home.social

#suricata — Public Fediverse posts

Live and recent posts from across the Fediverse tagged #suricata, aggregated by home.social.

  1. Get ready because SuriCon 2026 is hitting Lisbon this November, and our Capture The Flag competition is about to become legendary!

    Grab your #SuriCon tickets now, tag your ultimate threat-hunting squad below, and let the countdown begin! Register for SuriCon today: suricon.net/tickets

    #Suricata #CtF

  2. i wanted to try out the new #astra model from #openai so i worked back and forth with it on a janky little script to convert eve.json from #suricata to #mitre ILF, then i had it generate a pile of tests: github.com/cmhobbs/suricata2ilf

    it's... fine? i guess? doesn't seem like a wild improvement over sol to me. much how #fable and #opus 5 didn't feel like terribly useful leaps to me.

    a lot of this #ai stuff feels like mega-hype and i feel crazy when it doesn't work for me.

  3. i wanted to try out the new #astra model from #openai so i worked back and forth with it on a janky little script to convert eve.json from #suricata to #mitre ILF, then i had it generate a pile of tests: github.com/cmhobbs/suricata2ilf

    it's... fine? i guess? doesn't seem like a wild improvement over sol to me. much how #fable and #opus 5 didn't feel like terribly useful leaps to me.

    a lot of this #ai stuff feels like mega-hype and i feel crazy when it doesn't work for me.

  4. i wanted to try out the new #astra model from #openai so i worked back and forth with it on a janky little script to convert eve.json from #suricata to #mitre ILF, then i had it generate a pile of tests: github.com/cmhobbs/suricata2ilf

    it's... fine? i guess? doesn't seem like a wild improvement over sol to me. much how #fable and #opus 5 didn't feel like terribly useful leaps to me.

    a lot of this #ai stuff feels like mega-hype and i feel crazy when it doesn't work for me.

  5. Обнаружение SSH-туннелей по размеру пакетов

    Иллюстрация из книги «Справочник киберсантехника» Протокол SSH — очень мощный инструмент, который используется для удалённой консоли или передачи файлов (scp, sftp). Есть менее известная функция перенаправления портов . Такие SSH-туннели используются для пробития файрволов и хорошо скрываются от обнаружения стандартными средствами мониторинга типа Trisul , Zeek (ранее был известен как Bro), Suricata и Snort . Поэтому для их обнаружения в корпоративной сети используются другие методы.

    habr.com/ru/companies/ruvds/ar

    #ruvds_статьи #VDS #хостинг_сайтов #sshaudit #скрытие_ssh #шпаргалка #cheat_sheet #RSA #ED25519 #scp #sftp #прямой_туннель #обратный_туннель #autossh #перенеправление_портов #Trisul #Zeek #Bro #Suricata #Snort #анализ_трафика #размер_пакетов #нажатия_клавиш #обфускация_тайминга #OpenSSH #Lua #sshuttle