iiinova — where your digital self keeps evolving

Seth Grover @guero.org · 24/09/2025

#Malcolm (malcolm.fyi) v25.09 features 🧠 threat intel improvements, new ⚙️ config options, 🆙 component updates, 🐛 fixes, more! Details @ github.com/idaholab/Malcolm/releases. Malcolm is a powerful tool suite for NSM 🕵🏻‍♂️. #Zeek #Arkime #NetBox #Suricata #NetworkTrafficAnalysis #networksecuritymonitoring

malcolm.fyi

Malcolm

A powerful, easily deployable network traffic analysis tool suite for network security monitoring

Seth Grover @guero.org · 12/08/2025

Check out our #Malcolm blog post on the #AWS Public Sector Blog: aws.amazon.com/blogs/public...! It's the first of two blog posts on deploying Malcolm on AWS (malcolm.fyi/docs/aws.html). Once you've read it, check out the discussion on GitHub at github.com/cisagov/Malc....

aws.amazon.com

Building a network traffic analysis system: Deploying Malcolm on Amazon EC2 | Amazon Web Services

In this post, we provide step-by-step guidance for deploying Malcolm—an open source network traffic analysis suite—natively on Amazon Elastic Compute Cloud (Amazon EC2), using the on-demand compute, e...

Seth Grover @guero.org · 30/07/2025

My team develops #Zeek network analyzers (github.com/cisagov/icsnpp) for #OT protocols. If you know this area, you know one of the hardest things is getting sample data. If you have traffic available for any of the more niche protocols on that list & are willing to share #PCAP, please reach out.

github.com

GitHub - cisagov/ICSNPP: Industrial Control Systems Network Protocol Parsers

Industrial Control Systems Network Protocol Parsers - cisagov/ICSNPP

032

Seth Grover @guero.org · 30/06/2025

Hey, y'all, if you use #Zeek (zeek.org), would you please take 10 minutes to fill out the Zeek Project Survey 2025 at zeek.org/survey? Let the Zeek team know how you feel about the project and help shape its direction moving forward. #PCAP #NetworkTrafficAnalysis #networksecuritymonitoring

zeek.org

Zeek Project Survey 2025

Thank you for sharing your experience with Zeek! This brief survey will take no more than 10 minutes to complete and will help us improve the tools, support, and community that make Zeek great. In thi...

Seth Grover @guero.org · 23/06/2025

#Malcolm (malcolm.fyi) v25.06.0 features 🔐 #rbac, other ✨ improvements, 🆙 component version updates, 🐛 bug fixes, & more. Details @ github.com/idaholab/Malcolm/releases. Malcolm is a powerful tool suite for NSM 🕵🏻‍♂️. #Zeek #Arkime #NetBox #Suricata #NetworkTrafficAnalysis #networksecuritymonitoring

A screenshot of the Malcolm documentation for the role-based access control feature, found at https://malcolm.fyi/docs/authsetup.html#AuthKeycloakRBAC

011

Seth Grover @guero.org · 06/05/2025

#Malcolm (malcolm.fyi) v25.04.1 contains a bevy of ✨ improvements, 🆙 component version updates, 🐛 bug fixes, and other great stuff. 👁 github.com/idaholab/Mal... for details! Malcolm is a powerful tool suite for NSM 🕵🏻‍♂️. #Zeek #Arkime #NetBox #Suricata #NetworkTrafficAnalysis #networksecuritymonitoring

malcolm.fyi

Malcolm

A powerful, easily deployable network traffic analysis tool suite for network security monitoring

000

Seth Grover @guero.org · 19/03/2025

#Malcolm (malcolm.fyi) v25.03.0 brings 🔐 auth via #Keycloak and with it #SSO, identity providers, and more! See the release notes github.com/cisagov/Malc... for more info! Malcolm is a powerful tool suite for NSM. #Zeek #Arkime #NetBox #Suricata #NetworkTrafficAnalysis #networksecuritymonitoring

The Malcolm landing page with Keycloak authentication enabled.

000

Reposted by Seth Grover

Bruno J. Navarro @brunojnavarro.bsky.social · 23/02/2025

seen in newark, new jersey 🔥

poster on a utility pole with a gray silhouette of a threatening figure, arms raised wearing a maga cap with a shadow of a similar figure wearing a nazi helmet behind them and the words

WE BEAT 'EM BEFORE …

WE’LL BEAT 'EM AGAIN!

59116372545

I apparently I screwed up attaching a photo to this. I guess you can just imagine in your mind's eye a picture of a guy reading a copy of little blue paperback book that says "The Book of Mormon" on the front, you've got the gist. Apologies if you've got aphantasia, you're on your own.

000

4/4 I promise to not get preachy about it or bug you about it further, unless you want me to. No strings attached. So let me know if you'd like a copy or have questions. I'm not interested in arguing or debating or anything like that. Thank you for coming to my TED talk.

000

3/4 Maybe you're already familiar. Or maybe you're thinking, "It's not my thing," and that's fine. But if you're thinking, "I always wondered what that was about" or "I used to have one, but tossed it," or even "What kind of kool-aid is this guy drinking?" and would like to know, I'll hook you up.

100

2/4 It's important for me to share the things that mean the most to me. One of those things for me is The Book of Mormon. I can say unequivocally that no other book has had an effect on my life and my relationship with Jesus more than this one.

100

Seth Grover @guero.org · 19/02/2025

1/4 I don't like to compartmentalize my life, so if you're following me you're going to see some of its various facets. This one's about religion: if that's not your thing I respect that, and hope you can scroll on without hard feelings.

A picture of a man reading The Book of Mormon.

200

I'm doing a #parents night at a local elementary school about helping #kids stay safe online. Here's my handout with my proposed talking points. Any advice/suggestions/something I'm missing? #parenting #onlinesafety #esafety #socialmedia

Helping Kids Stay Safe Online

• Trust and supervision
◦ Work with your kids, not against them, to set and keep your family’s technology rules
◦ Regularly review history, sites, apps, contacts and messages
◦ Let your kids know they can talk to you about anything they see online without fear of reprisal
◦ Communicate openly and often about the benefits and dangers of technology
• Sharing safely
◦ Set social media profiles to private
◦ Only friend people you know in real life
◦ Don’t share personally identifiable information
◦ Turn geotagging off
◦ Understand oversharing: once it’s shared, you can’t take it back
• Appropriate usage
◦ Establish schedules and time limits for screen time
◦ Keep screens in public locations
◦ Turn screens off at the table and well before bed
• Parental controls
◦ Find trusted sources and learn about your options
◦ Familiarize yourself with parental controls for the platforms you use (Windows, Android, macOS, iPhone, etc.)
◦ DNS-based content filtering for your home network (OpenDNS, CloudFlare, SafeDNS, CleanBrowsing)
• Recognize the signs of abuse, grooming, cyberbullying and self image issues
• Changes in mood, behavior and attention
• Problems with sleeping or appetite
• Worsening grades or problems at school
• Fear of missing out
• Spending less time outside
• Social withdrawal and isolation
• Avoiding talking about online activities
• Skipping school, sporting activities or hobbies
• Negative social comparison
• Lead by example
◦ Keep the same rules you expect them to keep when it comes to phone-free times and places
◦ Spend quality time with your kids without devices
◦ Don’t make your kids battle your phone for your attention

Seth Grover @guero.org · 05/02/2025

Amen, locking arms and bearing arms.

000

Reposted by Seth Grover

Fred Wellman @fpwellman.bsky.social · 03/02/2025

A group of uncleared, unvetted, civilians have gained access to all of my federal records including military personnel, retirement and disability. They are reportedly feeding them into AI. I want them arrested and charged with federal crimes. Right fucking now! How is this even a discussion?

524143104567

Seth Grover @guero.org · 19/12/2024

Malcolm (malcolm.fyi) v24.12.0 is out (github.com/cisagov/Malc...), with ✨enhancements, ✅component updates, and 🐛bug fixes. See the release notes for details. #Malcolm #HedgehogLinux #Zeek #Arkime #NetBox #Suricata #PCAP #NetworkTrafficAnalysis #networksecuritymonitoring #OT #ICS #CyberSecurity

A screenshot of the Malcolm landing page, with links for Dashboards, Arkime, Netbox, Cyberchef, etc.

020

Reposted by Seth Grover

Ricardo @rmendes.net · 16/12/2024

Map of GitHub anvaka.github.io/map-of-github #dataviz #github #coding

The link leads to a #dataviz of the github coding landscape
Shades of blue differentiate different coding languages and by zooming in, one can explore different github repositories.

043

Seth Grover @guero.org · 11/12/2024

For anybody that missed my presentation, here's the recording! www.youtube.com/watch?v=Bw__...

youtube.com

Zeek Webinar - Zeek File Extraction and Automating Malware Analysis

YouTube video by Zeek

011

Seth Grover @guero.org · 07/12/2024

Our old (11) #dog Peach and our young (< 2) #cat Toad are such good partners. In the winter, Peach gets to sleep in the shop under a heat lamp on the couch, and Toad is a faithful companion every night. It warms my heart. #catsanddogs #pets

040

Seth Grover @guero.org · 03/12/2024

Facial hair, but I'm biased. We've already got our tickets! It's going to be epic!

So TL;DR: I guess if anybody reads this who's got experience in this realm and has got any words of reassurance or advice for a dude going to his first therapy session next week, I'd love to hear it. Thanks. /6

100

Anyway, I don't really know what I'm expecting blasting this out into the ether like this. I'm just a bit nervous about the whole thing. I chose a female therapist because I've always been more comfortable talking with women (I don't know why, maybe therapy can tell me, lol 😅) so there's that. /5

000

I've had a bit of passive suicidal #ideation (don't worry, I'm not in danger) which is new for me, though, which I just kind of accepted as normal, but my wife has convinced me to give counseling a try, because apparently the target amount of thoughts like that is actually supposed to be "zero." /4

000

It's getting to the season that's toughest for me (between Thanksgiving and New Years) but usually I'm not coming into it already feeling this depressed so I'm hoping I can do something to get it under control before then. /3

000

I've got an appointment with a #therapist next week but I'm honestly like *way* more nervous than is rational, since I'm generally pretty good about talking about my feelings. What is this going to be like? What can I expect in our first session? What kind of stuff should I/can I talk about? /2

000

The Zeek Network Security Monitor @zeek.org · 20/11/2024

So I'm a 42/yo man who is going to be going to #therapy for the first time next week. I've been on meds (effexor xr 150mg) for a number of years for #depression and #anxiety but lately it's just not cutting it vis-a-vis prevailing feelings of worthlessness and dread. /1

510

Reposted by Seth Grover

The next Zeek Webinar just started. The topic is Parsnip: Lowering the Barrier of Entry for Parser Development, with Melanie Pierce from Idahp National Laboratory. Join us at www.youtube.com/watch?v=9Y0l...

youtube.com

Zeek Webinar - Parsnip: Lowering the Barrier of Entry for Parser Development

YouTube video by Zeek

011

Reposted by Seth Grover

The Zeek Network Security Monitor @zeek.org · 18/11/2024

We will host another Zeek webinar, Parsnip: Lowering the Barrier of Entry for Parser Development, by Melanie Pierce, on Wednesday 20 November at 1 pm ET. Register for free here: us06web.zoom.us/webinar/regi...

Seth Grover @mmguero.infosec.exchange.ap.brid.gy · 19/11/2024

Reposted by Seth Grover

My friend Melanie Pierce is presenting a Zeek webinar tomorrow at 10am PST on Parsnip a project she's a lead on here at #INL. If you're interested in #Zeek and #parser development, please hop on!

I just released v24.11.0 of #Malcolm (malcolm.fyi), a powerful, easily deployable network traffic analysis tool suite for #NSM. See github.com/cisagov/Malc... for details. #opensource #HedgehogLinux #Zeek #Arkime #Suricata #PCAP #CyberSecurity #Cyber #Infosec #INL #DHS #CISA #CISAgov

020

I'm curious what other #Python coders do to manage helper functions and classes to reuse across various scripts and projects to avoid copy/pasting. For the last few years I've maintained my own package on PyPi (pypi.org/project/mmgu...) that I add as a project dependency. Are there other approaches?

003

Some stuff I #selfhost in my #homelab: * PiHole/DNSCrypt * LLDAP * step-ca * Vaultwarden * Plex * Photoprism * Calibre-Web * audiobookshelf * Podgrab * croc and hostyoself relays * boringproxy * Ladder * Uptime Kuma * Gitea * Serverless container registry proxy * OwnTracks * transmission-openvpn

053

GitHub - dani-garcia/vaultwarden: Unofficial Bitwarden compatible server written in Rust, formerly known as bitwarden_rs

Amen. And for the self-hosting crowd, Vaultwarden (github.com/dani-garcia/...) is a great option too. I host my own vaultwarden server locally on a Pi on my home network with automated periodic backups. All the bitwarden clients (android, chrome/firefox extensions, standalone) are compatible.

github.com

Unofficial Bitwarden compatible server written in Rust, formerly known as bitwarden_rs - dani-garcia/vaultwarden

And rounding out the other end of our #pets brigade, here's our #dog Princess Toadstool "Peach" Grover, or just Peach for short. We've had Peach since she was a puppy. She's an old lady now (11) and we couldn't imagine our life with her. Bonus photo of Peach and our #cat Toad cuddling together.

A rite of passage on any new platform is to share pet pictures. I'd never been much for #cats but we've had this guy for almost a year and a half now and I can't believe how much we love him. His name is Toad, or Jarnathan Thaddeus Toad Grover, Esq., if you want to be formal.

A powerful, easily deployable network traffic analysis tool suite for network security monitoring

Professional: software developer in #cybersecurity R&D at Idaho National Lab (#INL) supporting #DHS #CISA. >21 years experience in software and cyber, previously at NitroSecurity, McAfee and Intel. Creator/dev/maintainer of Malcolm (malcolm.fyi), an #opensource network traffic analysis tool suite.

malcolm.fyi

Malcolm

122