Date Author Title

IDS CLOUD METADATA SERVICES SURF

2026-08-19Johannes UllrichSimple Scans for Cloud Metadata Service

IDS

2026-08-19/a>Johannes UllrichSimple Scans for Cloud Metadata Service
2024-03-29/a>Xavier MertensQuick Forensics Analysis of Apache logs
2021-04-07/a>Johannes UllrichWiFi IDS and Private MAC Addresses
2018-10-08/a>Guy BruneauLatest Release of rockNSM 2.1
2018-03-11/a>Guy BruneaurockNSM Configuration & Installation Steps http://handlers.sans.org/gbruneau/rockNSM%20as%20an%20Incident%20Response%20Package.htm
2017-09-17/a>Guy BruneaurockNSM as a Incident Response Package
2017-06-08/a>Tom WebbSummer STEM for Kids
2017-01-26/a>Xavier MertensIOC's: Risks of False Positive Alerts Flood Ahead
2016-05-26/a>Xavier MertensKeeping an Eye on Tor Traffic
2014-04-03/a>Bojan ZdrnjaWatching the watchers
2014-02-03/a>Johannes UllrichWhen an Attack isn't an Attack
2013-09-24/a>Tom WebbIDS, NSM, and Log Management with Security Onion 12.04.3
2012-07-21/a>Rick WannerTippingPoint DNS Version Request increase
2012-07-18/a>Rob VandenBrinkSnort Updated today
2011-05-08/a>Lorna HutchesonMonitoring Virtual Machines
2011-03-03/a>Manuel Humberto Santander PelaezPoor man's DLP solution
2010-07-02/a>Johannes UllrichOISF released version 1.0.0 of Suricata, the open source IDS/IPS engine http://www.openinfosecfoundation.org
2010-06-15/a>Manuel Humberto Santander PelaezTCP evasions for IDS/IPS
2010-06-14/a>Manuel Humberto Santander PelaezAnother way to get protection for application-level attacks
2009-12-30/a>Guy BruneauReady to use IDS Sensor with Sguil
2009-09-27/a>Stephen HallUse Emerging Threats signatures? READ THIS!
2008-11-25/a>Andre LudwigThe beginnings of a collaborative approach to IDS
2008-10-06/a>Jim ClausingDay 6 - Network-based Intrusion Detection Systems
2008-09-18/a>Bojan ZdrnjaMonitoring HTTP User-Agent fields
2008-09-10/a>Adrien de BeaupreMailbag: OSSEC 1.6 released, NMAP 4.75 released
2008-05-07/a>Jim ClausingOSSEC 1.5 released

CLOUD

2026-08-19/a>Johannes UllrichSimple Scans for Cloud Metadata Service
2026-04-01/a>Kenneth HartmanTeamPCP Supply Chain Campaign: Update 005 - First Confirmed Victim Disclosure, Post-Compromise Cloud Enumeration Documented, and Axios Attribution Narrows
2026-03-30/a>Kenneth HartmanTeamPCP Supply Chain Campaign: Update 004 - Databricks Investigating Alleged Compromise, TeamPCP Runs Dual Ransomware Operations, and AstraZeneca Data Released
2026-03-27/a>Kenneth HartmanTeamPCP Supply Chain Campaign: Update 002 - Telnyx PyPI Compromise, Vect Ransomware Mass Affiliate Program, and First Named Victim Claim
2025-10-23/a>Guy BruneauPhishing Cloud Account for Information
2025-02-15/a>Xavier MertensThe Danger of IP Volatility
2024-03-14/a>Jan KoprivaIncrease in the number of phishing messages pointing to IPFS and to R2 buckets
2023-11-27/a>Johannes UllrichScans for ownCloud Vulnerability (CVE-2023-49103)
2023-01-12/a>Russ McReeProwler v3: AWS & Azure security assessments
2022-07-22/a>Yee Ching TokAn Analysis of a Discerning Phishing Website
2022-04-11/a>Johannes UllrichSpring: It isn't just about Spring4Shell. Spring Cloud Function Vulnerabilities are being probed too.
2022-03-30/a>Johannes UllrichJava Springtime Confusion: What Vulnerability are We Talking About
2021-11-10/a>Xavier MertensShadow IT Makes People More Vulnerable to Phishing
2021-05-07/a>Daniel WesemannExposed Azure Storage Containers
2021-01-29/a>Xavier MertensSensitive Data Shared with Cloud Services
2020-11-18/a>Xavier MertensWhen Security Controls Lead to Security Issues
2020-07-28/a>Johannes UllrichAll I want this Tuesday: More Data
2020-05-05/a>Russ McReeCloud Security Features Don't Replace the Need for Personnel Security Capabilities
2020-03-11/a>Xavier MertensAgent Tesla Delivered via Fake Canon EOS Notification on Free OwnCloud Account
2020-03-05/a>Xavier MertensWill You Put Your Password in a Survey?
2019-06-24/a>Johannes UllrichExtensive BGP Issues Affecting Cloudflare and possibly others
2018-10-08/a>Guy BruneauApple Security Updates
2018-03-03/a>Xavier MertensReminder: Beware of the "Cloud"
2017-12-01/a>Xavier MertensPhishing Kit (Ab)Using Cloud Services
2017-02-24/a>Rick WannerCloudflare data leak...what does it mean to me?
2015-08-19/a>Bojan ZdrnjaOutsourcing critical infrastructure (such as DNS)
2014-07-15/a>Daniel WesemannAOC Cloud
2014-07-09/a>Daniel WesemannWho inherits your IP address?
2014-05-07/a>Johannes UllrichDe-Clouding your Life: Things that should not go into the cloud.
2014-04-21/a>Daniel WesemannAllow us to leave!
2013-03-28/a>John BambenekWhere Were You During the Great DDoS Cybergeddon of 2013?
2013-03-23/a>Guy BruneauApple ID Two-step Verification Now Available in some Countries
2013-01-09/a>Rob VandenBrinkHotmail seeing some temporary access issues
2011-06-12/a>Mark HofmanCloud thoughts
2010-02-22/a>Rob VandenBrinkNot Every Cloud has a Silver Lining
2010-02-17/a>Rob VandenBrinkDefining Clouds - " A Cloud by any Other Name Would be a Lot Less Confusing"
2009-11-29/a>Patrick Nolan A Cloudy Weekend

METADATA

2026-08-19/a>Johannes UllrichSimple Scans for Cloud Metadata Service
2020-03-14/a>Didier StevensPhishing PDF With Incremental Updates.
2019-05-19/a>Guy BruneauIs Metadata Only Approach, Good Enough for Network Traffic Analysis?
2018-07-04/a>Didier StevensXPS Metadata
2017-12-16/a>Xavier MertensMicrosoft Office VBA Macro Obfuscation via Metadata
2013-07-06/a>Guy BruneauIs Metadata the Magic in Modern Network Security?
2012-12-03/a>John BambenekJohn McAfee Exposes His Location in Photo About His Being on Run
2012-11-30/a>Daniel WesemannSnipping Leaks

SERVICES

2026-08-19/a>Johannes UllrichSimple Scans for Cloud Metadata Service
2022-09-21/a>Xavier MertensPhishing Campaigns Use Free Online Resources
2021-11-10/a>Xavier MertensShadow IT Makes People More Vulnerable to Phishing
2021-05-08/a>Guy BruneauWho is Probing the Internet for Research Purposes?
2020-11-18/a>Xavier MertensWhen Security Controls Lead to Security Issues
2019-05-26/a>Didier StevensVideo: nmap Service Detection Customization
2018-03-03/a>Xavier MertensReminder: Beware of the "Cloud"
2011-08-25/a>Kevin ShorttIncreased Traffic on Port 3389

SURF

2026-08-19/a>Johannes UllrichSimple Scans for Cloud Metadata Service
2022-02-03/a>Johannes UllrichKeeping Track of Your Attack Surface for Cheap
2021-05-10/a>Johannes UllrichCorrectly Validating IP Addresses: Why encoding matters for input validation.
2019-07-20/a>Guy BruneauRe-evaluating Network Security - It is Increasingly More Complex