Remcos Alerts from FlowCarp in EveBox

There is a wonderful little web based alert and event front-end called EveBox, which renders Eve JSON formatted data to a graphical user interface. This blog post demonstrates how EveBox can be used to show alert and flow information that FlowCarp has extracted from a Remcos malware infection. Remco[...]

BSides Groningen – BSides Groningen

10K curl downloads per year

The Linux Foundation, the organization that we want to love but that so often makes that a hard bargain, has created something they call "Insights" where they gather lots of metrics on Open Source project. I held back so I never blogged and taunted OpenSSF for their scorecard attempts that were always lame and misguided. … Continue reading 10K curl downloads per year →

tcpdump(1) man page | TCPDUMP & LIBPCAP

All about Suricata with Victor Julien

Josh discusses Suricata with Victor Julien, the founder and lead developer of the Suricata project. Victor explains the history of Suricata, its impact on cybersecurity, and the community that keeps it all running. Challenges like encrypted traffic and the evolution of open-source projects. Victor even gives us a glimpse into what he sees as the future of the project. There’s a lot to learn about Suricata in this one. Episode Links Victor Suricata Kelley episode Suricata github This episode is also available as a podcast, search for “Open Source Security” on your favorite podcast player.