Incremental Machine Learning by Example: Detecting Suspicious Activity with Zeek Data Streams, River, and JA3 Hashes – NCC Group Research - discu.eu

Linking pages

Encryption Does Not Equal Invisibility – Detecting Anomalous TLS Certificates with the Half-Space-Trees Algorithm – NCC Group Research https://research.nccgroup.com/2021/12/02/encryption-does-not-equal-invisibility-detecting-anomalous-tls-certificates-with-the-half-space-trees-algorithm/ 7 comments

Linked pages

Strong law of small numbers - Wikipedia https://en.wikipedia.org/wiki/Strong_law_of_small_numbers 6 comments
Identifying Cobalt Strike team servers in the wild – Fox-IT International blog https://blog.fox-it.com/2019/02/26/identifying-cobalt-strike-team-servers-in-the-wild/ 0 comments
GitHub - salesforce/ja3: JA3 is a standard for creating SSL client fingerprints in an easy to produce and shareable way. https://github.com/salesforce/ja3 0 comments
The Zeek Network Security Monitor https://www.zeek.org/ 0 comments

Related searches:

Search whole site: site:research.nccgroup.com

Search title: Incremental Machine Learning by Example: Detecting Suspicious Activity with Zeek Data Streams, River, and JA3 Hashes – NCC Group Research

See how to search.

Submit link to: