Zeek
Community detection: CVE-2020-16898
This blog is a brief story of a few points that occurred to me during the less than 24 hours it took to turn around this package from dev to testing.
Featured
The missing layer in modern detection architecture
Signatures catch known threats and anomaly detection flags deviations. TTP-based detection closes the gap by detecting behaviors mapped to MITRE...