|
About the Tutorials, Tips & Tricks category
|
|
0
|
304
|
September 12, 2022
|
|
If you get the alert "ET POLICY Vulnerable Java Version 1.8.x Detected"
|
|
2
|
53
|
September 22, 2023
|
|
If you get the alert "ET INFO Microsoft Connection Test"
|
|
0
|
35
|
September 22, 2023
|
|
If you get the alert "ET POLICY GNU/Linux APT User-Agent Outbound likely related to package management"
|
|
0
|
29
|
September 22, 2023
|
|
If you get the alert "ET INFO TLS Handshake Failure"
|
|
0
|
44
|
September 20, 2023
|
|
If you get the alert "ET INFO Session Traversal Utilities for NAT (STUN Binding Request)"
|
|
1
|
146
|
September 20, 2023
|
|
Android/MMRAT : Additional Analysis
|
|
0
|
118
|
September 14, 2023
|
|
If you get the alert "ET USER_AGENTS Microsoft Device Metadata Retrieval Client User-Agent"
|
|
1
|
195
|
August 28, 2023
|
|
Translating Suricata http.header_names content to Snort
|
|
3
|
146
|
July 27, 2023
|
|
Understanding Signature Direction
|
|
0
|
189
|
July 14, 2023
|
|
Rule Metadata & Exploit Signature Difficulties
|
|
0
|
202
|
June 9, 2023
|
|
Intro to Traffic Analysis and Suricata Signature Development Lab - Bsides SLC 2022
|
|
1
|
934
|
June 4, 2023
|
|
ET SocGholish Rules Response Guidance
|
|
1
|
2657
|
May 30, 2023
|
|
Investigating and Interpreting TLS SNI and DNS query rules
|
|
1
|
696
|
May 19, 2023
|
|
Cobalt Strike and Malleable C2 Profiles
|
|
0
|
261
|
March 7, 2023
|
|
Vidar Stealer Picks Up Steam!
|
|
0
|
1170
|
January 18, 2023
|
|
HTTP/2 in Suricata 6
|
|
0
|
1002
|
January 10, 2023
|
|
Need help finding Pcap with no signatures
|
|
6
|
167
|
January 10, 2023
|
|
SocksTroy - An interesting use case with byte_jump, isdataat, and stream_size
|
|
0
|
951
|
December 16, 2022
|
|
MSSQL Maggie Rules and My Thoughts
|
|
3
|
487
|
November 22, 2022
|
|
The Complexities of byte_jump
|
|
0
|
416
|
October 28, 2022
|