Over at Corelight we just released a #Zeek Detection package for Windows DNS #CVE-2020-1350 (AKA #SIGRed, with a CVE score of 10.0) github.com/corelight/SIGR… - to be adjusted when POCs and more details emerge. Thanks Ryan Victory for the teamwork! #followthesun

Today I'll be talking about developing Zeek plugins to detect vulnerabilities on the The Zeek Network Security Monitor Community call "Ask the Zeeksperts" at 2:30PM Central Time. Anybody is welcome! corelight.zoom.us/meeting/regist… #zeek #CyberSecurity

Today I packaged up some #Zeek code that I've been running at home: github.com/rvictory/zeek-… The package alerts on new second level domains that have been queried for on the network and stores state in an SQLite table for persistence across Zeek reboots.

So the original Peter Pan is a pretty terrible movie in 2020. Normally I’m not all about judging old movies but wow... also Tinkerbell is a terrible person/pixie.

#Zeek V3.2 has been released! This release includes the ability to log the original DNS query case in the dns.log file. simply add: @load policy/protocols/dns/log-original-query-case To your local.zeek. Enjoy! zeek.org/2020/08/10/zee…

Our son spent 96 days in the NICU after he was born. My wife and I started a library at the NICU and are running our annual book drive-most books are $5-10. Please consider donating! Order from this link and it'll ship to us! amazon.com/hz/wishlist/ls… elliotslittlelibrary.org

Sunday mornings at my house are for turkish coffee and I’m convinced AlAmeed Coffee makes the best!

Had a great time presenting at #zeekweek today! Thanks The Zeek Network Security Monitor for the opportunity to talk about unit testing Zeek scripts and thanks Corelight for allowing me to open source ZTest, my Zeek unit testing framework! Check it out here: github.com/corelight/ztest

My Zeek Week talk (and all others!) are now available on YouTube! Visit youtu.be/_RXv5egxHIc to learn about how to think about unit testing for #zeek script and plugin code!

Today I finally understand SQL window functions and my data analytics life has been completely changed

The fact that after all these years there’s still not an alternative to the Hive Metastore in the “big data” world is upsetting

My favorite part of the SolarWinds hack is the fact that even with all of these security vendors telling us about their "ML/AI" and "behavioral detections," nobody caught this. Think about that. Security isn't shiny black boxes, it's good people with good tools. Invest in people!

I can still tweet! Probably because I’m not Donald J. Trump

Two foolproof ways to rile up any 3d printing community/group: 1. Show off your 3d printed instrument hanger/mount -or- 2. 3d print something that comes in contact with food #3Dprinting #isitfoodsafe #3DPRINTER

Random reminder: check your fire extinguishers to make sure they are still charged fully. That is all😀

How could I not buy this?

I’m looking to buy a Tecmo A88 phone. They are generally found in Nigeria. Can anybody help me procure one?

1/ We just shared new security research by our malware discovery team into 400+ malicious iOS and Android apps. They were designed to steal people's Facebook login info 🧵 about.fb.com/news/2022/10/p…

Happy Thanksgiving! In solidarity with all of the VR avatars who are alone today, I’ll be spending my Thanksgiving in the metaverse 😀 #virtualreality #metaverse #thanksgiving #vr

While watching the “Puppy Bowl Pregame” on Animal Planet with my kids I’ve seen commercials for “The Playboy Murders” and “Cocaine Bear.” Thanks for the kid friendly commercials, Animal Planet and YouTube TV 🙄