Zeek
Mixed VLAN tags and BPF syntax
This post contains a warning and a solution for anyone using BPF syntax when filtering traffic for network security monitoring.
Featured
The missing layer in modern detection architecture
Signatures catch known threats and anomaly detection flags deviations. TTP-based detection closes the gap by detecting behaviors mapped to MITRE...