
community-id-spec
An open standard for hashing network flows into identifiers, a.k.a "Community IDs".
digital-forensicsincident-responseintrusion-detection+4
197

An open standard for hashing network flows into identifiers, a.k.a "Community IDs".

Zeek package for detecting PetitPotam NTLM relay attacks via EFS DCERPC over unencrypted SMB, distinguishing successful and unsuccessful exploit…

Automated Network Security with Rust: Detecting and Blocking Port Scanners

MysqlHoneypot

Proof-of-concept exploit for CVE-2023-0264 (Keycloak OIDC session hijacking) with a frontend for session_id substitution and an agent that detects…

CY376 Blue Team project — pfSense DMZ, Suricata IDS/IPS, and automated host hardening against CVE-2014-6271