Filed under
network-security
Follow a thread through projects and writing.
-
Finding suspicious devices in firewall logs
Six Python detection rules that turn a day of normal traffic into a baseline, then explain which devices deserve a closer look.