Packet mystery solver. Protocol analyst. SharkFest Presenter. Road warrior. #TFD24 #PacketsAreEvidence #ProfilesArePower #womenintech #womeninpackets
youtube.com/c/BettyDuBois
Joined January 2013
- Tweets4K
- Following339
- Followers2.4K
- Likes9.8K
Betty DuBois moved 2 @packetdetective.bsky.social retweeted
It’s Always #DNS – Poster weberblog.net/its-always-dns…
Betty DuBois moved 2 @packetdetective.bsky.social retweeted
Headbutts during @PacketDetective #wireshark class. Such a great class this week! We are both learning a lot and he helps with labs.
Betty DuBois moved 2 @packetdetective.bsky.social retweeted
The JA4+ plugin for Wireshark has been updated.
We've removed JA4 (TLS client fingerprint) from the plugin because that is now native to Wireshark in tls.handshake.ja4. We've also fixed JA4X (X509 fingerprint) which was producing incorrect values😬
github.com/FoxIO-LLC/ja4/tre…
Betty DuBois moved 2 @packetdetective.bsky.social retweeted
Was wondering why "no protocol udp" is in just about every example configuration for Cisco's device tracking feature.
Oh, it's not even supported.
Betty DuBois moved 2 @packetdetective.bsky.social retweeted
Keep an eye out for malicious #CrowdStrike related domains or calls from "CrowdStrike Support"
crowdstrike-helpdesk[.]com is not going to be legit and they're not going to ask you to install Team Viewer...
A lot of new domains are popping up:
urlscan.io/search/#crowdstri…*
Betty DuBois moved 2 @packetdetective.bsky.social retweeted
Upvote and comment on this link if you want all of JA4+ in Cloudflare:
community.cloudflare.com/t/j…
I've heard from multiple companies that they've resolved security incidents by blocking threat actors utilizing JA4 TLS Fingerprints on Cloudflare. But as attacks get more sophisticated, JA4+ fingerprints at multiple layers of the connection will be needed.
Betty DuBois moved 2 @packetdetective.bsky.social retweeted
It looks like @MackenzieWiFi has grown! #WiCo
Betty DuBois moved 2 @packetdetective.bsky.social retweeted
#Wireshark 4.2.6 has been released. Enjoy.
wireshark.org/docs/relnotes/…
Betty DuBois moved 2 @packetdetective.bsky.social retweeted
Unlock the full potential of your #Wireshark skills by becoming a member of our YouTube channel!
youtube.com/@WireSharkFest
Get the latest vids, featuring tutorials, insights & cutting-edge techniques.
Network Shark members get access to videos from the most recent SharkFests!
Betty DuBois moved 2 @packetdetective.bsky.social retweeted
❗ We remind all Suricata-6 fans that Suricata 6.0.20 was the last scheduled release in the 6-series!
All users of #Suricata 6 or earlier are strongly recommended to update to Suricata 7 as soon as possible.
Stay safer, stay up-to-date! More info: suricata.io/our-story/eol-po…❗
Betty DuBois moved 2 @packetdetective.bsky.social retweeted
I recently updated the #UltimatePCAP and added some mail protocols: IMAP, POP3, SMTP, all in plain text, STARTTLS and implicit TLS. Go ahead and analyse it by yourself. ;) #Wireshark
This is it: The Ultimate PCAP. A single downloadable #pcap with more than 50 network protocols! Use it as your single #Wireshark sample file. weberblog.net/the-ultimate-p…
Betty DuBois moved 2 @packetdetective.bsky.social retweeted
New revision 09 of Multipath Extension for QUIC published. datatracker.ietf.org/doc/dra…
Betty DuBois moved 2 @packetdetective.bsky.social retweeted
Uh, I was not aware that there is a terminal version of #Wireshark called termshark. Nice. Much easier to troubleshoot small stuff compared to tcpdump. You can even use your mouse!
Betty DuBois moved 2 @packetdetective.bsky.social retweeted
Now on our YouTube from #sf24us: a discussion talking about the future of #Wireshark!
Join panel host @rknall as he chats with @packetpioneer, Ron Groulx of @LiveActionIT, Stephen Donnelly of @endace, Nigel Douglas of @sysdig, John Modlin of @Profitap
youtu.be/cVc84Bmz1EA
Betty DuBois moved 2 @packetdetective.bsky.social retweeted
The packet doctors are in!
@SYNbit, @Bagurdes, and Josh Clark are analyzing trace files they’re seeing for the first time live at #sf24us
#Wireshark
Betty DuBois moved 2 @packetdetective.bsky.social retweeted
Updates slides for my SharkFest'24 US talk about Real-world post-quantum TLS in Wireshark are up! With all current details and packet captures about TLS decryption and post-quantum TLS #sf24us
lekensteyn.nl/files/wireshar…
Betty DuBois moved 2 @packetdetective.bsky.social retweeted
Ross @Bagurdes just taught a class about his Cybershark 3000 computer that he built to analyze packets!
#Wireshark #PacketAnalysis #sf24us
