2026-10-23 18:04 UTC
What detection format would you like to have if you got detections online? (e.g. for a recent attack/vuln wave like php2shell)
#dfir #infosec #cybersecurity #askfedi #incidentresponse #osint #threatintel #threatintelligence #opensourceintelligence
Replies (2)
-
@Ichinin@infosec.exchange 2026-10-23 18:07
@13reak@infosec.exchange Snort (for decrypted TLS) or raw logs if possible from devce.
-
@g0rb@infosec.exchange 2026-10-23 18:06
@13reak@infosec.exchange pyramid of pain, gimme JA4+