digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 1 month ago

The Cure for Exceptional Zeek Package Testing (Part 2) | Corelight

1

1

The Cure for Exceptional Zeek Package Testing (Part 2) | Corelight

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 1 month ago

1

Learn how to test Zeek packages without shareable PCAPs by hand-crafting BTest events and using Zeek event traces to reliably reproduce network activity.

You must log in or register to comment.

Chat

tuxec@infosec.pub
link
fedilink
English
arrow-up
1·
1 month ago
This is copy/paste from official blog without even mentioning the source 👎 https://zeek.org/2026/07/the-cure-for-exceptional-zeek-package-testing-part-2/

blueteamsec@infosec.pub

blueteamsec@infosec.pub

You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: !blueteamsec@infosec.pub

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

Visibility: Public

This community can be federated to other instances and be posted/commented in by their users.

14 users / day
54 users / week
291 users / month
710 users / 6 months
6 local subscribers
798 subscribers
2.04K Posts
155 Comments
Modlog

mods:
digicat@infosec.pub