EveBox can now process PCAP files directly and take care of processing with #Suricata for you.
Remote
Jason Ish
@ish@infosec.exchange
mastodon 4.8.0-alpha.3+glitchDeveloper in the open source infosec land and at @suricata@infosec.exchange. A little socially awkward. I create EveBox, an event manager for Suricata. Compulsive Rust and C developer despite not even really liking to code. OISF board member.
128 Followers
104 Following
9 Posts
Joined November 09, 2022
Twitter:
GitHub:
Work:
About:
EveBox:
Suricata Rule Search:
We've recently merged 2 new rulesets into the Suricata Intel Index! The IPFire DBL (https://www.ipfire.org/dbl) and the Antiphishing ruleset (https://github.com/julioliraup/Antiphishing) by julioliraup. Thanks!!
Replying to
@joeress@mastodon.social If it’s useful the ethical issues tend to fade. Not agreeing with that, but seems to be true.
The Hunters Ledger ruleset was recently added to the #Suricata ruleset index; check it out here: https://the-hunters-ledger.com/
Thank you Joseph Harrison
Replying to
@da_667@infosec.exchange @suricata@infosec.exchange We have very few websocket tickets open. More tickets dealing with specifics would be quite helpful and welcome!
Easier Suricata on Windows? Does anyone really care? #suricata
@joeress@mastodon.social I used AI to port a Linux app to Windows. I learned the Windows APIs faster, and with good examples due to the AI and was able to ask questions. All very much faster than hunting through documentation I’m not that familiar with. But I have a 30 year foundation here. It’s also incredibly good for asking questions about code and to use as a learning tool. I feel this aspect goes under appreciated.
Replying to
@da_667@infosec.exchange Send some out west. My lungs are surprisingly clear for this time of year.
Replying to
@joeress@mastodon.social Everyone focuses on using LLMs for writing code. They are even better at code reviews. I understand the resistance to using them to write code, but developers who are not using them to review code are missing out, or will soon be. Especially on more complex projects that are harder to reason about.