DSHIELD DATA |
| 2013-10-16 | Adrien de Beaupre | Access denied and blockliss |
DSHIELD |
| 2025-03-12/a> | Guy Bruneau | File Hashes Analysis with Power BI from Data Stored in DShield SIEM |
| 2025-03-06/a> | Guy Bruneau | DShield Traffic Analysis using ELK |
| 2025-02-20/a> | Guy Bruneau | Using ES|QL in Kibana to Queries DShield Honeypot Logs |
| 2025-02-13/a> | Guy Bruneau | DShield SIEM Docker Updates |
| 2025-01-16/a> | Jesse La Grew | Extracting Practical Observations from Impractical Datasets |
| 2024-12-26/a> | Jesse La Grew | Capturing Honeypot Data Beyond the Logs |
| 2024-12-09/a> | Jesse La Grew | CURLing for Crypto on Honeypots |
| 2024-11-26/a> | Guy Bruneau | SANS ISC Internship Setup: AWS DShield Sensor + DShield SIEM [Guest Diary] |
| 2024-11-26/a> | Jesse La Grew | [Guest Diary] Using Zeek, Snort, and Grafana to Detect Crypto Mining Malware |
| 2024-11-06/a> | Jesse La Grew | [Guest Diary] Insights from August Web Traffic Surge |
| 2024-10-31/a> | Guy Bruneau | October 2024 Activity with Username chenzilong |
| 2024-10-03/a> | Guy Bruneau | Kickstart Your DShield Honeypot [Guest Diary] |
| 2024-09-13/a> | Jesse La Grew | Finding Honeypot Data Clusters Using DBSCAN: Part 2 |
| 2024-09-11/a> | Guy Bruneau | Hygiene, Hygiene, Hygiene! [Guest Diary] |
| 2024-09-06/a> | Jesse La Grew | Enrichment Data: Keeping it Fresh |
| 2024-08-27/a> | Guy Bruneau | Vega-Lite with Kibana to Parse and Display IP Activity over Time |
| 2024-08-16/a> | Jesse La Grew | [Guest Diary] 7 minutes and 4 steps to a quick win: A write-up on custom tools |
| 2024-07-10/a> | Jesse La Grew | Finding Honeypot Data Clusters Using DBSCAN: Part 1 |
| 2024-05-28/a> | Guy Bruneau | Is that It? Finding the Unknown: Correlations Between Honeypot Logs & PCAPs [Guest Diary] |
| 2024-04-25/a> | Jesse La Grew | Does it matter if iptables isn't running on my honeypot? |
| 2024-03-07/a> | Jesse La Grew | [Guest Diary] AWS Deployment Risks - Configuration and Credential File Targeting |
| 2024-03-03/a> | Guy Bruneau | Capturing DShield Packets with a LAN Tap [Guest Diary] |
| 2024-02-25/a> | Guy Bruneau | Utilizing the VirusTotal API to Query Files Uploaded to DShield Honeypot [Guest Diary] |
| 2024-02-18/a> | Guy Bruneau | Mirai-Mirai On The Wall... [Guest Diary] |
| 2024-02-15/a> | Jesse La Grew | [Guest Diary] Learning by doing: Iterative adventures in troubleshooting |
| 2024-02-03/a> | Guy Bruneau | DShield Sensor Log Collection with Elasticsearch |
| 2024-01-17/a> | Jesse La Grew | Number Usage in Passwords |
| 2023-12-27/a> | Guy Bruneau | Unveiling the Mirai: Insights into Recent DShield Honeypot Activity [Guest Diary] |
| 2023-12-13/a> | Guy Bruneau | T-shooting Terraform for DShield Honeypot in Azure [Guest Diary] |
| 2023-12-10/a> | Guy Bruneau | Honeypots: From the Skeptical Beginner to the Tactical Enthusiast |
| 2023-11-27/a> | Guy Bruneau | Decoding the Patterns: Analyzing DShield Honeypot Activity [Guest Diary] |
| 2023-11-20/a> | Jesse La Grew | Overflowing Web Honeypot Logs |
| 2023-10-15/a> | Guy Bruneau | Domain Name Used as Password Captured by DShield Sensor |
| 2023-09-14/a> | Jesse La Grew | DShield and qemu Sitting in a Tree: L-O-G-G-I-N-G |
| 2023-09-09/a> | Guy Bruneau | ?Anyone get the ASN of the Truck that Hit Me?!?: Creating a PowerShell Function to Make 3rd Party API Calls for Extending Honeypot Information [Guest Diary] |
| 2023-09-02/a> | Jesse La Grew | What is the origin of passwords submitted to honeypots? |
| 2023-08-31/a> | Guy Bruneau | Potential Weaponizing of Honeypot Logs [Guest Diary] |
| 2023-08-12/a> | Guy Bruneau | DShield Sensor Monitoring with a Docker ELK Stack [Guest Diary] |
| 2023-07-23/a> | Guy Bruneau | Install & Configure Filebeat on Raspberry Pi ARM64 to Parse DShield Sensor Logs |
| 2023-07-13/a> | Jesse La Grew | DShield Honeypot Maintenance and Data Retention |
| 2023-07-06/a> | Jesse La Grew | IDS Comparisons with DShield Honeypot Data |
| 2023-06-30/a> | Yee Ching Tok | DShield pfSense Client Update |
| 2023-06-11/a> | Guy Bruneau | DShield Honeypot Activity for May 2023 |
| 2023-05-14/a> | Guy Bruneau | DShield Sensor Update |
| 2023-04-05/a> | Jesse La Grew | Exploration of DShield Cowrie Data with jq |
| 2023-03-07/a> | Johannes Ullrich | Hackers Love This VSCode Extension: What You Can Do to Stay Safe |
| 2023-01-31/a> | Jesse La Grew | DShield Honeypot Setup with pfSense |
| 2023-01-21/a> | Guy Bruneau | DShield Sensor JSON Log to Elasticsearch |
| 2023-01-08/a> | Guy Bruneau | DShield Sensor JSON Log Analysis |
| 2022-12-29/a> | Jesse La Grew | Opening the Door for a Knock: Creating a Custom DShield Listener |
| 2022-12-21/a> | Guy Bruneau | DShield Sensor Setup in Azure |
| 2020-07-01/a> | Jim Clausing | Setting up the Dshield honeypot and tcp-honeypot.py |
| 2020-06-20/a> | Tom Webb | Pi Zero HoneyPot |
| 2016-04-27/a> | Tom Webb | Kippos Cousin Cowrie |
| 2016-03-21/a> | Xavier Mertens | IP Addresses Triage |
| 2016-03-15/a> | Xavier Mertens | Dockerized DShield SSH Honeypot |
| 2015-09-03/a> | Xavier Mertens | Querying the DShield API from RTIR |
| 2015-06-02/a> | Alex Stanford | Guest Diary: Xavier Mertens - Playing with IP Reputation with Dshield & OSSEC |
| 2015-06-01/a> | Tom Webb | Submit Dshield ASA Logs |
| 2015-02-26/a> | Johannes Ullrich | New Feature: Subnet Report |
| 2013-10-16/a> | Adrien de Beaupre | Access denied and blockliss |
| 2013-05-20/a> | Johannes Ullrich | Ubuntu Package available to submit firewall logs to DShield |
| 2012-06-29/a> | Bojan Zdrnja | DShield for Splunk |
| 2011-04-14/a> | Johannes Ullrich | dshield.org now DNSSEC signed via .org |
| 2010-11-21/a> | Marcus Sachs | A Day In The Life Of A DShield Sensor |
| 2010-01-18/a> | Stephen Hall | Uplift in SSH brute forcing attacks |
| 2009-10-26/a> | Johannes Ullrich | Web honeypot Update |
| 2009-06-11/a> | Jason Lam | Dshield Web Honeypot going beta |
| 2009-03-26/a> | Mark Hofman | Webhoneypot fun |
| 2009-02-17/a> | Jason Lam | DShield Web Honeypot - Alpha Preview Release |
| 2008-05-28/a> | Johannes Ullrich | Reminder: Proper use of DShield data |
| 2008-04-27/a> | Marcus Sachs | What's With Port 20329? |
DATA |
| 2025-03-20/a> | Johannes Ullrich | Some new Data Feeds, and a little "incident". |
| 2025-02-17/a> | Russ McRee | ModelScan - Protection Against Model Serialization Attacks |
| 2024-08-23/a> | Jesse La Grew | Pandas Errors: What encoding are my logs in? |
| 2024-08-16/a> | Jesse La Grew | [Guest Diary] 7 minutes and 4 steps to a quick win: A write-up on custom tools |
| 2023-08-25/a> | Xavier Mertens | Python Malware Using Postgresql for C2 Communications |
| 2023-07-23/a> | Guy Bruneau | Install & Configure Filebeat on Raspberry Pi ARM64 to Parse DShield Sensor Logs |
| 2023-05-24/a> | Jesse La Grew | More Data Enrichment for Cowrie Logs |
| 2023-05-09/a> | Russ McRee | Exploratory Data Analysis with CISSM Cyber Attacks Database - Part 2 |
| 2022-06-10/a> | Russ McRee | EPSScall: An Exploit Prediction Scoring System App |
| 2021-12-28/a> | Russ McRee | LotL Classifier tests for shells, exfil, and miners |
| 2021-10-20/a> | Xavier Mertens | Thanks to COVID-19, New Types of Documents are Lost in The Wild |
| 2021-08-29/a> | Guy Bruneau | Filter JSON Data by Value with Linux jq |
| 2021-07-04/a> | Didier Stevens | DIY CD/DVD Destruction - Follow Up |
| 2021-06-27/a> | Didier Stevens | DIY CD/DVD Destruction |
| 2021-02-01/a> | Rob VandenBrink | Taking a Shot at Reverse Shell Attacks, CNC Phone Home and Data Exfil from Servers |
| 2021-01-29/a> | Xavier Mertens | Sensitive Data Shared with Cloud Services |
| 2020-07-04/a> | Russ McRee | Happy FouRth of July from the Internet Storm Center |
| 2020-03-14/a> | Didier Stevens | Phishing PDF With Incremental Updates. |
| 2020-02-28/a> | Xavier Mertens | Show me Your Clipboard Data! |
| 2019-05-19/a> | Guy Bruneau | Is Metadata Only Approach, Good Enough for Network Traffic Analysis? |
| 2018-07-04/a> | Didier Stevens | XPS Metadata |
| 2018-06-16/a> | Russ McRee | Anomaly Detection & Threat Hunting with Anomalize |
| 2017-12-16/a> | Xavier Mertens | Microsoft Office VBA Macro Obfuscation via Metadata |
| 2017-08-07/a> | Xavier Mertens | Increase of phpMyAdmin scans |
| 2017-05-28/a> | Guy Bruneau | CyberChef a Must Have Tool in your Tool bag! |
| 2017-02-01/a> | Xavier Mertens | Quick Analysis of Data Left Available by Attackers |
| 2017-01-06/a> | John Bambenek | Great Misadventures of Security Vendors: Absurd Sandboxing Edition |
| 2016-09-22/a> | Rick Wanner | YAHDD! (Yet another HUGE data Breach!) |
| 2016-08-31/a> | Deborah Hale | Dropbox Breach |
| 2016-08-19/a> | Xavier Mertens | Data Classification For the Masses |
| 2016-07-03/a> | Guy Bruneau | Is Data Privacy part of your Company's Culture? |
| 2016-06-20/a> | Xavier Mertens | Using Your Password Manager to Monitor Data Leaks |
| 2016-02-22/a> | Xavier Mertens | Reducing False Positives with Open Data Sources |
| 2016-01-30/a> | Xavier Mertens | All CVE Details at Your Fingertips |
| 2015-09-01/a> | Daniel Wesemann | Encryption of "data at rest" in servers |
| 2015-07-31/a> | Russ McRee | Tech tip: Invoke a system command in R |
| 2015-07-31/a> | Russ McRee | Tech tip follow-up: Using the data Invoked with R's system command |
| 2015-05-23/a> | Guy Bruneau | Business Value in "Big Data" |
| 2015-03-21/a> | Russell Eubanks | Have you seen my personal information? It has been lost. Again. |
| 2014-12-01/a> | Guy Bruneau | Do you have a Data Breach Response Plan? |
| 2014-02-04/a> | Johannes Ullrich | Odd ICMP Echo Request Payload |
| 2013-10-16/a> | Adrien de Beaupre | Access denied and blockliss |
| 2013-07-06/a> | Guy Bruneau | Is Metadata the Magic in Modern Network Security? |
| 2012-12-03/a> | John Bambenek | John McAfee Exposes His Location in Photo About His Being on Run |
| 2012-11-30/a> | Daniel Wesemann | Snipping Leaks |
| 2012-11-22/a> | Kevin Liston | Greek National Arrested on Suspicion of Theft of 9M Records on Fellow Greeks |
| 2012-01-16/a> | Kevin Shortt | Zappos Breached |
| 2011-04-20/a> | Daniel Wesemann | Data Breach Investigations Report published by Verizon |
| 2011-01-12/a> | Richard Porter | How Many Loyalty Cards do you Carry? |
| 2011-01-12/a> | Richard Porter | Yet Another Data Broker? AOL Lifestream. |
| 2010-09-26/a> | Daniel Wesemann | Egosurfing, the corporate way |
| 2010-07-29/a> | Rob VandenBrink | The 2010 Verizon Data Breach Report is Out |
| 2010-04-27/a> | Rob VandenBrink | Layer 2 Security - L2TPv3 for Disaster Recovery Sites |
| 2010-04-22/a> | John Bambenek | Data Redaction: You're Doing it Wrong |
| 2010-02-10/a> | Marcus Sachs | Datacenters and Directory Traversals |
| 2009-10-19/a> | Daniel Wesemann | Backed up, lately ? |
| 2009-09-07/a> | Lorna Hutcheson | Encrypting Data |
| 2009-07-28/a> | Adrien de Beaupre | YYAMCCBA |
| 2009-04-24/a> | John Bambenek | Data Leak Prevention: Proactive Security Requirements of Breach Notification Laws |
| 2009-04-15/a> | Marcus Sachs | 2009 Data Breach Investigation Report |
| 2009-03-02/a> | Swa Frantzen | Obama's leaked chopper blueprints: anything we can learn? |
| 2009-01-30/a> | Mark Hofman | We all "Love" USB drives |
| 2008-12-17/a> | donald smith | Team CYMRU's Malware Hash Registry |
| 2008-08-25/a> | John Bambenek | Thoughts on the Best Western Compromise |
