markuskont

Threat researcher and coder @StamusN. NSM, infra hacker, tinkerer, gamer.

[Stamus Networks @StamusN]

Stamus Networks' software platforms can connect to #Jupyter data connectors using REST API, allowing users to unlock more of #Suricata's #NSM capabilities, supercharge their data analytics, and simplify data exploration. Learn more now: https://t.co/vdm7Zx9lSO

[Stamus Networks @StamusN]

Don’t miss your chance to improve your #threathunting skills with #Suricata! Join Peter Manev (@pevma) and the @OISFoundation today at 2 PM GMT for their webinar “ #ICMP Backdoors and #CnC hunting”. Learn more: https://t.co/H9MD8RYt02

#threatdetection #networksecurity #cyber

[Stamus Networks @StamusN]

Are you familiar with Jupiter Notebooks? @markuskont is bridging a gap between #threathunting and #dataanalysis by introducing #JupyterLab to security practitioners working with #Suricata. Find his #Suricon2022 presentation, blog series and notebook here: https://t.co/lq0uFHOYeO

[Stamus Networks @StamusN]

The new episode of #BlueTeamDiaries is live! This month the Head of Cyber Exercises in @ccdcoe, Carry Kangur, is joining our host @pevma for an insightful conversation about the challenges of organizing the world’s biggest #cyber exercise. Listen here: https://t.co/HbXhP6atcn

[Stamus Networks @StamusN]

Join Alexander Nedelchev at Security Bsides Sofia on on 3/19 for a presentation on "Unencrypted Malware: the (In)visible Threat," where he will explore the latest strategies for protecting your organization’s network. Register now https://t.co/4iYPowDdC1 #BSidesSofia #malware

[Alexander Nedelchev @sys7em1]

check out my new blog: https://t.co/sPTLeOoJ0d

[markuskont @markuskont]

Working on part 2 already. I found it really challenging to condense this topic into a 45 minute talk. I might be writing a book now.

[Stamus Networks @StamusN]

At #Suricon2022 @markuskont introduced #JupyterLab to security practitioners who work with #Suricata. As many are still unfamiliar with EVE #NSM data, this presentation was an effort to bridge the gap between #threathunting and #dataanalysis. https://t.co/VNF2oAcnQW #JSON

[Stamus Networks @StamusN]

The #BlueTeamDiaries podcast from Stamus Networks is here to give a voice to the heroes that work tirelessly to keep their organizations safe.

Join host Peter Manev (@pevma) and Diana Kelley in our first episode! Listen now at https://t.co/8yUxpSuv7R

#podcast #cybersecurity

[Stamus Networks @StamusN]

Inputting duplicate packets into any system will result in higher costs and false alerts, causing problems for security teams. Our latest blog post describes how we dealt with cleaning up a 4 terabyte #PCAP set with duplicate packets. Check it: https://t.co/nVDhsoJxtm #gophercap

[pevma @pevma]

A wrap up for #SuriCon2022 ! Big thank you to the #suricata community !

[Suricata IDS/IPS @Suricata_IDS]

@pevma @pevma just shared a ruleset by @StamusN for lateral movement detection, have fun with it! https://t.co/dsx10vEPeA

#SuriCon2022 goodies ;)

[markuskont @markuskont]

@Suricata_IDS @Regiteric @StamusN Yes!

[markuskont @markuskont]

Presentation done. Whole thing was a tech demo and nothing failed. Amazed and relieved.

[Suricata IDS/IPS @Suricata_IDS]

The start of yet another great talk for today by Markus Kont! Markus is showing us Jupyter playbooks for #Suricata!

#SuriCon2022

[InfoSec Jupyterthon @jupyterthon]

🚨 The #Infosec #Jupyterthon is back! 🚨

📢 A FREE virtual event to share & learn about
@ProjectJupyter #notebooks applied to InfoSec ❤️

✅ Mark your 🗓️ Dec 2nd & 3rd 2022🙏
✅ Register https://t.co/Zyedqoi63n
✅ Bookmark https://t.co/KtXNJjXmyh

🚀 Powered by @OTR_Community

[markuskont @markuskont]

I find this really cool

[markuskont @markuskont]

A few months ago I attended #LockedShields2022 in Estonian blue team. I built a special correlator in #golang to enrich #Arkime and #suricata sessions with #sysmon event id 1 and 3. Since then I reworked the prototype and finally wrote initial README - https://t.co/03PYXQbbwG

[markuskont @markuskont]

@MikeyAsAService Absolutely! I would love to hear more about what you've done with it. And to collect ideas how to improve the project.

[markuskont @markuskont]

Seeing this made my day - https://t.co/h7Vxo8x6Uc

This sort of stuff is exactly why I built Go Sigma Rule Engine. Publish a prototype of something novel, so people with practical problems could build cool things on top of it.

[NATO CCDCOE @ccdcoe]

A report on Real-time #Cyberattack Detection describes a situation awareness framework ⚙️, #Frankenstack, that provides cybersecurity specialists 👨‍💻 with real-time feedback and verifies the applicability of monitoring tools during #cybersecurity exercises.
https://t.co/7M0BP0wYAQ

[Stamus Networks @StamusN]

It’s official. After many years of active contributions to @Suricata_IDS and the @OISFoundation, we at Stamus Networks are proud to formally sign on as an OISF Consortium Member. https://t.co/baVmuV09E5 #NetworkSecurity #SuricataIDS #OpenSourceSecurity