Exposing Salt Typhoon on the network using the PEAK Threat Hunting Framework
Learn how Corelight data and the PEAK threat-hunting framework turn rich network evidence into a practical playbook for hunting Salt Typhoon.
Learn how Corelight data and the PEAK threat-hunting framework turn rich network evidence into a practical playbook for hunting Salt Typhoon.
Proactively defend against zero-days. Learn how with Cisco exploit lessons learned, warning signs from GreyNoise, F5 threats, and NDR.
Recapping our learnings from the Black Hat NOC, using packet captures and Zeek scripting to decode threat payloads.
Speed up technical documentation with the open-source llm-styleguide-helper. It pairs Vale linting and AI to fix Microsoft Style Guide violations in...
Learn how to use Open WebUI knowledge bases to enhance your LLMs with private, local cybersecurity data for better queries, analysis, and incident...
Learn how Map-Reduce and LLMs can be used to efficiently analyze huge datasets and improve threat hunting, incident response, and forensic analysis.
Learn how to run DeepSeek AI locally with Ollama and Open WebUI for secure Zeek script analysis.
Read how to identify C2 activities and agent downloads associated with MITRE Caldera agents using this Zeek Caldera detector via GitHub.