Security

TTY Logs and the Data it Captures, (Sun, Oct 4th)

An experiment parses terminal-session logs generated by attackers or bots after they successfully log in to a DShield sensor. The script sends the logs daily to the DShield SIEM for correlation with other data.

Image: SANS Internet Storm Center

Coverage 1 publisher

  1. SANS Internet Storm Center

    TTY Logs and the Data it Captures, (Sun, Oct 4th)

Articles stay on their publishers’ sites; each link opens the original.