Stamus Networks Blog

We believe that sharing information is necessary to improve global security. The purpose of this blog is to share our experiences, perspectives and experiments.

Subscribe to our Blog

Blog /
Showing 23 results
of 23 items.
Reset All

Category

Recent Posts

Uncovered: Suspicious TLS Beaconing Activity Uncovered by Clear NDR AI

May 20, 2025 Peter Manev
Network Detection and Response, Threat Hunting, Network Security Monitoring, Artificial Intelligence, Clear NDR Enterprise, Beaconing

One of the key strengths of Clear NDRTM is its AI-based TLS beacon detection, which, when combined...

Read More

Uncovered: Clear NDR Discovers Critical Non-Compliance at European Bank

Mar 27, 2025 Peter Manev
Network Detection and Response, Scirius Security Platform, Threat Hunting, Uncovered with SSP, Network Security Monitoring, ClearNDR

For many organizations considering Network Detection and Response (NDR), one of the most valuable...

Read More

Dramatically Reduce MTTD & MTTR: 2 Clicks to Evidence with Clear NDR™

Mar 06, 2025 Peter Manev
Network Detection and Response, Uncovered with SSP, Network Security Monitoring, Stamus Security Platform, ClearNDR

This blog post details how Clear NDR drastically reduces Mean Time to Detect (MTTD) and Mean Time...

Read More
Introducing U40: Powerful New Edition of Stamus Security Platform

Introducing U40: Powerful New Edition of Stamus Security Platform

Aug 01, 2024 Stamus Networks Team
Network Detection and Response, Network Security Monitoring, Stamus Security Platform

Today, we are proud to announce the general availability of Update 40 (U40) - the latest release of...

Read More
Detecting Fake CrowdStrike Domains Communications using Stamus Security Platform (SSP)

Detecting Fake CrowdStrike Domains using Stamus Security Platform

Jul 22, 2024 Stamus Networks Team
Network Detection and Response, Endpoint Detection, Network Security Monitoring, Stamus Security Platform, Threat intelligence

The recent global outage caused by an update to CrowdStrike Falcon, CrowdStrike's endpoint...

Read More

The CrowdStrike Incident: Why a Multi-Layered Defense is Essential for Cyber Resilience

Jul 19, 2024 Stamus Networks Team
Network Detection and Response, Endpoint Detection, Network Security Monitoring, Stamus Security Platform

The recent global outage caused by an update to CrowdStrike Falcon, CrowdStrike's endpoint...

Read More
Threat Hunting with the Open Lateral Movement Ruleset for Suricata by Peter Manev

Threat Hunting with the Open Lateral Movement Ruleset for Suricata

Jul 04, 2024 Peter Manev
SELKS, Open Source, Threat Hunting, Network Security Monitoring, IDS-IPS, Stamus Labs, ClearNDR

In November of 2022 we announced a Suricata ruleset specifically focused on detecting lateral...

Read More
A Practicle Guide to Small Office / Home Office Network Visibility with SELKS: Part 1 - Equipment Selection

A Practical Guide to Small Office / Home Office Network Visibility with SELKS: Part 1 - Equipment Selection

Jul 21, 2023 Alexander Nedelchev
SELKS, Open Source, Suricata, Network Security Monitoring, IDS-IPS, Stamus Labs

Have you ever counted how many computer devices, smart IoT gadgets, TV’s, kitchen appliances,...

Read More
Just Released: Suricata 7 by Andreas Herz

Just Released: Suricata 7

Jul 19, 2023 Andreas Herz
Open Source, Suricata, Network Security Monitoring, IDS-IPS

Yesterday (18-July-2023) the OISF announced the general availability of Suricata version 7. It’s...

Read More
Use SELKS Kibana Dashboards to Solve the Unit 42 Wireshark Quiz by Rosita Kyuchukova

Use SELKS Kibana Dashboards to Solve the Unit 42 Wireshark Quiz

Apr 04, 2023 Rositsa Kyuchukova
SELKS, Open Source, Threat Hunting, Suricata, Network Security Monitoring, Stamus Labs, Kibana, Clear NDR Community

Recently, we released a blog post detailing how you can solve the Unit 42 Wireshark quiz for...

Read More
Stamus-Suricata-Surprises-NSM-Enriched-Alerts

The Hidden Value of Suricata Detection Events: NSM-Enriched IDS Alerts

Mar 30, 2023 Eric Leblond
Threat Hunting, Suricata, Network Security Monitoring, IDS-IPS

If you use Suricata, then you are familiar with the way Suricata generates detection events —...

Read More
Stamus Networks | Spin up a Complete Suricata Network Security Platform in Under 2 Minutes

Spin up a Complete Suricata Network Security Platform in Under 2 Minutes

Oct 29, 2021 Alexander Nedelchev
SELKS, Open Source, Suricata, Network Security Monitoring, IDS-IPS, Stamus Labs

Believe it or not, you can launch a turnkey Suricata IDS/IPS/NSM installation – with as few as 4...

Read More
IMAGE: Suricata Myth Busting: Alerts and NSM

Suricata Myth Busting: Alerts and NSM

Oct 14, 2021 Peter Manev
Suricata, Network Security Monitoring, IDS-IPS

As I mentioned in the introductory article in this series (see here >>), Suricata produces not only...

Read More
Stamus Networks | The Other Side of Suricata

The Other Side of Suricata

Oct 06, 2021 Peter Manev
Suricata, Network Security Monitoring, IDS-IPS

You may be surprised to learn that Suricata produces not only IDS alerts but also produces logs of...

Read More
Stamus Networks - More than just another NDR Vendor

Much more than just another NDR Vendor

Jul 01, 2021 Ken Gramley
Network Detection and Response, Suricata, Network Security Monitoring, Stamus Security Platform, IDS-IPS

In cybersecurity as soon as you stand still, you’re falling behind. Change, whether it’s in the...

Read More
Suricata: The First 12 Years of Innovation

Suricata: The First 12 Years of Innovation

Jun 07, 2021 Eric Leblond
Open Source, Suricata, Network Security Monitoring, IDS-IPS

Suricata, the open source intrusion detection (IDS), intrusion prevention (IPS), and network...

Read More
IMAGE: Scaling Suricata in the Enterprise - Leverage Advanced Analytics

Scaling Suricata in the Enterprise - Leverage Advanced Analytics

Dec 15, 2020 Peter Manev
SELKS, Open Source, Suricata, Network Security Monitoring, Stamus Security Platform, IDS-IPS

Background

As we have previously written, for all Suricata’s capabilities, building out an...

Read More
IMAGE: Scaling Suricata in the Enterprise - Consolidate Alerts and Logs

Scaling Suricata in the Enterprise - Consolidate Alerts and Logs

Dec 07, 2020 Peter Manev
SELKS, Open Source, Suricata, Network Security Monitoring, Stamus Security Platform, IDS-IPS

Background

As we have previously written, for all Suricata’s capabilities, building out an...

Read More

Scaling Suricata in the Enterprise - Tuning the Sensors

Nov 30, 2020 Peter Manev
SELKS, Open Source, Suricata, Network Security Monitoring, Stamus Security Platform, IDS-IPS

Background

As we have previously written, for all Suricata’s capabilities, building out an...

Read More

Scaling Suricata in the Enterprise - Centralizing Sensor Management

Nov 23, 2020 Peter Manev
SELKS, Open Source, Suricata, Network Security Monitoring, Stamus Security Platform, IDS-IPS

For all Suricata’s capabilities, building out an enterprise-scale deployment of Suricata with...

Read More
IMAGE: Scaling Suricata in the Enterprise - Optimize Sensor Placement

Scaling Suricata in the Enterprise - Optimize Sensor Placement

Nov 17, 2020 Peter Manev
SELKS, Open Source, Suricata, Network Security Monitoring, Stamus Security Platform, IDS-IPS

As we’ve written before, Suricata is a high-performance network threat detection, IDS, IPS and...

Read More

Just Released: Suricata 6

Oct 08, 2020 Peter Manev
Open Source, Suricata, Network Security Monitoring, IDS-IPS

Exciting news - the OISF just announced that Suricata 6 is now available. This is the culmination...

Read More
Did Network Detection and Response (NDR) kill Network Traffic Analysis (NTA)?

Is Network Traffic Analysis (NTA) dead in an age of Network Detection and Response (NDR)?

Aug 21, 2020 D. Mark Durrett
Network Detection and Response, Threat Hunting, Network Security Monitoring, Stamus Security Platform, IDS-IPS

Organizations seeking to proactively identify and respond to cyber threats in order to mitigate...

Read More

ABOUT STAMUS NETWORKS ™

Stamus Networks believes that cyber defense is bigger than any single person, platform, company, or technology. That’s why we leverage the power of community to deliver the next generation of open and transparent network defense. Trusted by security teams at the world’s most targeted organizations, our flagship offering – Clear NDR™ – empowers cyber defenders to uncover and stop serious threats and unauthorized network activity before they harm their organizations. Clear NDR helps defenders see more clearly and act more confidently through detection they can trust with results they can explain.

Indianapolis, USA Paris, France

Privacy

© 2014-2025 Stamus Networks, Inc. All rights Reserved.