sud0woodo

Day: February 11, 2019

Investigating External IP-Lookups from Mailspring

Last week I was playing around with some PCAPs I made of my home network, trying to correlate what I saw happening in the PCAP with the alerts generated by my SecurityOnion instance. One specific alert triggered over 1000 times in just two days, this doesn’t say much as I happen test a lot of […]

Back to top