Packets or it didn't happen!
  • When MacOS Catalina Comes to Life: The First Few Minutes of Network Traffic From MacOS 10.15.
  • The Weekly Zeek: DNS Cache Poisoning detection
  • The Weekly Zeek: Events, not packets
  • The Weekly Zeek: Death of &persistent
  • DNS over HTTPS
  • Zeek Correlations: Outbound Connections
  • You’re Doing That Wrongly
  • I Can Read Your Mind
  • Odd ICMP Echo Requests
  • Esoterica: tcpdump DNS Anomalies