For an experiment, I created a script [1] that parses and send the TTY logs collected from actors or bots activity that run various commands after they successfully login the DShield sensor. Those TTY logs are sent daily at the end of each day to the DShield SIEM [2] to be correlated with all the data.
TTY Logs and the Data it Captures, (Sun, Oct 4th)
Kurzinfo
Metadaten
- Original (extern): Link oeffnen
- Veroeffentlicht: 2026-10-05 00:15 UTC
- Importiert: 2026-10-12 01:37 UTC
- Quelle-ID:
sans_isc - uid_hash:
cf482273c06cd017f10563671fd752545ca1799c7854cbc203a8cb6629614d60
Inhalt
| No data |
Quellen-Details
| Bezeichnung | Name | Kategorie | Tags | Zielgruppe | Sprache | Feed-URL |
|---|---|---|---|---|---|---|
| SANS Internet Storm Center | security_news | - | de | https://isc.sans.edu/rssfeed.xml |