Featured Post-Quantum Cryptography: The upgrade nobody asked for (but everyone’s getting) PQC will make handshakes chunkier and cipher names weirder. What the migration changes for defenders, and why encrypted-traffic visibility still wins. Josh Porto Sep 25, 2026
BitRAT Unmasking BitRAT's C2 over HTTPS BitRAT hides its C2 over HTTPS, but a default SSL certificate gives it away. See how to detect it with Zeek, Suricata, and SIEM queries. Deepali Prasad Jul 9, 2026
ScoutC2 malware Identifying and detecting ScoutC2 malware Learn how Corelight detects ScoutC2 malware using Zeek, SIEM queries, and Suricata rules for distinctive HTTP paths, methods, headers, and payload... Deepali Prasad Jul 7, 2026