and if you're interested in my write-ups related to Suricata, rule writing and threat hunting, check out:

community.emergingthreats.net/c/tutorials-...

Look for the stuff posted by trobinson667. Tons of great advice for threat hunting, intelligence gathering, and rule writing. Cheers!

I know its not much, but I write up a bunch of blogs and how-tos related to virtual machine labs and Suricata IDS/IPs software. My books (in varying states of completeness) are over at:

leanpub.com/u/da_667

My books are always "pay what you want", even if that means not paying at all.

I'd also like to thank any of you all in advance if you elect to donate something. Trust me, I know times are tough in 2025 for anyone who isn't a billionaire, so I just want to make sure I express my appreciation.

dude this is incredibly generous and we both really appreciate it

and for those of you who aren't keen on donating to a stranger's amazon list, but still want to help your local teachers, consider donorschoose.org as an alternative to support your local schools. This may also be something that you can point your employer to as a worthy cause as well.

She serves as a first grade teacher at a title 1 school. If you're not familiar with the lingo, title 1 schools serve poor and impoverished communities. If you're kind enough to donate, I deeply appreciate it, even if you can't, thanks for taking the time to read this.

listen, if I can get an appointment with doctor catte in less than three months, i'm gonna give it some serious thought.

Yeah can confirm not a doctor. But I has all the appointments available to select from.

Sometimes my blogposts on my personal blog are a little raw, so I create a more worksafe version that I put on the emerging threats community forum, that people might feel a little more comfortable reading and sharing:

community.emergingthreats.net/t/detection-...

Enjoy your Saturday

I promise I'll have the PG version that you can (probably) share with your SOC analysts, boss and other people that can't stomach shitposting and white-hot spite sometime in the next few days.

Until then, enjoy the weekend, fuck Cisco, stomp out the fascism before it takes root, and one love. later

-What the rule looks like in Suricata, including a break-down of the rule structure, keywords used, why we use them

-An identical break-down for Snort that shows how we achieve feature parity between two vastly different IDS engines.

www.totes-legit-notmalware.site/home/detecti...

happy hunting

-Where to find official documentation for both Snort and Suricata

-How to properly archive proof of concept code so that the code isn't deleted on a whim and lost forever

-The handful of vulns I wrote rules for themselves

this is why you don't capitulate to the fascists, they just demand more if you roll over.

I'll be honest, I've never used arch before. so I'm not used to it.