de-charleta

De Charleta: “Introducing the RITA VM: Hunting for bad guys on your network for free with math” (John Strand, Derek Banks, Joff Thyer, and Brian Furhman)

/en , /por

John Strand y su equipo nos muestran una forma distinta de detectar si una red está comprometida huyendo de la fórmula clasica y del uso de producto comerciales. Para ello ulitilizan RITA, un framework que utiliza el análisis estadístico para analizar el tráfico DNS y las conexiones a paneles de C&C para descubrir adversarios que se encuentren dentro de la red.

John, Derek, Joff y Brian son consultores de seguridad en Black Hills. Además John Strand es el dueño de la compañía.
Joff Thyer es también conocido por escribir en Security Weekly.

Derbycon 2015

Inglés

RITA @ github.com
DerbyCon
Security Weekly
Black Hills

Ernesto Corral
Últimas entradas de Ernesto Corral (ver todo)
167 comentarios
  1. download mp3 free
    download mp3 free Dice:

    After going over a handful of the blog articles on your web site, I really appreciate your way of blogging. I saved as a favorite it to my bookmark site list and will be checking back soon. Please visit my web site as well and tell me what you think.

  3. bucket hat
    bucket hat Dice:

    I’m noo longer certain the place you are getting yourr information, however good topic.
    I must spend a while learning much more or working out more.
    Thank you for wonderful information I used to bee searching
    for this information for my mission.

  5. https://5starsdiscovery.com
    https://5starsdiscovery.com Dice:

    Appreciating the time and effort youu put into yojr site and in depth
    information you present. It’s good to come across a blog every once in a while
    that isn’t the same old rehashed information. Fanrastic read!
    I’ve saqved your site and I’m adding your RSS feeds to my Google account.

  6. donald trump mug shot memes
    donald trump mug shot memes Dice:

    Hey, I think your sitte might be having browser compatibility issues.
    When I look at your blog iin Firefox, iit looks fie but whjen opening in Internet Explorer, it
    has some overlapping. I just wantedd to gice you a quick heads up!
    Other then that, superb blog!

  12. youtube to mp3 320kbps
    youtube to mp3 320kbps Dice:

    Having read this I believed it was extremely enlightening. I appreciate you spending some time and effort to put this article together. I once again find myself personally spending a lot of time both reading and commenting. But so what, it was still worth it.

  14. tubidy mp3
    tubidy mp3 Dice:

    Greetings, There’s no doubt that your website may be having web browser compatibility problems. Whenever I take a look at your website in Safari, it looks fine however, when opening in Internet Explorer, it has some overlapping issues. I simply wanted to provide you with a quick heads up! Apart from that, excellent site!

  15. gayguide.nyc
    gayguide.nyc Dice:

    I am curious to find out what blog system you
    happen to be using? I’m experiencing some small security issues with my latest blog and I’d like to find something more secure.
    Do you have any solutions?

  21. Trump2024
    Trump2024 Dice:

    After ooking into a few of the articles on your blog, I seriously
    like your technique of blogging. I added itt to my bookmark site list and willl be checking back in the nerar future.
    Take a look at my web site too and let me know howw you feel.

  22. Scarf Set
    Scarf Set Dice:

    Wow that was strange. I just wrote an extremely long comment but after I clicked suvmit my comment didn’t appear.
    Grrrr… well I’m not writing alll that over again. Regardless, just
    wanted to say excellent blog!

  29. barron trump education
    barron trump education Dice:

    I am not positive the place you aare getting your info, however good topic.
    I must spend a while studying more or understanding more.
    Thank you for wonderful information I was on tthe lookout for this info for my mission.

  30. trump mug shot coffee cup
    trump mug shot coffee cup Dice:

    Please let me know if you’re looking for a writer for yoir blog.
    You have some really good articles and I feel I would be a gooid asset.
    If you ever want to take some of the load off, I’d absolutely love to write some content for your blog
    in exchange foor a link back to mine. Please blast me an email if
    interested. Regards!

  31. maga hat
    maga hat Dice:

    You actually make it appear really easy along with your presentation but I find this topic to be really one thing
    that I feel I’d by no means understand. It kind of feels too complicated and very broad
    for me. I’m having a look forward onn your subsequent publish, I’ll attempt to get
    the hold oof it!

  33. trump mug
    trump mug Dice:

    If you arre going for most excellent contents like I do,
    simply pay a quidk visit this web page everyday since it offers feature contents, thanks

  34. trump hat
    trump hat Dice:

    Do you mind if I quote a couple of your articles as long as I provide credit and sources back to your weblog?
    My blog site is in the exact same area of interest
    as yours and my users would definitely benefit from a lot of
    the information you provide here. Please let me know
    if this ook with you. Thanks a lot!

  36. tubidy
    tubidy Dice:

    Hello! I could have sworn I’ve been to this blog before but after looking at some of the articles I realized it’s new to me. Anyways, I’m definitely happy I came across it and I’ll be book-marking it and checking back often.

  39. bucket hat
    bucket hat Dice:

    Hello There. I found your blog usijg msn. This is a really
    welol written article. I’ll be sure to bookmark it andd coe back to read more
    of your useful information. Thanks for the post. I’ll definitely return.

  41. maga
    maga Dice:

    Wow, amazing blog layout! How long havfe youu been blogging for?
    you make blogging look easy. The overall loo of your site is fantastic, let alone the content!

  44. Trumps puppets
    Trumps puppets Dice:

    It’s a pity you don’t have a donate button! I’d definitely donate
    to this fantastic blog! I guess for now i’ll settle foor book-marking and
    adding your RSS feed to my Google account. I look
    forward to brand new updates and will talk about this blog with my Facebook group.
    Talk soon!

  46. trump silver coin 2020
    trump silver coin 2020 Dice:

    Woah! I’m really enjoying the template/theme of this site.
    It’s simple, yet effective. A lot of times it’s very difficult
    to get that «perfect balance» between usability annd visual appearance.
    I must say you’ve done a great job with this. Also, the blog loads super
    quick for me oon Firefox. Superb Blog!

  50. harvard blog
    harvard blog Dice:

    You made some really good points there. I looked on the net to learn more about the issue and found most individuals will go along with your views on this site.

  54. tubidy mp3 download
    tubidy mp3 download Dice:

    Next time I read a blog, Hopefully it does not fail me just as much as this one. After all, I know it was my choice to read, nonetheless I actually thought you would have something helpful to talk about. All I hear is a bunch of moaning about something you can fix if you were not too busy searching for attention.

  55. tubidy
    tubidy Dice:

    Right here is the perfect blog for anyone who wishes to find out about this topic. You realize so much its almost tough to argue with you (not that I personally would want to…HaHa). You certainly put a new spin on a subject that’s been written about for years. Excellent stuff, just wonderful.

  56. porn
    porn Dice:

    I blog quite often and I really thank you for your content. This article has really peaked my interest. I will book mark your blog and keep checking for new details about once per week. I subscribed to your Feed as well.

  57. berita aceh
    berita aceh Dice:

    Next time I read a blog, I hope that it doesn’t fail me as much as this one. I mean, I know it was my choice to read, however I genuinely believed you would probably have something helpful to talk about. All I hear is a bunch of moaning about something that you could fix if you were not too busy searching for attention.

  61. triangolo
    triangolo Dice:

    It is truly a great and useful piece of info. I’m glad
    that you shared this helpful info with us. Please keep
    us informed like this. Thanks for sharing.

  66. jambiprov.go.id
    jambiprov.go.id Dice:

    Hi there! I just would like to give you a big thumbs up for your great information you have got right here on this post. I’ll be returning to your website for more soon.

  71. porn
    porn Dice:

    I blog frequently and I genuinely appreciate your content. Your article has truly peaked my interest. I am going to bookmark your blog and keep checking for new details about once per week. I subscribed to your RSS feed too.

  72. China jeans manufacturers
    China jeans manufacturers Dice:

    I really love your blog.. Great colors & theme. Did you make this website yourself? Please reply back as I’m wanting to create my own personal website and want to find out where you got this from or just what the theme is named. Thanks.

  74. mp3juices
    mp3juices Dice:

    Hello! I could have sworn I’ve been to this site before but after browsing through many of the articles I realized it’s new to me. Anyways, I’m certainly delighted I came across it and I’ll be bookmarking it and checking back regularly!

  76. kontol
    kontol Dice:

    A motivating discussion is definitely worth comment. I think that you ought to publish more about this subject, it may not be a taboo matter but generally folks don’t talk about these subjects. To the next! All the best!

  81. spiritual medium near me
    spiritual medium near me Dice:

    An impressive share! I’ve just forwarded this onto a colleague who has been conducting a little homework on this. And he in fact bought me lunch because I stumbled upon it for him… lol. So let me reword this…. Thanks for the meal!! But yeah, thanx for spending time to talk about this matter here on your website.

  83. bestiptv1
    bestiptv1 Dice:

    Aw, this was an incredibly nice post. Finding the time and actual effort to create a very good article… but what can I say… I hesitate a lot and never seem to get anything done.

  86. tubidy
    tubidy Dice:

    I was very happy to uncover this website. I wanted to thank you for your time due to this wonderful read!! I definitely really liked every part of it and I have you bookmarked to look at new stuff on your site.

  89. AiDigiTales
    AiDigiTales Dice:

    I really love your blog.. Great colors & theme. Did you create this site yourself? Please reply back as I’m planning to create my very own website and would love to learn where you got this from or just what the theme is named. Thanks.

  90. stikes
    stikes Dice:

    Hi there! I simply wish to offer you a big thumbs up for your great information you have got here on this post. I am coming back to your web site for more soon.

  94. ngentot pepek
    ngentot pepek Dice:

    Your style is unique in comparison to other folks I have read stuff from. I appreciate you for posting when you have the opportunity, Guess I’ll just bookmark this site.

  95. ngentot
    ngentot Dice:

    I really love your blog.. Great colors & theme. Did you build this amazing site yourself? Please reply back as I’m attempting to create my very own blog and would like to find out where you got this from or exactly what the theme is called. Kudos!

  98. link bokep
    link bokep Dice:

    I’m amazed, I have to admit. Rarely do I come across a blog that’s both equally educative and engaging, and let me tell you, you’ve hit the nail on the head. The problem is something which too few folks are speaking intelligently about. Now i’m very happy that I found this in my hunt for something regarding this.

  100. tubidy mp3
    tubidy mp3 Dice:

    After looking into a handful of the blog posts on your site, I truly like your way of writing a blog. I saved as a favorite it to my bookmark site list and will be checking back in the near future. Please visit my web site as well and tell me what you think.

  101. ดูซีรี่ย์จีน
    ดูซีรี่ย์จีน Dice:

    Right here is the right web site for everyone who wishes to find out about this topic. You understand a whole lot its almost hard to argue with you (not that I personally will need to…HaHa). You definitely put a fresh spin on a topic which has been discussed for ages. Excellent stuff, just excellent.

  115. rent to own
    rent to own Dice:

    When I originally commented I appear to have clicked the -Notify me when new comments are added- checkbox and now each time a comment is added I recieve 4 emails with the exact same comment. Is there a means you can remove me from that service? Kudos.

  122. kontol besar
    kontol besar Dice:

    Oh my goodness! Amazing article dude! Many thanks, However I am going through problems with your RSS. I don’t know the reason why I cannot join it. Is there anybody else getting similar RSS issues? Anyone that knows the solution can you kindly respond? Thanks.

  124. kontol
    kontol Dice:

    I really love your blog.. Very nice colors & theme. Did you develop this website yourself? Please reply back as I’m wanting to create my own blog and want to find out where you got this from or just what the theme is called. Cheers!

  126. company
    company Dice:

    Your style is very unique in comparison to other people I’ve read stuff from. Thanks for posting when you’ve got the opportunity, Guess I’ll just book mark this page.

  128. Flum pebble
    Flum pebble Dice:

    Your style is so unique in comparison to other folks I’ve read stuff from. Thanks for posting when you have the opportunity, Guess I’ll just book mark this web site.

  130. ngentot pepek
    ngentot pepek Dice:

    I’m amazed, I must say. Seldom do I come across a blog that’s both equally educative and engaging, and without a doubt, you have hit the nail on the head. The issue is something too few folks are speaking intelligently about. Now i’m very happy I came across this during my hunt for something concerning this.

  132. ngentot
    ngentot Dice:

    I’m amazed, I must say. Rarely do I encounter a blog that’s both educative and engaging, and let me tell you, you’ve hit the nail on the head. The issue is an issue that too few men and women are speaking intelligently about. Now i’m very happy I stumbled across this during my search for something regarding this.

  133. travel
    travel Dice:

    You made some really good points there. I looked on the web to learn more about the issue and found most people will go along with your views on this site.

  136. iptv
    iptv Dice:

    Way cool! Some very valid points! I appreciate you writing this article and also the rest of the site is really good.

  137. want Ex Back
    want Ex Back Dice:

    Hi there, just became alert to your blog through Google, and found that it
    is really informative. I’m gonna watch out for brussels.
    I’ll appreciate if you continue this in future. Numerous people will
    be benefited from your writing. Cheers!

    my web-site – want Ex Back

  139. iptv
    iptv Dice:

    After going over a few of the articles on your website, I honestly appreciate your technique of blogging. I bookmarked it to my bookmark website list and will be checking back in the near future. Please visit my web site too and let me know how you feel.

  143. kubet77
    kubet77 Dice:

    Aw, this was a very good post. Taking the time and actual effort to create a very good article… but what can I say… I procrastinate a whole lot and never seem to get nearly anything done.

  144. ดูซีรีย์จีน
    ดูซีรีย์จีน Dice:

    Can I simply just say what a relief to discover someone that really understands what they are talking about on the web. You definitely know how to bring a problem to light and make it important. More and more people need to look at this and understand this side of your story. It’s surprising you’re not more popular because you certainly possess the gift.

  150. advice
    advice Dice:

    An interesting discussion is definitely worth comment. I think that you need to publish more about this issue, it may not be a taboo subject but generally people don’t discuss these issues. To the next! Best wishes.

  152. 博彩社区
    博彩社区 Dice:

    Hi there! I just want to offer you a big thumbs up for your excellent info you’ve got here on this post. I’ll be returning to your blog for more soon.

  155. jacket maker China
    jacket maker China Dice:

    An outstanding share! I’ve just forwarded this onto a colleague who was conducting a little research on this. And he actually bought me breakfast because I discovered it for him… lol. So allow me to reword this…. Thank YOU for the meal!! But yeah, thanx for spending some time to discuss this matter here on your site.

  156. tubidy mp3
    tubidy mp3 Dice:

    Hi, I do think this is an excellent blog. I stumbledupon it 😉 I am going to return once again since i have book-marked it. Money and freedom is the best way to change, may you be rich and continue to guide other people.

  157. IWIN
    IWIN Dice:

    Everything is very open with a precise clarification of the challenges. It was truly informative. Your site is useful. Many thanks for sharing!

  158. yt mp3
    yt mp3 Dice:

    I want to to thank you for this fantastic read!! I absolutely loved every bit of it. I have got you saved as a favorite to look at new things you post…

  159. IWIN
    IWIN Dice:

    Your style is so unique compared to other people I have read stuff from. I appreciate you for posting when you have the opportunity, Guess I will just book mark this web site.

  160. Michael
    Michael Dice:

    Having read this I thought it was rather informative. I appreciate you spending some time and energy to put this short article together. I once again find myself personally spending way too much time both reading and leaving comments. But so what, it was still worth it.

  161. galileo fx
    galileo fx Dice:

    This is a really good tip particularly to those new to the blogosphere. Short but very accurate information… Thanks for sharing this one. A must read post!

  162. top article
    top article Dice:

    Spot on with this write-up, I seriously think this website needs a great deal more attention. I’ll probably be back again to read through more, thanks for the info.

  163. Biofeedback News
    Biofeedback News Dice:

    A fascinating discussion is definitely worth comment. There’s no doubt that that you ought to publish more about this topic, it might not be a taboo subject but generally folks don’t talk about these topics. To the next! All the best!

  164. porn
    porn Dice:

    Howdy! This article couldn’t be written any better! Looking at this post reminds me of my previous roommate! He continually kept preaching about this. I most certainly will send this post to him. Fairly certain he’s going to have a good read. Many thanks for sharing!

  166. stickers
    stickers Dice:

    Having read this I believed it was very enlightening. I appreciate you spending some time and effort to put this content together. I once again find myself spending a significant amount of time both reading and leaving comments. But so what, it was still worth it!

  167. mp3juice
    mp3juice Dice:

    I was very happy to uncover this website. I need to to thank you for your time due to this fantastic read!! I definitely enjoyed every part of it and I have you book marked to look at new stuff in your blog.

Dejar un comentario

¿Quieres unirte a la conversación?
Siéntete libre de contribuir!

Deja una respuesta

Tu dirección de correo electrónico no será publicada. Los campos obligatorios están marcados con *