@dcode

Founder of @rocknsm. I ❤️ all things @elastic so much that I now build things there.

 San Antonio, TX
github.com/dcode/
Joined March 2008
  • Tweets644
  • Following175
  • Followers299
38Media
Here's a tool that was written by @dcode and @DanielStepanic that automates the collection of #cobaltstrike beacons from #Elastic, pulls the configuration out, and writes it all back into Elasticsearch. elastic.github.io/security-r…
21
54
Elastic's MacOS Endpoint Agent with the Malware Protections feature enabled and MacOS Prebuilt Detection Rules enabled in Kibana detected the new MacOS malware Dazzlespy (welivesecurity.com/2022/01/2…) out of the box. (These capabilities are free and open source for you to use.)
4
43
1
187
Great work by the team (@dcode @DanielStepanic @bluish_red_) going deep on some tactical, operational, and strategic analysis on the Deimos implant using the #pyramidofpain @DavidJBianco elastic.co/blog/going-coast-…
2
13
28
Derek Ditch retweeted
Elastic
@elastic14 Jan 2021
We are moving our Apache 2.0-licensed source code in Elasticsearch & Kibana to be dual licensed under SSPL & the Elastic License, giving users the choice of which license to apply. Read more → go.es.io/39AnJAL FAQs → go.es.io/3oInry8 go.es.io/39AnJAL

Doubling down on open, Part II

Upcoming licensing changes to Elasticsearch and Kibana

elastic.co
12
91
48
138
Derek Ditch retweeted
Elastic
@elastic26 Nov 2020
On this #Thanksgiving Day, we have so much to be grateful for — our community of customers, partners, users, #Elasticians, family, and friends. Happy Thanksgiving!
15
16
Derek Ditch retweeted
Shay Banon@kimchy15 May 2020
we heard you, a whole new alerting framework, built from the ground up, natively integrated into Kibana across all our products, and most importantly, simple, intuitive, and easy to use xitter.cf/elastic/status/1260700…
Elastic
@elastic13 May 2020
Alerting is reimagined in #ElasticStack 7.7. Create alerts natively in the SIEM, Uptime, APM, and Metrics apps and manage them from a single UI. Plus, use third-party connectors for triggering alerts to email, @SlackHQ, @PagerDuty, and webhooks 🚨→ go.es.io/3bu8fNt
1
12
38
HUGE update with @rocknsm 2.5 @Elastic 7.6 @Zeekurity 3 @Suricata_IDS 5 ECS eeeeerrrrryyyyyywhere New dashboards!!!! Props to @dcode, @neu5ron, and the whole ROCK team. Big thanks to @jeffgeiger for his super-human efforts to help us get over the line! mirror.rocknsm.io/isos/stabl…
14
1
50
Kafka only has dark mode.
vicki@vboykis13 Sep 2019
Excited for the following upcoming product releases: Dark Mode GitHub Dark Mode Jira Dark Mode Kubernetes Dark Mode Kafka Streams Dark Mode WebEx
7
37
3
281
🔟Principles for Working with 🇷🇺! In March we hosted @KeirGiles launching his most recent book “Moscow Rules”. He was asked to distil key recommendations for avoiding expensive and dangerous misunderstandings with Moscow – the “Moscow Rules”. Full read at icds.ee/the-moscow-rules-ten…
16
1
37
PolarProxy is a transparent TLS proxy that creates #PCAP files with the decrypted data. netresec.com/?b=196571B

PolarProxy Released

Im very proud to announce the release of PolarProxy today! PolarProxy is a transparent TLS proxy that decrypts and re-encrypts TLS traffic while also generating a PCAP file containing the decrypted...

netresec.com
6
178
2
391
Derek Ditch retweeted
capes@capesstack20 Jun 2019
Awesome news on the nonprofit for the @rocknsm and CAPES projects. Tremendous amounts of hard work from the team realized over many many years. afcea.org/content/cyber-mili… @dcode @jeffgeiger @kevinkeeney
1
3
5
Derek Ditch retweeted
Alan Saldich@alsaldich30 May 2019
It's a winning combination, @perchedsystems and @corelight_inc working together to educate threat hunters and incident responders. Sign up now if you want to learn more gag.gl/IeLzNx
6
1
5
Derek Ditch retweeted
Dave Ramsey
@DaveRamsey2 Apr 2019
My morning smiles. NEVER QUIT. Get encouragement from people who love you!
Vala Afshar
@ValaAfshar31 Mar 2019
The best demonstration of grit, persistence and self-confidence in less than one minute
15
328
39
1,856
Derek Ditch retweeted
rocknsm@rocknsm6 Mar 2019
It's been a great 2 weeks since we released 2.3. Over 600 downloads and lots of new people all over the world trying it out, and helping us make future releases even better. We're using @elastic to track statistics from our mirror server so we can see who's playing along at home
2
1
10
The Perched Threat Hunting course has incorporated the new threat hunting capabilities released with @RockNSM 2.3. Check out this tailored threat hunting course over at perched.io/perched-hunt
rocknsm@rocknsm28 Feb 2019
The updated @Suricata_IDS dashboard included with RockNSM 2.3 includes 16 visualizations that are focused towards threat hunting. Download RockNSM at buff.ly/2w5Fkh8 #rocknsm
1
3
Derek Ditch retweeted
Nate Guagenti
@neu5ron27 Sep 2018
Replying to @Zeekurity
@Bro_IDS script for JA3 like hashes for SSH now! Called “hassh” get it? 🙃 engineering.salesforce.com/o…
3
1
10
Derek Ditch retweeted
rocknsm@rocknsm5 Apr 2018
Hey there, NSM fans. Did you know that our friends at @PerchedSystems fund a community discussion board for RockNSM issues? Cuz… they do. 😉 buff.ly/2tLVVYl
1
6
Replying to @securityweekly
@rocknsm for a secure NSM sensor, @VulnWhisperer for helping scan data drive ops @THE_HELK for looking into endpoints. @elastic brings them all together with Speed to Data
7
13
Derek Ditch retweeted
Fabian Affolter@fabaff16 Feb 2018
Thanks to the hard work of @dcode from @rocknsm we will have the latest @Bro_IDS package in @fedora soon.
1
2
2
FYI: If you have a #hottake or, even better, a #Narrative ready before the #facts of a tragedy are established, you are part of the problem.
22
74
6
323
Load more