iiinova — where your digital self keeps evolving

Seth Grover @guero.org · 24/09/2025

#Malcolm (malcolm.fyi) v25.09 features 🧠 threat intel improvements, new ⚙️ config options, 🆙 component updates, 🐛 fixes, more! Details @ github.com/idaholab/Malcolm/releases. Malcolm is a powerful tool suite for NSM 🕵🏻‍♂️. #Zeek #Arkime #NetBox #Suricata #NetworkTrafficAnalysis #networksecuritymonitoring

malcolm.fyi

Malcolm

A powerful, easily deployable network traffic analysis tool suite for network security monitoring

Seth Grover @guero.org · 12/08/2025

Check out our #Malcolm blog post on the #AWS Public Sector Blog: aws.amazon.com/blogs/public...! It's the first of two blog posts on deploying Malcolm on AWS (malcolm.fyi/docs/aws.html). Once you've read it, check out the discussion on GitHub at github.com/cisagov/Malc....

aws.amazon.com

Building a network traffic analysis system: Deploying Malcolm on Amazon EC2 | Amazon Web Services

In this post, we provide step-by-step guidance for deploying Malcolm—an open source network traffic analysis suite—natively on Amazon Elastic Compute Cloud (Amazon EC2), using the on-demand compute, e...

Seth Grover @guero.org · 30/07/2025

My team develops #Zeek network analyzers (github.com/cisagov/icsnpp) for #OT protocols. If you know this area, you know one of the hardest things is getting sample data. If you have traffic available for any of the more niche protocols on that list & are willing to share #PCAP, please reach out.

github.com

GitHub - cisagov/ICSNPP: Industrial Control Systems Network Protocol Parsers

Industrial Control Systems Network Protocol Parsers - cisagov/ICSNPP

032

Seth Grover @guero.org · 30/06/2025

Hey, y'all, if you use #Zeek (zeek.org), would you please take 10 minutes to fill out the Zeek Project Survey 2025 at zeek.org/survey? Let the Zeek team know how you feel about the project and help shape its direction moving forward. #PCAP #NetworkTrafficAnalysis #networksecuritymonitoring

zeek.org

Zeek Project Survey 2025

Thank you for sharing your experience with Zeek! This brief survey will take no more than 10 minutes to complete and will help us improve the tools, support, and community that make Zeek great. In thi...

Seth Grover @guero.org · 23/06/2025

#Malcolm (malcolm.fyi) v25.06.0 features 🔐 #rbac, other ✨ improvements, 🆙 component version updates, 🐛 bug fixes, & more. Details @ github.com/idaholab/Malcolm/releases. Malcolm is a powerful tool suite for NSM 🕵🏻‍♂️. #Zeek #Arkime #NetBox #Suricata #NetworkTrafficAnalysis #networksecuritymonitoring

A screenshot of the Malcolm documentation for the role-based access control feature, found at https://malcolm.fyi/docs/authsetup.html#AuthKeycloakRBAC

011

Seth Grover @guero.org · 06/05/2025

#Malcolm (malcolm.fyi) v25.04.1 contains a bevy of ✨ improvements, 🆙 component version updates, 🐛 bug fixes, and other great stuff. 👁 github.com/idaholab/Mal... for details! Malcolm is a powerful tool suite for NSM 🕵🏻‍♂️. #Zeek #Arkime #NetBox #Suricata #NetworkTrafficAnalysis #networksecuritymonitoring

malcolm.fyi

Malcolm

A powerful, easily deployable network traffic analysis tool suite for network security monitoring

000

Seth Grover @guero.org · 19/03/2025

#Malcolm (malcolm.fyi) v25.03.0 brings 🔐 auth via #Keycloak and with it #SSO, identity providers, and more! See the release notes github.com/cisagov/Malc... for more info! Malcolm is a powerful tool suite for NSM. #Zeek #Arkime #NetBox #Suricata #NetworkTrafficAnalysis #networksecuritymonitoring

The Malcolm landing page with Keycloak authentication enabled.

000

Reposted by Seth Grover

Bruno J. Navarro @brunojnavarro.bsky.social · 23/02/2025

seen in newark, new jersey 🔥

poster on a utility pole with a gray silhouette of a threatening figure, arms raised wearing a maga cap with a shadow of a similar figure wearing a nazi helmet behind them and the words

WE BEAT 'EM BEFORE …

WE’LL BEAT 'EM AGAIN!

59116372545

Seth Grover @guero.org · 21/02/2025

1/4 I don't like to compartmentalize my life, so if you're following me you're going to see some of its various facets. This one's about religion: if that's not your thing I respect that, and hope you can scroll on without hard feelings.

A picture of a man reading The Book of Mormon.

200

Seth Grover @guero.org · 19/02/2025

I'm doing a #parents night at a local elementary school about helping #kids stay safe online. Here's my handout with my proposed talking points. Any advice/suggestions/something I'm missing? #parenting #onlinesafety #esafety #socialmedia

Helping Kids Stay Safe Online

• Trust and supervision
◦ Work with your kids, not against them, to set and keep your family’s technology rules
◦ Regularly review history, sites, apps, contacts and messages
◦ Let your kids know they can talk to you about anything they see online without fear of reprisal
◦ Communicate openly and often about the benefits and dangers of technology
• Sharing safely
◦ Set social media profiles to private
◦ Only friend people you know in real life
◦ Don’t share personally identifiable information
◦ Turn geotagging off
◦ Understand oversharing: once it’s shared, you can’t take it back
• Appropriate usage
◦ Establish schedules and time limits for screen time
◦ Keep screens in public locations
◦ Turn screens off at the table and well before bed
• Parental controls
◦ Find trusted sources and learn about your options
◦ Familiarize yourself with parental controls for the platforms you use (Windows, Android, macOS, iPhone, etc.)
◦ DNS-based content filtering for your home network (OpenDNS, CloudFlare, SafeDNS, CleanBrowsing)
• Recognize the signs of abuse, grooming, cyberbullying and self image issues
• Changes in mood, behavior and attention
• Problems with sleeping or appetite
• Worsening grades or problems at school
• Fear of missing out
• Spending less time outside
• Social withdrawal and isolation
• Avoiding talking about online activities
• Skipping school, sporting activities or hobbies
• Negative social comparison
• Lead by example
◦ Keep the same rules you expect them to keep when it comes to phone-free times and places
◦ Spend quality time with your kids without devices
◦ Don’t make your kids battle your phone for your attention

Fred Wellman @fpwellman.bsky.social · 03/02/2025

Reposted by Seth Grover

A group of uncleared, unvetted, civilians have gained access to all of my federal records including military personnel, retirement and disability. They are reportedly feeding them into AI. I want them arrested and charged with federal crimes. Right fucking now! How is this even a discussion?

524143104567

Seth Grover @guero.org · 19/12/2024

Malcolm (malcolm.fyi) v24.12.0 is out (github.com/cisagov/Malc...), with ✨enhancements, ✅component updates, and 🐛bug fixes. See the release notes for details. #Malcolm #HedgehogLinux #Zeek #Arkime #NetBox #Suricata #PCAP #NetworkTrafficAnalysis #networksecuritymonitoring #OT #ICS #CyberSecurity

A screenshot of the Malcolm landing page, with links for Dashboards, Arkime, Netbox, Cyberchef, etc.

020

Reposted by Seth Grover

Ricardo @rmendes.net · 16/12/2024

Map of GitHub anvaka.github.io/map-of-github #dataviz #github #coding

The link leads to a #dataviz of the github coding landscape
Shades of blue differentiate different coding languages and by zooming in, one can explore different github repositories.

043

Seth Grover @guero.org · 07/12/2024

Our old (11) #dog Peach and our young (< 2) #cat Toad are such good partners. In the winter, Peach gets to sleep in the shop under a heat lamp on the couch, and Toad is a faithful companion every night. It warms my heart. #catsanddogs #pets

040

Seth Grover @guero.org · 22/11/2024

So I'm a 42/yo man who is going to be going to #therapy for the first time next week. I've been on meds (effexor xr 150mg) for a number of years for #depression and #anxiety but lately it's just not cutting it vis-a-vis prevailing feelings of worthlessness and dread. /1

510

Reposted by Seth Grover

The Zeek Network Security Monitor @zeek.org · 20/11/2024

The next Zeek Webinar just started. The topic is Parsnip: Lowering the Barrier of Entry for Parser Development, with Melanie Pierce from Idahp National Laboratory. Join us at www.youtube.com/watch?v=9Y0l...

youtube.com

Zeek Webinar - Parsnip: Lowering the Barrier of Entry for Parser Development

YouTube video by Zeek

011

Reposted by Seth Grover

The Zeek Network Security Monitor @zeek.org · 18/11/2024

We will host another Zeek webinar, Parsnip: Lowering the Barrier of Entry for Parser Development, by Melanie Pierce, on Wednesday 20 November at 1 pm ET. Register for free here: us06web.zoom.us/webinar/regi...

Seth Grover @mmguero.infosec.exchange.ap.brid.gy · 19/11/2024

Reposted by Seth Grover

My friend Melanie Pierce is presenting a Zeek webinar tomorrow at 10am PST on Parsnip a project she's a lead on here at #INL. If you're interested in #Zeek and #parser development, please hop on!

I just released v24.11.0 of #Malcolm (malcolm.fyi), a powerful, easily deployable network traffic analysis tool suite for #NSM. See github.com/cisagov/Malc... for details. #opensource #HedgehogLinux #Zeek #Arkime #Suricata #PCAP #CyberSecurity #Cyber #Infosec #INL #DHS #CISA #CISAgov

020

I'm curious what other #Python coders do to manage helper functions and classes to reuse across various scripts and projects to avoid copy/pasting. For the last few years I've maintained my own package on PyPi (pypi.org/project/mmgu...) that I add as a project dependency. Are there other approaches?

003

Some stuff I #selfhost in my #homelab: * PiHole/DNSCrypt * LLDAP * step-ca * Vaultwarden * Plex * Photoprism * Calibre-Web * audiobookshelf * Podgrab * croc and hostyoself relays * boringproxy * Ladder * Uptime Kuma * Gitea * Serverless container registry proxy * OwnTracks * transmission-openvpn

053

And rounding out the other end of our #pets brigade, here's our #dog Princess Toadstool "Peach" Grover, or just Peach for short. We've had Peach since she was a puppy. She's an old lady now (11) and we couldn't imagine our life with her. Bonus photo of Peach and our #cat Toad cuddling together.

A rite of passage on any new platform is to share pet pictures. I'd never been much for #cats but we've had this guy for almost a year and a half now and I can't believe how much we love him. His name is Toad, or Jarnathan Thaddeus Toad Grover, Esq., if you want to be formal.

A powerful, easily deployable network traffic analysis tool suite for network security monitoring

Professional: software developer in #cybersecurity R&D at Idaho National Lab (#INL) supporting #DHS #CISA. >21 years experience in software and cyber, previously at NitroSecurity, McAfee and Intel. Creator/dev/maintainer of Malcolm (malcolm.fyi), an #opensource network traffic analysis tool suite.

malcolm.fyi

Malcolm

122