HD Moore
@hdm.infosec.exchange.ap.brid.gy
Founder & CEO of runZero (@runZeroInc - https://runzero.com), previously the founder and lead developer of Metasploit, a CSO, a consultant, and the head of […]
[bridged from https://infosec.exchange/@hdm on the fediverse by https://fed.brid.gy/ ]
[bridged from https://infosec.exchange/@hdm on the fediverse by https://fed.brid.gy/ ]
@XenoPhage hope so! i made it last year
October 13, 2025 at 9:27 PM
@XenoPhage hope so! i made it last year
@tychotithonus thanks again - you can find updated docs at https://help.runzero.com/docs/traffic-sampling/
Passive sampling
runZero Explorers can identify assets, services, and vulnerabilities by passively monitoring network traffic. Passive sampling can be an alternative data source when active scanning is prohibited and helpful at identifying unknown IP ranges. Passive sampling tasks are limited to using a single CPU core and will temporarily skip packets when this limit is reached. If an active scan is run on an Explorer with a passive sampling task, the passive task will be interrupted, and then restarted once the active scan completes.
help.runzero.com
October 10, 2025 at 5:07 AM
@tychotithonus thanks again - you can find updated docs at https://help.runzero.com/docs/traffic-sampling/
@tychotithonus will do, thanks for the feedback!
October 10, 2025 at 12:43 AM
@tychotithonus will do, thanks for the feedback!
@tychotithonus SPAN or even GRE etc will be used if it’s available, but runZero will eat anything you feed it
October 9, 2025 at 9:46 PM
@tychotithonus SPAN or even GRE etc will be used if it’s available, but runZero will eat anything you feed it
@briankrebs I became a convert after switching back to macOS a few years ago - it's really handy when you juggle open source and commercial product dev and need to make sure things work as advertised on the network side; if you write code using open source dependencies (aka everyone writing […]
Original post on infosec.exchange
infosec.exchange
September 1, 2025 at 9:45 PM
@briankrebs I became a convert after switching back to macOS a few years ago - it's really handy when you juggle open source and commercial product dev and need to make sure things work as advertised on the network side; if you write code using open source dependencies (aka everyone writing […]