top of page


WELCOME
Welcome visitors to your site with a short, engaging introduction. Double click to edit and add your own text.
Search


Virtualization Monitoring & Incident Response - VMware
Virtualization platforms have become standard in many organizations and have been more commonly been exploited by threat actors.
brencronin
Jan 7, 202512 min read
Â
Â
Â


Network Detection Response (NDR) - Web Traffic Analysis Part 2
Overview of major security tools related to web traffic protection Protection from Inside to Outside Traditional web protection largely...
brencronin
Oct 23, 202415 min read
Â
Â
Â


Zeek & Corelight - Encrypted Traffic Collection
Zeek, and Corelight sensors specifically, divide the process of handling and analyzing data into four distinct areas, as illustrated in...
brencronin
Oct 22, 202412 min read
Â
Â
Â


Network Detection Response (NDR) - HTTP Analysis Part 1
HTTP is one of the most widely recognized protocols, essential for daily internet communication. Its ubiquity ensures it’s readily...
brencronin
Oct 9, 20246 min read
Â
Â
Â


Zeek & Corelight - Core Packages
In simple terms, Zeek sensors capture traffic, generate protocol-specific log files for the captured session traffic, and can export...
brencronin
Jun 12, 20249 min read
Â
Â
Â


Network Detection & Response (NDR) - Zeek 'Alerting' - Odd Remote Access Behavior and Tools
When collecting Zeek data, you have a rich source of information for analysis. However, when monitoring systems, it's crucial to...
brencronin
Dec 26, 20237 min read
Â
Â
Â


Network Security Monitoring (NSM) - Hacker Command & Control (C&C) (C2)
Ralph Mudge developer of Cobalt Strike Red Team hacking software outlines from the hackers perspective 4 key processes that need to...
brencronin
Sep 24, 20233 min read
Â
Â
Â
bottom of page