Guide on how to extract files (file carving) from network with Zeek NSM. #zeek #file_extraction

threathuntingtails.com/zeek-network-f…

For those of you that struggled with codecs it’s love on YouTube now youtu.be/fMxSRFYXMV0

Defcon uploaded all talks on media server so my #defcon31 talk : The art of compromising C2 servers - A web application vulnerabilities prespective is now available.
I hope you enjoy it as much as I enjoyed returning home :D
media.defcon.org/DEF%20CON%2031…

Probably one of the best talks I ever did, happy that I managed to talk in #defcon and did not end in a van. A massive thank you to everyone that attended!

How to restrict capturing traffic in #Zeek NSM with BPF Filters.

threathuntingtails.com/zeek-restrict-…

#Zeek #NSM #BPF

Zeek – Load Certificates to Zeek

threathuntingtails.com/zeek-load-cert…

#Zeek #TLS #SSL #NSM

How to Collect Hostnames from DHCP Protocol and enrich your #Zeek Logs.

github.com/chrisanag1985/…

#Zeek #nsm #dhcp #hostname #passive_detection

How to Enrich with GeoLocation Data the #Zeek logs.
threathuntingtails.com/zeek-geolocati…

#Zeek #NSM #geolocation