Zeek
Examining aspects of encrypted traffic through Zeek logs
In this post I will use Zeek logs to demonstrate alternative ways to analyze encrypted HTTP traffic.
Featured
Recognizing and detecting data exfiltration
See how to detect data exfiltration hiding in trusted protocols like DNS, SMB, and HTTP/S, and how Corelight catches it before it becomes a breach.