TTY Logs and the Data it Captures, (Sun, Oct 4th)
Cybersecurity Classified by Officially
For an experiment, I created a script [1] that parses and send the TTY logs collected from actors or bots activity that run various commands after they successfully login the DShield sensor. Those TTY logs are sent daily at the end of each day to the DShield SIEM [2] to be correlated with all the data.
This is an extract. The publication continues at the source.
Read the original at the source: https://isc.sans.edu/diary/rss/33396
Officially imported this from SANS Internet Storm Center’s own source and shows an extract. If you work there, claiming the profile and verifying the domain lets you choose to show the full text here.
Provenance
- Organization
- SANS Internet Storm Center — imported from official source
- Official source
- https://isc.sans.edu/rssfeed.xml RSS
- Imported
- October 05, 2026 01:00
- Versions
- 1 recorded
- Identity
-
https://isc.sans.edu/diary/rss/33396