Packet mystery solver. Protocol analyst. SharkFest Presenter. Road warrior. #TFD24 #PacketsAreEvidence #ProfilesArePower #womenintech #womeninpackets
youtube.com/c/BettyDuBois
Joined January 2013
- Tweets4K
- Following339
- Followers2.4K
- Likes9.8K
Goodbye Twitter. It was nice until Elon came along.
Find me on Blue Sky, bsky.app/profile/packetdetec…
Betty DuBois moved 2 @packetdetective.bsky.social retweeted
It’s Always #DNS – Poster weberblog.net/its-always-dns…
Taking a break from here until after the election. If I see one more Trump ad here I am going to lose it. Won't be looking at notifications or DMs either.
This is a beautiful thing. Can't wait to try it in the lab this weekend.
Today we are releasing TraceeShark 🦈 Wireshark plugin that brings the power of Tracee into Wireshark! Start tracing sessions directly from Wireshark & analyze Tracee findings in Wireshark. It's an unbeatable combo for security research and IR! read more aquasec.com/blog/go-deeper-l…
Betty DuBois moved 2 @packetdetective.bsky.social retweeted
Headbutts during @PacketDetective #wireshark class. Such a great class this week! We are both learning a lot and he helps with labs.
Betty DuBois moved 2 @packetdetective.bsky.social retweeted
The JA4+ plugin for Wireshark has been updated.
We've removed JA4 (TLS client fingerprint) from the plugin because that is now native to Wireshark in tls.handshake.ja4. We've also fixed JA4X (X509 fingerprint) which was producing incorrect values😬
github.com/FoxIO-LLC/ja4/tre…
Betty DuBois moved 2 @packetdetective.bsky.social retweeted
Was wondering why "no protocol udp" is in just about every example configuration for Cisco's device tracking feature.
Oh, it's not even supported.
Betty DuBois moved 2 @packetdetective.bsky.social retweeted
Keep an eye out for malicious #CrowdStrike related domains or calls from "CrowdStrike Support"
crowdstrike-helpdesk[.]com is not going to be legit and they're not going to ask you to install Team Viewer...
A lot of new domains are popping up:
urlscan.io/search/#crowdstri…*
Betty DuBois moved 2 @packetdetective.bsky.social retweeted
Upvote and comment on this link if you want all of JA4+ in Cloudflare:
community.cloudflare.com/t/j…
I've heard from multiple companies that they've resolved security incidents by blocking threat actors utilizing JA4 TLS Fingerprints on Cloudflare. But as attacks get more sophisticated, JA4+ fingerprints at multiple layers of the connection will be needed.
Betty DuBois moved 2 @packetdetective.bsky.social retweeted
It looks like @MackenzieWiFi has grown! #WiCo
Betty DuBois moved 2 @packetdetective.bsky.social retweeted
#Wireshark 4.2.6 has been released. Enjoy.
wireshark.org/docs/relnotes/…
Betty DuBois moved 2 @packetdetective.bsky.social retweeted
Unlock the full potential of your #Wireshark skills by becoming a member of our YouTube channel!
youtube.com/@WireSharkFest
Get the latest vids, featuring tutorials, insights & cutting-edge techniques.
Network Shark members get access to videos from the most recent SharkFests!
Betty DuBois moved 2 @packetdetective.bsky.social retweeted
❗ We remind all Suricata-6 fans that Suricata 6.0.20 was the last scheduled release in the 6-series!
All users of #Suricata 6 or earlier are strongly recommended to update to Suricata 7 as soon as possible.
Stay safer, stay up-to-date! More info: suricata.io/our-story/eol-po…❗
We had more women who did not want their picture taken. After all, we were in Washingon, DC 😎. Our percentage is getting higher each year.
I got the chance to talk with each of these wonderful ladies!
Betty DuBois moved 2 @packetdetective.bsky.social retweeted
I recently updated the #UltimatePCAP and added some mail protocols: IMAP, POP3, SMTP, all in plain text, STARTTLS and implicit TLS. Go ahead and analyse it by yourself. ;) #Wireshark
This is it: The Ultimate PCAP. A single downloadable #pcap with more than 50 network protocols! Use it as your single #Wireshark sample file. weberblog.net/the-ultimate-p…