:
1. 0:
2. 1:
3. 2:
1. 0:
2. 1:
1. 0:
2. 1:
4. 3:
1. 0:
2. 1:
1. 0:
2. 1:
5. 4:
1. 0:
2. 1:
1. 0:
2. 1:
6. 5:
1. 0:
2. 1:
1. 0:
2. 1:
7. 6:
1. 0:
2. 1:
1. 0:
2. 1:
1. 0:
2. 1:
10. 9:
1. 0:
1. 0:
2. 1:
2. 1:
1. 0:
2. 1:
3. 2:
1. 0:
2. 1:
1. 0:
2. 1:
4. 3:
1. 0:
2. 1:
1. 0:
2. 1:
5. 4:
1. 0:
2. 1:
1. 0:
2. 1:
6. 5:
1. 0:
2. 1:
1. 0:
2. 1:
7. 6:
1. 0:
2. 1:
1. 0:
2. 1:
1. 0:
2. 1:
11. 10:
1. 0:
1. 0:
2. 1:
2. 1:
1. 0:
2. 1:
3. 2:
1. 0:
2. 1:
1. 0:
2. 1:
4. 3:
1. 0:
2. 1:
1. 0:
2. 1:
5. 4:
1. 0:
2. 1:
1. 0:
2. 1:
6. 5:
1. 0:
2. 1:
1. 0:
2. 1:
7. 6:
1. 0:
2. 1:
1. 0:
2. 1:
1. 0:
2. 1:
12. 11:
1. 0:
1. 0:
2. 1:
2. 1:
1. 0:
2. 1:
3. 2:
1. 0:
2. 1:
1. 0:
2. 1:
4. 3:
1. 0:
2. 1:
1. 0:
2. 1:
5. 4:
1. 0:
2. 1:
1. 0:
2. 1:
6. 5:
1. 0:
2. 1:
1. 0:
2. 1:
7. 6:
1. 0:
2. 1:
1. 0:
2. 1:
1. 0:
2. 1:
13. 12:
1. 0:
1. 0:
2. 1:
2. 1:
1. 0:
2. 1:
1. 0:
2. 1:
3. 2:
1. 0:
2. 1:
1. 0:
2. 1:
4. 3:
1. 0:
2. 1:
1. 0:
2. 1:
5. 4:
1. 0:
2. 1:
1. 0:
2. 1:
6. 5:
1. 0:
2. 1:
1. 0:
2. 1:
7. 6:
1. 0:
2. 1:
1. 0:
2. 1:
14. 13:
1. 0:
1. 0:
2. 1:
2. 1:
1. 0:
2. 1:
1. 0:
2. 1:
3. 2:
1. 0:
2. 1:
1. 0:
2. 1:
4. 3:
1. 0:
2. 1:
1. 0:
2. 1:
5. 4:
1. 0:
2. 1:
1. 0:
2. 1:
6. 5:
1. 0:
2. 1:
1. 0:
2. 1:
7. 6:
1. 0:
2. 1:
1. 0:
2. 1:
15. 14:
1. 0:
1. 0:
2. 1:
2. 1:
1. 0:
2. 1:
1. 0:
2. 1:
3. 2:
1. 0:
2. 1:
1. 0:
2. 1:
4. 3:
1. 0:
2. 1:
1. 0:
2. 1:
5. 4:
1. 0:
2. 1:
1. 0:
2. 1:
6. 5:
1. 0:
2. 1:
1. 0:
2. 1:
7. 6:
1. 0:
2. 1:
1. 0:
2. 1:
16. 15:
1. 0:
1. 0:
2. 1:
2. 1:
1. 0:
2. 1:
1. 0:
2. 1:
3. 2:
1. 0:
2. 1:
1. 0:
2. 1:
4. 3:
1. 0:
2. 1:
1. 0:
2. 1:
5. 4:
1. 0:
2. 1:
1. 0:
2. 1:
6. 5:
1. 0:
2. 1:
1. 0:
2. 1:
7. 6:
1. 0:
2. 1:
1. 0:
2. 1:
17. 16:
1. 0:
1. 0:
2. 1:
2. 1:
1. 0:
2. 1:
1. 0:
2. 1:
3. 2:
1. 0:
2. 1:
1. 0:
2. 1:
4. 3:
1. 0:
2. 1:
1. 0:
2. 1:
5. 4:
1. 0:
2. 1:
1. 0:
2. 1:
6. 5:
1. 0:
2. 1:
1. 0:
2. 1:
7. 6:
1. 0:
2. 1:
1. 0:
2. 1:
18. 17:
1. 0:
1. 0:
2. 1:
2. 1:
1. 0:
2. 1:
1. 0:
2. 1:
3. 2:
1. 0:
2. 1:
1. 0:
2. 1:
4. 3:
1. 0:
2. 1:
1. 0:
2. 1:
5. 4:
1. 0:
2. 1:
1. 0:
2. 1:
6. 5:
1. 0:
2. 1:
1. 0:
2. 1:
7. 6:
1. 0:
2. 1:
1. 0:
2. 1:
19. 18:
1. 0:
1. 0:
2. 1:
2. 1:
1. 0:
2. 1:
1. 0:
2. 1:
3. 2:
1. 0:
2. 1:
1. 0:
2. 1:
4. 3:
1. 0:
2. 1:
1. 0:
2. 1:
5. 4:
1. 0:
2. 1:
1. 0:
2. 1:
6. 5:
1. 0:
2. 1:
1. 0:
2. 1:
7. 6:
1. 0:
2. 1:
1. 0:
2. 1:
20. 19:
1. 0:
1. 0:
2. 1:
2. 1:
1. 0:
2. 1:
1. 0:
2. 1:
3. 2:
1. 0:
2. 1:
1. 0:
2. 1:
4. 3:
1. 0:
2. 1:
1. 0:
2. 1:
5. 4:
1. 0:
2. 1:
1. 0:
2. 1:
6. 5:
1. 0:
2. 1:
1. 0:
2. 1:
7. 6:
1. 0:
2. 1:
1. 0:
2. 1:
21. 20:
1. 0:
1. 0:
2. 1:
2. 1:
1. 0:
2. 1:
1. 0:
2. 1:
3. 2:
1. 0:
2. 1:
1. 0:
2. 1:
4. 3:
1. 0:
2. 1:
1. 0:
2. 1:
5. 4:
1. 0:
2. 1:
1. 0:
2. 1:
6. 5:
1. 0:
2. 1:
1. 0:
2. 1:
7. 6:
1. 0:
2. 1:
1. 0:
2. 1:
22. 21:
1. 0:
1. 0:
2. 1:
2. 1:
1. 0:
2. 1:
1. 0:
2. 1:
3. 2:
1. 0:
2. 1:
1. 0:
2. 1:
4. 3:
1. 0:
2. 1:
1. 0:
2. 1:
5. 4:
1. 0:
2. 1:
1. 0:
2. 1:
6. 5:
1. 1:
1. 0:
1. 0:
2. 1:
2. 1:
1. 0:
2. 1:
2. 0:
1. 0:
2. 1:
23. 22:
1. 0:
1. 0:
2. 1:
1. 0:
2. 1:
3. 2:
1. 0:
2. 1:
2. 1:
1. 0:
1. 0:
2. 1:
2. 1:
1. 0:
2. 1:
3. 2:
1. 0:
2. 1:
3. 2:
1. 0:
1. 0:
2. 1:
2. 1:
1. 0:
2. 1:
3. 2:
1. 0:
2. 1:
4. 3:
1. 0:
1. 0:
2. 1:
2. 1:
1. 0:
2. 1:
3. 2:
1. 0:
2. 1:
5. 4:
1. 2:
1. 0:
1. 0:
2. 1:
2. 1:
1. 0:
2. 1:
2. 0:
1. 0:
2. 1:
3. 1:
1. 0:
2. 1:
6. 5:
1. 2:
1. 0:
1. 0:
2. 1:
2. 1:
1. 0:
2. 1:
2. 0:
1. 0:
2. 1:
3. 1:
1. 0:
2. 1: