An Analysis of Tactics Used in Discovering Passive Monitoring Devices
Explore tactics for uncovering hidden network monitoring devices, enhancing cybersecurity awareness and defense strategies against covert surveillance.
Latest Advances in Honeynet Technologies
Explore cutting-edge developments in honeypot systems for cybersecurity, featuring insights from The Honeynet Project on deception technologies and threat intelligence gathering.
State of the Onion - Security Onion Conference 2019
Explore the latest developments and future roadmap of Security Onion, a powerful open-source security monitoring platform, presented by its creator at the annual conference.
Security Onion Essentials 2024 Installation - Part 2
Comprehensive guide to finalizing Security Onion 2.4.70 setup, covering advanced configuration steps and best practices for optimal network security monitoring.
I Watched You Roll the Die - Unparalleled RDP Monitoring Reveal Attackers' Tradecraft
Unparalleled RDP monitoring reveals attackers' tactics through PyRDP, an open-source tool. Analysis of 3-year honeynet data exposes threat actors' methods, providing insights into RDP-based attacks and ransomware outbreaks.
Lifting the Fog of War - Monitoring, Identifying and Mitigating MS-RPC Based Threats
Explore techniques for monitoring and defending against RPC-based attacks, including traffic analysis, signature detection, and mitigation strategies for Windows environments.
DScope - A Cloud-Native Internet Telescope
Explore DScope, a scalable cloud-based Internet telescope for monitoring malicious behavior. Learn about its design, implementation, and advantages over traditional methods in capturing cloud-targeting traffic.
Knowing What's Under Your Hood - Implementing a Network Monitoring System
Explore network monitoring systems, focusing on high-speed packet capture, frame processing, and tuning techniques for FreeBSD and Linux. Learn about PF_RING, netmap, and useful applications.
Intro to Scanning - Nmap, Hping, Amap, TCPDump, Metasploit, etc.
Learn essential network scanning tools like Nmap, Hping, Amap, TCPDump, and Metasploit for cybersecurity. Gain practical skills in network analysis and vulnerability assessment.
Netsniff NG
Explore netsniff-ng toolkit for high-performance packet processing, including latest developments, examples, and performance considerations for network analysis and monitoring.
Wireless Intrusion Detection System with Raspberry Pi
Learn to build a wireless intrusion detection system using Raspberry Pi. Explore setup, configuration, and implementation techniques for enhanced network security.
Maximizing Bro Detection
Explore advanced techniques for enhancing network security using Bro, focusing on maximizing detection capabilities and improving threat intelligence.
Alert All the Things - Network Baselines and Alerts with Bro Scripts
Network monitoring and alerting using Bro scripts to establish baselines and detect anomalies. Learn to enhance security through customized, automated threat detection.
Put Up a CryptoWall and Locky the Key - Stopping the Explosion of Ransomware
Explore ransomware's impact, recent attacks, and effective prevention strategies. Learn to secure networks, train users, and implement best practices against evolving cyber threats.
Prowling Better Penetration Testing
Explore advanced penetration testing techniques, focusing on network monitoring, encryption, and control systems to enhance cybersecurity strategies and identify vulnerabilities.
2018 SIEM Trends - What is My Mean Time to Value
Explore SIEM trends, from traditional approaches to next-gen solutions incorporating cloud, data science, and advanced analytics. Gain insights on future developments in security information and event management.
Faucet SDN Tutorial
Hands-on tutorial for installing and configuring Faucet SDN controller, exploring features like VLANs, ACLs, and routing. Includes network monitoring with Prometheus and Grafana dashboards.
Network Monitoring with AMP
Explore AMP, a distributed network monitoring platform for active measurements. Learn its architecture, tests, data reporting, and real-world applications in detecting network issues and performance trends.
Stop the Machine Learning Arms Race
Explore the challenges of machine learning in cybersecurity, including ransomware, trust attacks, and autonomous responses, with insights on innovative threat detection approaches.
Go? Bash! Meet the Shell-operator
Explore Shell-operator for automating Kubernetes tasks using bash and jq. Learn to create simple operators, subscribe to resource changes, and extend Kubernetes functionality efficiently.
Deep-Dive - Packet-level Debugging of Bridged and Non-bridged CNI Plugins
Explore packet-level debugging techniques for Kubernetes connectivity issues, focusing on bridged and non-bridged CNI plugins, NAT, iptables, and network policies.