dfir

I was working on a project where the logic was something like:

if (is_num(val))
  mycountval = to_count(val);

When an empty string slips in for val, is_num is T and it threw a bug in the code I was working on. The documentation is technically true:

https://docs.zeek.org/en/master/scripts/base/bif/strings.bif.zeek.html#id-is_num

Returns whether an entire string cons

https://github.com/google/timesketch/blob/fce0f54e20d9385b264f2401079dbeb5ad773a38/timesketch/frontend/src/components/Common/UploadForm.vue#L124

Uploading a foobar.txt file that has CSV content would still get uploaded and errored out on the backend side, even if the Client JS should error out already.

Request Method: POST
Status Code: 500 

I was wondering the benefit of using Modular File Management vs Single Config File Management? Why do you consider it easier to use multiple files and then compile? Trying to figure out what the best case is for my use case. Thanks. #