In 2010, CBS rebooted the classic series Hawaii Five-O. It features a fictional state police unit run by Detective Steve McGarrett and named in honor of Hawaiiâs status as the 50th state. The action centers on a special task force empowered by Hawaiiâs governor to investigate serious crime.
The tech guru on the show is a Detective Chin Ho Kelly (played by Daniel Dae Kim) and is shown to be adept at various forensic techniques, includingâŚwait for itâŚSIEM (of all things).
In Season 1, Episode 15Â (Kai eâ e) the islandâs leading tsunami expert is kidnapped on the same day that ocean reports indicate that a huge tsunami is headed to Hawaii. However, Five-0 soon suspects that the report is a hoax and is related to the kidnapping.
During the investigation, Chin Ho uncovers two failed logins with the kidnapped expertâs username and a numeric password each time. This is followed by a successful login. This seems odd because the correct password is all alphabetical and totally unrelated to the numbers. Turns out the kidnapped person was trying to send a message to the cops, knowing the failed logins would get scrutiny. The clue is incomplete though, because the failed logins do not capture the originating IP address and so canât be readily geolocated.
Its great that SIEM is now firmly entrenched in the mainstreamâŚ.bodes well for our industry and for IT security.
When the bad guys attack your assets, use EventTracker to âbook âem Dannoâ.
- A.N. Ananth