Threat Level: green Handler on Duty: Russell Eubanks

SANS ISC: ISCAlert - Internet Security | DShield SANS ISC InfoSec Forums


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!
ISCAlert
I am using a laptop with win 8.1 and have been using ISCAlert.exe to display the threat level icon in my system tray. Everything had been working fine until a couple of days ago. The icon is now solid blue even though the threat level is Green and if I mouse over the icon I get 'Infocon: NO DATA'. Has anything changed on your end? I can't seem to find any problems here. Thank you. - James ZolarCzakl

4 Posts
same here. i do not think the problem is on the client end. DonMcCaffrey

1 Posts
It looks like ISCAlert does not follow the redirect to HTTPS. I was not able to locate Tom Liston (the author) of Intelguardians. The blog over there has not been updated in a long time. I switched to the Infocon Watcher Firefox plugin. Tom, are you still around? If you could find time to put the source on sourceforge, github, or somewhere, perhaps someone else could step in and update it. Thanks to all the handlers here for all you do.

JimC
JimC

17 Posts
Thank you for clearing this up. It isn't a huge thing, but I am presently using Chrome and there doesn't seem to be anything like the Firefox Infocon Watcher available. I hope that the author will either fix the issue or post the code so that someone else could. I've had some form of ISC threat level indicator on my browsers for years and I really miss it. ZolarCzakl

4 Posts
Apparently ISCAlert only checks port 80 and they've switched over to https, it probably needs to check port 443 also, but this would require a coding change. ZolarCzakl

4 Posts
Well, I guess that's one way to handle it. Mr. Ullrich just posted a diary entry that support for ISCAlert has been discontinued.

https://isc.sans.edu/diary/18157

JimC
JimC

17 Posts
I suppose those of us who were still using ISCAlert are a distinct minority. I will miss my little green globe in the system tray, it was somehow comforting...... ZolarCzakl

4 Posts
Sorry for not replying here earlier. But yes, this thread prompted me to look at the "info con app" again. I may still have the source code somewhere ;-) but I think the main hurdle will be the missing https support. The app also requires a "non standard" RSS feed . Johannes

3655 Posts
ISC Handler

Sign Up for Free or Log In to start participating in the conversation!