TTY Logs and the Data it Captures, (Sun, Oct 4th)

This post was originally published on this site

For an experiment, I created a script [1] that parses and send the TTY logs collected from actors or bots activity that run various commands after they successfully login the DShield sensor. Those TTY logs are sent daily at the end of each day to the DShield SIEM [2] to be correlated with all the data. 

Leave a Reply

This site uses Akismet to reduce spam. Learn how your comment data is processed.