Uncategorized

For a recent project, I needed all the NVD CVE and EPSS data in Elasticsearch and couldn’t find an easy way to do it, so I built CVElk. CVElk quickly builds a local Elastic Stack using docker compose with the help of a simple shell and python script. Philipp Krenn from Elastic also contributed an updated dashboard … Read more

Security Summer Camp, as it is colloquially known, is three security conferences that occur during the same week in Las Vegas. The three conferences that make up Security Summer Camp are: BSides Las Vegas Blackhat USA DEF CON While preparing for these conferences, I dug through their schedules and picked out the talks I was … Read more

Covid restrictions are starting to be relaxed, so I am beginning to feel like Willie and am getting on the road again, and in the next six weeks, I am attending and presenting at these four amazing events. BSidesKy I am amazingly excited to attend bsides.ky in the Cayman Islands at the end of May, … Read more

I have spent a lot of time this year working with CVE data and most of that time in Jupyter notebooks. Over the holiday season, I decided to build a website from these notebooks using Github Actions, Github Pages and NBConvert. CVE.ICU ended up being the end product, and here is the source code. It … Read more

In a Study in Scarlet, Sherlock Holmes said, “It is a capital mistake to theorize before one has data,” which is one of my favorite Sherlock quotes. For the last month or so, my team has been dealing with missing CPE data points in the Mitre CPE data, and it finally forced me to set … Read more