fullmetalcache

RITA does not store information on how long an import took or how much data was processed in an import. This ticket is to implement, at a minimum, those metrics...

Currently, long connections will only show the Proxy IP as the destination IP if the connection was made through the proxy server. The Zeek ID field in http.log entries will...

#Current behavior For all beacon modules, we analyze 24 hours worth of data that is comprised of the current hour's data plus the past 23 hours of data. We do...

The DNS analysis currently only filters log entries based on domain. DNS analysis should also filter entries if the Src IP was specified in an ignore list.

Added PoC for spraying Cisco ASA VPN Portals

It appears that when running Get-SQLServerLoginDefaultPw, errors arise in cases where instances that are found that have multiple sets of credentials that need to be tried. For instance. SQLEXPRESS instances...