The Infrastructure, II
After DEF CON last year, we posted this blog about our infrastructure, which was spread between a...
The Infrastructure, II
OpenSOC @ DC27 - Black Badge Edition!
We never wrote up a blog post for DC27, but this excerpt from the closing ceremonies covers most of...
Automating Graylog Pipelines
Part of our job at Recon relies on fine tuning our threat signatures that make up the bulk of our...
Analysis of Exploitation: CVE-2019-3396
The Recon incident response team recently worked an intrusion case involving a Confluence web...
Locking down ZeroTier peer-to-peer networks
In a previous post, we shared our affinity for ZeroTier:
Join us for Network Defense Range Training at Black Hat 2019!
We're very excited to announce that we'll be bringing our NDR training to Black Hat this year! Come...
A Tribute to devnull
Hello, dear friends. The past few days have been extremely hard on the OpenSOC Team. We hope this...
The Infrastructure
When I joined the OpenSOC team at the beginning of this year, everything resided on 3 Intel Skull...
Blue Team Village @ DEF CON 26
Huge thanks to @BlueTeamVillage and all of the awesome projects that make up OpenSOC Blue CTF!
Geolocation via Pipelines in Graylog
To the delight of most Graylog users, geolocation is automatically built into the platform via the...