By Jay Jacobs (@jayjacobs)
Thu 16 January 2014 | tags: EDA, analysis, honeypot, R, -- (permalink)

I like honeypots. Not so much for what they show about individual attackers, but for what they can show about the trends across attackers. I’ve struggled to get good honeypot data though, so if anyone has access to data (or people with data) and ...

By Bob Rudis (@hrbrmstr)
Thu 16 January 2014 | tags: python, R, -- (permalink)

Readers of the data exploration in R post will have noticed the use of Python for the extraction of TLD components of malware domain names. The excerpt in question is below:

write.table(str_extract(mdl.df$domain, perl("^[a-zA-Z0-9\\-\\._]+")),
            file="/tmp/indomains.txt",
            quote=FALSE,
            col.names=FALSE,
            row ...