IDSLab: What Does Another IDS Stage Actually Add?
An open-source framework for experimenting with staged intrusion detection systems

Search for a command to run...
Articles tagged with #cyber-security
An open-source framework for experimenting with staged intrusion detection systems

Where I’d start a firewall audit; the device, the rules, the traffic and the process

The content is encrypted, the path is anonymised, the origin is spoofed: but the connection is still visible

From IP headers to DNS queries: how covert channels work and how their traffic patterns give them away

A partition table entry reading "Hidden FAT16." An inode field nobody writes to. A nanosecond timestamp carrying encoded data. Where GNU/Linux hides evidence and how investigators find it.

A file reports 25 bytes. A different command reveals 19MB attached to it. Where NTFS actually hides data, and the exact commands that find it.
