Pinned
Seth Grover
Seth Grover
@guero.org
Husband. Girldad. Xenial. Church of Jesus Christ of Latter-day Saints. Software dev in cyber R&D at INL. Geek/homelabber. Sporadic guitarist/songwriter. Lover of sci-fi, horror and weird fiction. Outdoorsman: archery, shooting, hunting, fishing, hiking
45 followers45 following39 posts
#Malcolm (malcolm.fyi) v26.04.1 is out with improvements to file scanning, bug fixes, and other goodness! Details @ github.com/idaholab/Malcolm/releases. Malcolm is a powerful tool suite for NSM 🕵🏻♂️. #Zeek #Arkime #NetBox #Suricata #NetworkTrafficAnalysis #networksecuritymonitoring
If you’re a #pizza person: my daughter’s HS band (percussion) is fundraising with Domino’s “Slice the Price” card. ~$21 (after shipping). Buy 1 large at menu price, get 1 large FREE—unlimited uses thru 12/31/2026. #Fundraiser store.dominos.cards/52708/Miriam... . Help the band and then pig out!
Seth Grover reposted
🏗️ This month in Zeek development: the 8.1 release is around the corner (ZeroMQ as the new default cluster backend!), plus updates on WebSocket bindings and more. Get the full rundown in our newsletter: community.zeek.org/t/zeek-newsl... #Zeek
#Malcolm (malcolm.fyi) v25.09 features 🧠 threat intel improvements, new ⚙️ config options, 🆙 component updates, 🐛 fixes, more! Details @ github.com/idaholab/Malcolm/releases. Malcolm is a powerful tool suite for NSM 🕵🏻♂️. #Zeek #Arkime #NetBox #Suricata #NetworkTrafficAnalysis #networksecuritymonitoring
Check out our #Malcolm blog post on the #AWS Public Sector Blog: aws.amazon.com/blogs/public...! It's the first of two blog posts on deploying Malcolm on AWS (malcolm.fyi/docs/aws.html). Once you've read it, check out the discussion on GitHub at github.com/cisagov/Malc....
My team develops #Zeek network analyzers (github.com/cisagov/icsnpp) for #OT protocols. If you know this area, you know one of the hardest things is getting sample data. If you have traffic available for any of the more niche protocols on that list & are willing to share #PCAP, please reach out.
Hey, y'all, if you use #Zeek (zeek.org), would you please take 10 minutes to fill out the Zeek Project Survey 2025 at zeek.org/survey? Let the Zeek team know how you feel about the project and help shape its direction moving forward. #PCAP #NetworkTrafficAnalysis #networksecuritymonitoring
#Malcolm (malcolm.fyi) v25.06.0 features 🔐 #rbac, other ✨ improvements, 🆙 component version updates, 🐛 bug fixes, & more. Details @ github.com/idaholab/Malcolm/releases. Malcolm is a powerful tool suite for NSM 🕵🏻♂️. #Zeek #Arkime #NetBox #Suricata #NetworkTrafficAnalysis #networksecuritymonitoring
#Malcolm (malcolm.fyi) v25.04.1 contains a bevy of ✨ improvements, 🆙 component version updates, 🐛 bug fixes, and other great stuff. 👁 github.com/idaholab/Mal... for details! Malcolm is a powerful tool suite for NSM 🕵🏻♂️. #Zeek #Arkime #NetBox #Suricata #NetworkTrafficAnalysis #networksecuritymonitoring
#Malcolm (malcolm.fyi) v25.03.0 brings 🔐 auth via #Keycloak and with it #SSO, identity providers, and more! See the release notes github.com/cisagov/Malc... for more info! Malcolm is a powerful tool suite for NSM. #Zeek #Arkime #NetBox #Suricata #NetworkTrafficAnalysis #networksecuritymonitoring
Malcolm v25.02.0 is out! See the release notes for details! malcolm.fyi github.com/cisagov/Malc... #Malcolm #HedgehogLinux #Zeek #Arkime #NetBox #OpenSearch #Elasticsearch #Suricata #PCAP #NetworkTrafficAnalysis #networksecuritymonitoring #OT #ICS #icssecurity #CyberSecurity #Cyber #Infosec
We're joining with #Netbox Labs on Feb 25 @ 11 AM EST for "Managing #NetworkSecurity Threats In #CriticalInfrastructure With NetBox & #Zeek in #Malcolm." You can watch this overview (youtu.be/c__mZAGXmk0) if you want a bit of context before the webinar. Register at netboxlabs.com/events/webin....
Seth Grover reposted
Malcolm v25.01.0 is out! See the release notes for details! malcolm.fyi github.com/cisagov/Malc... #Malcolm #HedgehogLinux #Zeek #Arkime #NetBox #OpenSearch #Elasticsearch #Suricata #PCAP #NetworkTrafficAnalysis #networksecuritymonitoring #OT #ICS #icssecurity #CyberSecurity #Cyber #Infosec
Malcolm (malcolm.fyi) v24.12.0 is out (github.com/cisagov/Malc...), with ✨enhancements, ✅component updates, and 🐛bug fixes. See the release notes for details. #Malcolm #HedgehogLinux #Zeek #Arkime #NetBox #Suricata #PCAP #NetworkTrafficAnalysis #networksecuritymonitoring #OT #ICS #CyberSecurity
Seth Grover reposted
Seth Grover reposted
Join us today (Wed, 11th of December) at 10am Pacific time for our next webinar. @guero.org will talk about Zeek File Extraction and Automating Malware Analysis. Sign up at us06web.zoom.us/webinar/regi...
Seth Grover reposted
Join us next Wednesday at 10am Pacific time for our next webinar. @guero.org will talk about Zeek File Extraction and Automating Malware Analysis. Sign up at us06web.zoom.us/webinar/regi... or at zeek.org/events/webin...
Seth Grover reposted
The next Zeek Webinar just started. The topic is Parsnip: Lowering the Barrier of Entry for Parser Development, with Melanie Pierce from Idahp National Laboratory. Join us at www.youtube.com/watch?v=9Y0l...
Seth Grover reposted
We will host another Zeek webinar, Parsnip: Lowering the Barrier of Entry for Parser Development, by Melanie Pierce, on Wednesday 20 November at 1 pm ET. Register for free here: us06web.zoom.us/webinar/regi...
Seth Grover reposted
My friend Melanie Pierce is presenting a Zeek webinar tomorrow at 10am PST on Parsnip a project she's a lead on here at #INL. If you're interested in #Zeek and #parser development, please hop on!
I just released v24.11.0 of #Malcolm (malcolm.fyi), a powerful, easily deployable network traffic analysis tool suite for #NSM. See github.com/cisagov/Malc... for details. #opensource #HedgehogLinux #Zeek #Arkime #Suricata #PCAP #CyberSecurity #Cyber #Infosec #INL #DHS #CISA #CISAgov
I'm curious what other #Python coders do to manage helper functions and classes to reuse across various scripts and projects to avoid copy/pasting. For the last few years I've maintained my own package on PyPi (pypi.org/project/mmgu...) that I add as a project dependency. Are there other approaches?
Professional: software developer in #cybersecurity R&D at Idaho National Lab (#INL) supporting #DHS #CISA. >21 years experience in software and cyber, previously at NitroSecurity, McAfee and Intel. Creator/dev/maintainer of Malcolm (malcolm.fyi), an #opensource network traffic analysis tool suite.
You are up to date.