Zeek
Community ID support for Wireshark
The past few weeks have seen several developments around Community ID and support for Wireshark. I’d like to summarize them in this blog post.
Featured
The missing layer in modern detection architecture
Signatures catch known threats and anomaly detection flags deviations. TTP-based detection closes the gap by detecting behaviors mapped to MITRE...