Hérisson Ford

P1 for #IronDames !!! 🥇🏎🏁

And check your settings here, even with insecure install fleet server hosts need to use https

And here is an example of Alert in Elasticsearch : #kafka #flink #CEP #elasticsearch #elastic #apachekafka #apacheflink #bluekeep #blueteam #SIEM

As Bluekeep vulnerability start to be spotted in the wild, here is a demo about how to use Apache Flink CEP library along with Markov Chain to detect Bluekeep scan and exploit. GitHub : github.com/NybbleHub/Bluekee… Full doc on GitBook : botes.gitbook.io/botes-datas… #bluekeep #SIEM #SOC

It seems that it's possible to detect #Bluekeep scanner from github.com/zerosum0x0/CVE-20… with eventID 1149 from TerminalServices-RemoteConnectionManager source. Metasploit module and RDPscan tool generate random strings for "User" and "Domain" fields. (Sorry for french screen)

Here is a simple demo on how to enrich #security events at high velocity, scale and in real-time with Apache #Kafka, #Flink and #Elastic Stack Check my Github : github.com/NybbleHub/BOTES-E… Full documentation : botes.gitbook.io/botes-datas… #SOC #SIEM #Analytics #threatintel

Parfait ! Il y a clairement un Want vs Need la !

J'ai eu celle-ci cette semaine 😂

@EdouardArchmbd un petit Lego Racer ??