JA3

Beating alert fatigue with integrated data

Beating alert fatigue with integrated data

| | cisco, dns, http, JA3, partnership, Phantom, Playbooks, ServiceNow, sha1, SIEM, Splunk, Suricata
By Alex Kirk, Corelight Global Principal for Suricata More than 15 years after Gartner declared that “IDS is dead” because it was too noisy to be effectively managed, alert fatigue continues to ...
Bright Ideas Blog
Meet the Corelight CTF tournament winners

Meet the Corelight CTF tournament winners

| | Announcements, Capture the Flag, Cobalt Strike C2, ctf, dns, Elastic, JA3, Open Source Community, pcap, Splunk, ssl.log, Zeek
By John Gamble, Director of Product Marketing, Corelight This summer, Corelight hosted a virtual CTF tournament where hundreds of players raced to solve security challenges using Zeek data in Splunk and Elastic ...
Bright Ideas Blog
NetworkMiner 2.5

NetworkMiner 2.5 Released

| | CIFS, DoH, hashcat, HTTP/2, http2, HTTPS, JA3, John, KERBEROS, MS-BRWS, NBNS, NetBIOS, NetworkMiner, NetworkMinerCLI, OSINT, pcap
I am happy to announce the release of NetworkMiner 2.5 today! This new version includes new features like JA3 and parsers for the HTTP/2 and DoH protocols. We have also added support ...
NETRESEC Network Security Blog