Zeek
Another cool thing about Bro: SMB analysis!
Bro’s SMB protocol analyzer has undergone several iterations, and it is now a built-in feature that many Bro users might have overlooked.
Featured
What the Black Hat NOC taught me about MCP & agentic SOCs (Chapter 1 of 4)
Discover what defending the Black Hat NOC taught me about using Model Context Protocol (MCP) to build an agentic SOC and accelerate threat hunting.