Eddi

[Eddi @PcapReader]

@Enno_Insinuator @tqbf There is always the bery last typo ...

[Eddi @PcapReader]

Thank you @swinog for giving me a chance to present DNS Hammer https://t.co/uTONI8fCOa

Thank you to all participants of #swinog37 for input and discussions on DNS Rate Limiting

[Eddi @PcapReader]

For those who attend #SharkFest'21 Virtual Europe:
The trace files for my talk on "DDos from the Packet Level" can be downloaded from https://t.co/TIerebgwvI
@wiresharkfest @SYNbit @webernetz @PacketDetective @PacketJay @wiresharky
#pcapincluded

[Eddi @PcapReader]

Finished reversing FreakOut, a DDoS bot documented by
@CheckPointSW
https://t.co/NqkdIUALLX
Will present traffic generated by FreakOut (and other DDoS traffic) at @wiresharkfest Europe.
#SharkFest

[Eddi @PcapReader]

@debookee @packetpioneer @PacketDetective @PacketJay @PacketBomb @SYNbit @crnetpackets @hansangbae @bockcay @LauraChappell Since the problem seems to be related to Mac-Upload only: Some weird caching behavior in the storage sub-system? Different flags for Win/Mac clients during protocol negotiation, Tree Connect, Create etc? IoCtl missing or out of place?

[Eddi @PcapReader]

@debookee @packetpioneer @PacketDetective @PacketJay @PacketBomb @SYNbit @crnetpackets @hansangbae @bockcay @LauraChappell A few ideas: Can we recognize the Win Srv version from the SMB handshake? Did you rule out some anti malware? Is a WAN optimizer, load balancer, SDN etc in the path between client and server?

[abuse.ch @abuse_ch]

Tired of hunting for IOCs on social media and fighting with different logins across different platforms? I'm happy to announce the newest project of https://t.co/b7WQ1Ihzpw: ThreatFox! 🥳🎉

ThreatFox IOC sharing platform:
https://t.co/G5K9q94urb

Blog:
https://t.co/WjadUniigo

[Eddi @PcapReader]

For all #DNS practitioners: Just published the second part of the series on auditing DNS Rate Limiting using #DNSHammer (https://t.co/uTONI8fCOa)
Check out @PacketJay's blog https://t.co/opi7Tfacbv. Includes a case study on @GovCERT_CH

[Eddi @PcapReader]

New tool #DNSHammer https://t.co/uTONI8fCOa to audit #DNS rate limit configuration.
Read the introduction at @PacketJay's blog https://t.co/ReZF0Pw7AZ
Check your rate limiting config if you use @ISCdotORG's #BIND or @Microsoft's DNS.

[Eddi @PcapReader]

@netresec @PacketJay How embarrassing. Just fixed it.
Thx for letting us know.

[Eddi @PcapReader]

Just published an analysis of a failed TLS connection on @PacketJays blog https://t.co/uBaJg3E623 Providing #Wireshark traces for a click-along. For all who miss #Sharkfest @wiresharkfest

[Eddi @PcapReader]

Preparing my talk "#SMB in the Star Wars Universe" for #Sharkfest Europe. Discussing SMB security, performance and tuning. Using #Wireshark to raid an imperial supply depot and race the Millenium Falcon vs a Star Destroyer. #SF18EU

[Eddi @PcapReader]

Interesting read for #TCP practitioners: #windowsserver2019 uses CUBIC backoff algorithm
https://t.co/mi57PU1Jc6