Zeek
Analyzing encrypted RDP connections
Open source Zeek is capable of analyzing RDP connections and does a fantastic job handling the many options and configurations the RDP protocol...
Featured
What the Black Hat NOC taught me about MCP & agentic SOCs (Chapter 1 of 4)
Discover what defending the Black Hat NOC taught me about using Model Context Protocol (MCP) to build an agentic SOC and accelerate threat hunting.