Setting up the Dshield honeypot and tcp-honeypot.py, (Wed, Jul 1st)
After Johannes did his Tech Tuesday presentation last week on setting up Dshield honeypots, I…
ISC Stormcast For Wednesday, July 1st 2020 https://isc.sans.edu/podcastdetail.html?id=7062, (Wed, Jul 1st)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
Elastalert with Sigma, (Wed, Jul 1st)
A couple of weeks ago, Remco wrote a post about Sigma(1). I’ve also been spending…
ISC Snapshot: SpectX IP Hitcount Query, (Tue, Jun 30th)
SpectX was the subject of an ISC post on SpectX4DFIR back in late April. Raido from SpectX provides…
ISC Stormcast For Tuesday, June 30th 2020 https://isc.sans.edu/podcastdetail.html?id=7060, (Tue, Jun 30th)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
Sysmon and Alternate Data Streams, (Mon, Jun 29th)
Sysmon version 11.10, released a couple of days ago, adds support for capturing content of…
ISC Stormcast For Monday, June 29th 2020 https://isc.sans.edu/podcastdetail.html?id=7058, (Mon, Jun 29th)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
tcp-honeypot.py Logstash Parser & Dashboard Update, (Sun, Jun 28th)
This is an update for logstash and dashboard published in January for Didier's tcp-honeypot.py honeypot…