Zeek
Together is faster: Zeek for vulnerabilities
I love this quote by John Lambert. It perfectly describes the impact network defenders can achieve by pooling resources, insights, and techniques.
Featured
When the fuzzers come knocking on port 389: Hunting injection canaries in LDAP
Core protocols like LDAP are often left unmonitored. See how Zeek's ldap_search and DNS logs expose injection canaries and confirm whether attacks...