#suricata — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #suricata, aggregated by home.social.
-
Get ready because SuriCon 2026 is hitting Lisbon this November, and our Capture The Flag competition is about to become legendary!
Grab your #SuriCon tickets now, tag your ultimate threat-hunting squad below, and let the countdown begin! Register for SuriCon today: suricon.net/tickets
-
i wanted to try out the new #astra model from #openai so i worked back and forth with it on a janky little script to convert eve.json from #suricata to #mitre ILF, then i had it generate a pile of tests: https://github.com/cmhobbs/suricata2ilf
it's... fine? i guess? doesn't seem like a wild improvement over sol to me. much how #fable and #opus 5 didn't feel like terribly useful leaps to me.
a lot of this #ai stuff feels like mega-hype and i feel crazy when it doesn't work for me.
-
i wanted to try out the new #astra model from #openai so i worked back and forth with it on a janky little script to convert eve.json from #suricata to #mitre ILF, then i had it generate a pile of tests: https://github.com/cmhobbs/suricata2ilf
it's... fine? i guess? doesn't seem like a wild improvement over sol to me. much how #fable and #opus 5 didn't feel like terribly useful leaps to me.
a lot of this #ai stuff feels like mega-hype and i feel crazy when it doesn't work for me.
-
i wanted to try out the new #astra model from #openai so i worked back and forth with it on a janky little script to convert eve.json from #suricata to #mitre ILF, then i had it generate a pile of tests: https://github.com/cmhobbs/suricata2ilf
it's... fine? i guess? doesn't seem like a wild improvement over sol to me. much how #fable and #opus 5 didn't feel like terribly useful leaps to me.
a lot of this #ai stuff feels like mega-hype and i feel crazy when it doesn't work for me.
-
Обнаружение SSH-туннелей по размеру пакетов
Иллюстрация из книги «Справочник киберсантехника» Протокол SSH — очень мощный инструмент, который используется для удалённой консоли или передачи файлов (scp, sftp). Есть менее известная функция перенаправления портов . Такие SSH-туннели используются для пробития файрволов и хорошо скрываются от обнаружения стандартными средствами мониторинга типа Trisul , Zeek (ранее был известен как Bro), Suricata и Snort . Поэтому для их обнаружения в корпоративной сети используются другие методы.
https://habr.com/ru/companies/ruvds/articles/799255/
#ruvds_статьи #VDS #хостинг_сайтов #sshaudit #скрытие_ssh #шпаргалка #cheat_sheet #RSA #ED25519 #scp #sftp #прямой_туннель #обратный_туннель #autossh #перенеправление_портов #Trisul #Zeek #Bro #Suricata #Snort #анализ_трафика #размер_пакетов #нажатия_клавиш #обфускация_тайминга #OpenSSH #Lua #sshuttle