Event JSON
{
"id": "114a3acd19e72caeccff560d306190a2fc804bb92fcef3bccc19da1ba65b04a2",
"pubkey": "3ba412ac4b14c4b37cd6ed16b9d262ad4ffefb05c5b6c6b3e15e381471b1221a",
"created_at": 1740277066,
"kind": 1,
"tags": [
[
"p",
"21ca6a4521b547d379327938623c8d582ac50d32d660476bb76035d16418fa8e",
"wss://relay.mostr.pub"
],
[
"p",
"9e08e88f664abd70b583209c193715fce47457b66be560951d0e7706fa545abe",
"wss://relay.mostr.pub"
],
[
"e",
"46e61bb908421a1b5e7584a7a5a7863774257649c132e1f917ddcaf734105f1d",
"wss://relay.mostr.pub",
"reply"
],
[
"proxy",
"https://infosec.exchange/users/mttaggart/statuses/114050797836770316",
"activitypub"
]
],
"content": "nostr:nprofile1qy2hwumn8ghj7un9d3shjtnddaehgu3wwp6kyqpqy89x53fpk4rax7fj0yuxy0ydtq4v2rfj6esyw6ahvq6azeqcl28qfeahud So I would be careful about over-specializing with your tools to start. AC Hunter needs Zeek data anyhow, so I would start with a Zeek sensor sending logs to a SIEM like Elastic or Splunk. You'll be able to see if the cams are talking outbound to anything, and seen the frequency quite plainly. You'll also be able to take advantage of open source alerting rules in Elastic, if you choose that route.",
"sig": "d5a9c54f712d6e3ff901cb780e9b4c9442be1e6360089d6a6b5b73b40b17339d839d53cefd4fcd0d1a19b7f6559602137d055496492e26310f385ad1eb26f581"
}
