Zeek
Network security monitoring vs supply chain backdoors
Collecting and analyzing core NSM data types & with host-based security provide the best chance for CIRTs to detect and respond to the sorts of...
Featured
Building “php2shell” detections before coordinated disclosure
We built Zeek and Suricata detections for php2shell, two serious remote code execution vulnerabilities in PHP, and released them as open source.