Pengisian Rohani

I've heard about this Seminar from my mom who really want to attend but unable to do it due to she receive an invitation to give a talk. So, she ask me to register and attend. However they provide a webinar for this seminar and they will distribute the recorded seminar with the presentation slide to those who registered. It is a good seminar by the way. Attending the webinar now.

Pengisian rohani untuk transformasi. Seminar Transformasi Ramadhan 2.0.

Digging the FB4SPLK Apps

I found that Splunk is really interesting since they allow user to do custom apps by their own and name the apps like what ever the user want. My project now is to identify how Facebook for Splunk Apps work. Of course they use Facebook API to connect with FB. The data is quite interesting but a bit messy. So my task is to figures how the apps read FB Username and Status fields so that i can create my own custom dashboard/Apps.

Let's the challenge begin. But for the start, let's study the Apps's XML and HTML code first :P

New Life. New Challanges.

Yo! Most of my friends already knew that i have move from my previous company which is a UK based insurance company. Even this is like a gamble decision but i still did it. It's a risky business but i believe we can make it. Some of them give me support and some of them question me why. As long as I've being paid every month to cover my expenses and able to feed my family, i have no problem with the job.

It's been a long time that i wish i have my own company, or running a small company with friends that trusted and able to bring business in and the most important is, i have passion in it. I like security, i love SIEM. I believe Splunk can do both and even more. So yes, i'm carry Splunk as a product and services in my new company which is founded by my friend (which is my ex-boss as well) and me. I believe this is the right time, right place to start a new business which tapping a gov and private sector. Big data!

Now i can managed my own time, my own life, at least make a decision how it should be running. Well, wish me luck. If you are a potential customer that looking for a big data solution or security or application management or log monitoring or what ever areas in various industries (mssp, insurance, banking, telco, oil and gas, gov, private etc), do let me know. I'm willing to help from A-Z, provide solutions, provide a design plan, provide the baseline for you. Splunk is not just a product, it's more beyond that.

Enough for marketing, seriously wish me luck.

:)

Home Networking & PC Setup

This is my home networking setup. Memang bersepah cable, tapi aku dah dapat solve sikit masalah sebelum ni. Pakai homeplug jek, sebabnye unifi router ada kat hall kecik, the reason aku suruh TM letak situ sebab wifi router nanti dapat coverage luas sikit compare dalam bilik. So, dari unifi router nak tarik network masuk bilik untuk iptv unifi. Tv 14" dalam bilik. Boleh la tgk tv jugak kalau astro dah kene conquer kat bawah. Cuma cable extension je kene tarik dari luar sebab tu je yg paling dekat dan x sepah sangat nanti.

//proposed home network

//unifi router, unifi modem, homeplug, iron (eh?!?)

Ini pulak desktop for kids. Pc shuttle yg aku beli used from Hezli lama dulu. Actually before this pc ni aku connect ke TV plasma kat hall konon2 nak buat entertainment media la. Tapi disebabkan harddisk 500gb tu cepat je penuhnye dengan blueray movies dan jarang2 je aku switch on kat TV tu, ye la dah ada astro b.yond, memang malas la nak bukak pc, dari berabuk, aku reformat balik dari fedore 15 kepada win7 enterprise 64bit untuk anak aku main. So far yang dia bukak ialah youtube, google images dan freeonlinegame (fog.com). Aku gigih beli LCD monitor LG dan keyboard/mouse set baru untuk pc ni. Oh meja komputer juga kat Giant seri kembangan, hehe. So my kids (especially Adam la) dah ada pc dia sendiri, tak kacau laptop aku dah. Location: kids room.

//workstation for kids :)

I'm Back!

Salam and Hi! I'm back! The blog is back. With a new name, new title, new layout design, new post but old crap. This is my life journey. My career journey. My own interest. My personal thoughts. Enjoy the crap and nonsense post. I will not responsible for any brain damaged if you read or use any of articles in this blog. It's all on your own. Good luck.

//my small cube :)

MOVING ON!

Hi all reader! (if they are)

I had moved my blog to the new place now and i'm probably not going to maintain this blog anymore. Please do visit my new blog with new post (also all previous post from here too) at:

WWW.AKRAMABDULRAHMAN.COM = DECEASED!!!


See you guys there!

:P

MC For 2 Days

I got MC for 2 days starting yesterday 11/11 and today due to my eyes got infection. Yes, my eyes was so RED and my wife asked me to see the doctor. So, here i am blogging from my bedroom. Actually i got work to do today at office which is to accept delivery and monitor the installation of 2 units Avaya Phone, how ever, i'll postpone it to tomorrow evening.

In the process of recovering.

:|

Google Wave!

Google wave is so cool! I think when it's open to everyone, it can beat Facebook down! Enjoy the screenshot of my googlewave preview! I'll surely give a positive feedback to the team!

Thanks to Bro Trew for the invitation! It takes only 24 hours to get the invitation, hehe.

:)

Gym Facilities

There's a gym facilities available in my office building at the ground floor (lobby) specially for staff use only. After a month working here, today i got a brave (haha) to try those facilities. Lucky at lunch time, no body using it and only me alone there. Quite impressive with the facilities even though it just a small room, sufficient enough for me. I try to target at least twice a week to do the work out. Excited since this is the first time the company i've join got gym facilities. I remembered i've joined gym membership last time at Fitness First when i worked with SCAN (before married, haha). The fees was quite expensive and now i got a privileged as a staff to use gym for free. Excited gila! Orang lain biasa2 je, haha!



Now i feel FRESH!

p/s: the quality of the piccas not good since i'm just using my phone.

:P

How's Cool!

Finally, last 2 days, i got a reminder to collect a package at post office Sg. Besi and i wonder what, yes, my book ordered from Amazon.com has arrived and yesterday before go to work, i go there to collect it. Yey! After a year i want to own it, read here.

New update in my family about technology:

1. My mom got her own facebook page. You can find the page here.

2. My dad has build his own blog from blogspot, well actually not for him self but for our legacy from Arwah datuk, Hj. Bulang bin Suboh. You can find it here.

It's great to see that my mom and dad is catching the latest trends for social networking nowdays. cool huh!

:)

Currently: Books I Read

Currently, i'm reading : Security Monitoring:Proven Methods for Incident Detection on Enterprise Networks ebook. Very easy to understand and a good concept too.

I also waiting for book from Amazon.com to arrived at my doorstep which was i bought : Nmap Network Scanning: The Official Nmap Project Guide to Network Discovery and Security Scanning (Paperback) probably will arrive around mid of November. This is my first try to buy a book from Amazon.com. Hopefully it will arrive safely and still in good condition. I try to search this books from local bookstore, unfortunately, seems it doesn't enter Malaysian market yet, or i'm missing the store? Never mind.


And now, i'm enjoyed playing with GPS Garmin XT installed in my phone E66 with cost of RM0.

:)

How: Hiring New S.A?

How to hire security analyst?

Well, I've got few problems here. How to hire new SA? Well, i have few candidates that potentially can work with me together build the new SOC. However, the problems are:

1. They absolutely experienced in shift work, however if they want to change the work environment, they would not want to work on shift anymore.

2. They absolutely experienced and now they want to demand the salary. Their end basic salary was quite high now days and if the company just offer them few hundreds only, would they consider? of course no!

3. Right now they might be in the level of manager/head/senior, would they want to join an MNC company with few hundreds of increment but as Security Engineer doing the task of SA? I don't think so.

4. HR of the company is not clearly describe the offer even though the hiring manager already state what is the benefits/base salary they can offer to the candidate. This could make the candidate confuse whether to join in or take off.

5. I also have a few friends that i confirm can work as SA with shift environment and without any problem to accept the offer, but i don't think they can perform and personally, their technical skill is quite low and their effort is none, duh! Hopefully if I'm desperate enough to hire them, they can change.

6. I'm not sure how to find a new candidate that have security knowledge and experienced and have a good attitude. Anyone want to try?

So, can somebody advice me how to overcome those problems?

However, if you are a security guy - a packets monkey - part of CIRT before - have a knowledge in networks, OS (Linux/UNIX/Windows etc), security - have a good attitude - willing to learn new things - fast learner - got passion in it - willing to share the knowledge - willing to work on shift 12 hours rotation - want to work with MNC company, you can send your CV to me at akramabdulrahman[at]gmail[dot]com. I will review your CV and i will try my best to fwd it to my boss for interview session if you've been shortlisted. There is not promise but i'll try my best.

Good luck!

:)

Climbing The Ladder

I'm in the process of climbing the ladder. From junior system engineer, to assistant researcher, to security analyst, to senior security analyst, to security engineer who do support and implementation and now becoming senior security engineer that will plan, managed and also lead the team of new SOC which is more responsibility. I found a good articles and i would like to shared it here, even though it a bit old and maybe i'll missed it before.

Creating a Computer Incident Response Team

Expectations for Computer Security Incident Response

Incident Response Pitfalls: It's the Little Things that Count

Security 101: Building a Computer Security Incident Response Plan

Happy reading!

:)

What SOC Should Have?

What do i need for IR or SOC? This is the lists of what i got in my mind for now. If you have any other input, please share with me.

1. People - Of course i will need more people if i want to run the SOC 24/7. At least 2 people per shift if i want to run it on 2 shift which is 12 hours. Well, this got a limitation since we do have a head count.

2. Technology - We already have the technology which is SIEM, IPS, FW, CSS, USD (for ticketing/IR) etc.

3. Room - Yes, we do need room for SOC! It should be private and confidential area that can be accessed by authorize person only. It should be equipped by CCTV, biometric access, PCs (of course), printer, projector, LCDs etc. and i do think it should be a comfort room since people are working 24/7 in this room.

4. Documents - Yes. Documents such as SOP, SLA, manuals, incident forms, analysis forms, asset lists, network diagrams, shift handbooks, monthly reports, executive summary reports, shift schedules etc.

5. Knowledge Bank System - Yes, we do need this system which is can be run intranet. Such as data servers (inclusive movies/ tv series? hehe), wikis, forums etc. The shift handbook can also be in online format since people now days are to environmental like to save a paper :P

6. Training! (and knowledge sharing session) - Yeah, people need training to performing their daily task. Even high level manager still need recognized training. Not only for a specific tools training (SIEM), but include any security domain training too. Anyway, within the hiring process, we still need an experienced people at least have a knowledge in system engineering/system administrator/network, have the skills set of security, have the right attitude and got passionate learning new things.

7. else? please share.

:)

IR or SOC Articles

A good article for those who want to run IR team or SOC. For my reference.

1. http://eatingsecurity.blogspot.com/2009/04/building-ir-team-people.html

2. http://eatingsecurity.blogspot.com/2009/06/building-ir-team-organization.html

3. http://eatingsecurity.blogspot.com/2009/07/building-ir-team-documentation.html

Been there and done that too.

:)

The New Beginning!

Salam, yes, i have started working with the new company last 2 days on 1st October 2009. At that time, my boss is on leave so i've being introduce to others by Lead Security Architect. So far, the introduction is ok, people is ok, environment is ok (it just 2 days only, don't know what's coming next yet). Even though my department is attached under bank but my task will more focus for other financial company.

I got my task the next day, which is quite ad-hoc briefing. Well, not a proper one. They need me to plan how to setup the new SOC. Well, i need to plan the room, schedules, peoples, facilities etc. I will handle SOC team. It's a bit scary, but i will facing it and take out my fear away, huuu!

Need to apply parking space next monday. I have the ideas in my head already, hopefully it can be success and i hope all my engineers who will work with me later can give their fully support work together with me.

Pray for my success!

:)

3.5G @ Terengganu

Yo, i'm now blogging at Anees Chalet, Kuala Terengganu using my TX1000 laptop with Nokia E66 as a modem and 3.5G (HSDPA) connection. Layan gak blogging sambil tengok laut dan nelayan baru nak siap2 gerak pagi2 ni. I've been here since Friday sebab tujuan menghantar my cousin akad nikah dan kawin. Ada macam2 dugaan sepanjang perjalanan ke sini tapi nak buat macamana, dah takdir.

I've been appointed as his photographer but still they have their own photographer kat sini since i need to follow my family la. Tak dapat la nak shoot posing dalam bilik dan outdoor. So, shoot akad dan sanding je la. Haha.

Well, semalam lepas kenduri, kami sefamili berjalan2 ke Taman Tamadun Islam berhampiran dengan Masjid Kristal. Tu pun penat gila since besar gak area dia. Adam sangat cranky sebab gigi dia sakit nak tumbuh. Kesian Adam tapi x kan nak tinggalkan dia. After that ingat nak jalan2 pegi pasar ape ntah kat kuala terengganu ni tapi cancel sebabnye dah lewat 5.30pm, pasar tutup 6.00pm. So,we went back to chalet dan mak, abah dan angah pergi Kota Bharu tido kat rumah Pak Lang sebabnya diorang nak pergi Perlis pagi ni. Mak ada jemputan ceramah. So, tu la yang berlaku pada weekend ni.

Update for my car, hehe. Aku dah convert bumper depan kepada Alfadana, tapi masih sangat typical dengan semua perdana lain.Takde option nak jadi berbeza, but that the start. Alhamdulillah, check ATM semalam, claim dah masuk around 1K+ juga, not sure balance keje 2 hari tu ada masuk sekali ke tak, kene check jumlah claim.

Ok, hari ni nak gerak balik, tapi tak tau lagi samada nak singgah mana2 dan check in satu malam lagi or terus ke KL menggunakan highway. Murni dah reserved 1 day leave so tengok lah macamana. Hehe. Just go with the flow.

:)

Eid Mubarak 1430H

Selamat Hari Raya dari kami sekeluarga, Maaf Zahir dan Batin.

Drive safe!

p/s: tahun ni beraya di KL, raya ke 3 baru balik seremban.

:D

Officially Unemployed

Mark today date as my officially unemployed start day. I have been tendered my resignation last month to pursue my career goal in another company. Yesterday, a few of my colleague celebrate my farewell with buka puasa at Sri Melaka Restaurant, Amcorp Mall. Organized by Shirley. Even though it just a small event compared to previous people who left this company, i still appreciate it.

About the restaurant and the foods. What i can said is, superb! The environment is nice. The foods is so yummy. The most i like was chicken (of course) sweet and sour and the butter prawn. Recommended for anyone who want to organize any makan-makan event. So, let's the piccas tell the story. Thanks guys, i will always remember all the moments we shared.

Iftar Smaklian 95-99'

Last friday, ada iftar (majlis berbuka puasa) di Cheng Ho Restaurant (owned by Amy Search), Wangsa Maju by my Smakl Batch 95-99 organized by Hj. Kaluq dan Izza. Ramai juga yang datang. Dpt tau invited by facebook. Makanan boleh la tahan cuma masam (is it memang masam?). Lama sungguh tak jumpa semuanya terutama Pailang dan Merong, kebanyakan jumpa kat wedding event la. Last wedding aku attended Mali nye wedding kot. Well, anyway, it's a good event, walaupun blasah je, it's ok yang penting meet up each other setelah lama x jumpa. Enjoy the piccas!

The restaurant - Cheng Ho, Wangsa Maju

The organizer - Hj. Kaluq (right) and Aie

The mums - Exchanged

Merong and his son

The guys!

Adam and Aryssa :)

p/s: well, the pic is not as good as Hj. Kaluq pic la, hehe