CIRCLE WITH A DOT

Your browser does not seem to support JavaScript. As a result, your viewing experience will be diminished, and you have been placed in read-only mode.

Please download a browser that supports JavaScript, or enable it if it's disabled (i.e. NoScript).

zeek@infosec.exchange

@zeek@infosec.exchange

Topics

Z

ICYMI, we've been working on some new community content...
Watching Ignoring Scheduled Pinned Locked Moved Uncategorized
1

0 Votes

1 Posts

0 Views

Z

RE: https://infosec.exchange/@zeek/116534356390322075ICYMI, we've been working on some new community content... Check out the newsletter for a DNS NOTIFY investigation, dual-format logging, custom Spicy detections, and more!
Z

If you're running Zeek in AWS, be sure to check out Arne's post on Traffic Mirroring, the UDP packet source plugin for VXLAN, and Kafka log forwarding.
Watching Ignoring Scheduled Pinned Locked Moved Uncategorized
1

1

0 Votes

1 Posts

0 Views

Z

If you're running Zeek in AWS, be sure to check out Arne's post on Traffic Mirroring, the UDP packet source plugin for VXLAN, and Kafka log forwarding.https://zeek.org/2026/02/using-zeek-with-aws-traffic-mirroring-and-kafka/
Z

ICYMI: Seth's walkthrough on JA4 fingerprinting in Zeek covers JA4, JA4S, JA4H, JA4T, JA4SSH, and JA4D with installation and use cases.
Watching Ignoring Scheduled Pinned Locked Moved Uncategorized zeek networksecurity opensource
2

1

0 Votes

2 Posts

6 Views

N

@zeek While JA4 is a valuable addition, its effectiveness can be limited by widespread TLS encryption of the initial Client Hello.