Zeek
How Zeek can provide insights despite encrypted communications
This post will outline some methods Zeek employs to provide visibility into SSH connections.
Featured
The missing layer in modern detection architecture
Signatures catch known threats and anomaly detection flags deviations. TTP-based detection closes the gap by detecting behaviors mapped to MITRE...