Zeek
Community detection: CVE-2020-16898
This blog is a brief story of a few points that occurred to me during the less than 24 hours it took to turn around this package from dev to testing.
Featured
When the fuzzers come knocking on port 389: Hunting injection canaries in LDAP
Core protocols like LDAP are often left unmonitored. See how Zeek's ldap_search and DNS logs expose injection canaries and confirm whether attacks...