RawSec

Don’t tweet a lot, just what’s necessary!
If interested in the content posted by this account, please follow on Mastodon @[email protected]

[Kunai Project (@[email protected]) @kunai_project]

🚀 Kunai pushes further @MISPProject integration!

New tool kunai-to-misp (https://t.co/EYBK3WJiQ8) lets you push Kunai logs to MISP (https://t.co/2okB2GkELz) for better threat intel sharing.

#ThreatIntel #Linux #SOC #OpenSource #ThreatHunting

[Kunai Project (@[email protected]) @kunai_project]

Kunai v0.5.0 is here! 🔥 New start/error/event_loss events + file system event limiting & bug fixes. Enhanced observability. Check it out: https://t.co/60YJzXmqTh #dfir #soc #ebpf #opensource #Linux

[Kunai Project (@[email protected]) @kunai_project]

🎉 The Kunai Project will join https://t.co/KgzTrgPVtJ 2025 on April 8-9! Let’s work together toward a common goal.

📅 Details: https://t.co/CHBuurUyc1
🔎 Explore Kunai: https://t.co/oYgL2QxNkm

#OpenSource #ThreatHunting #Linux

[Alexandre Dulaunoy @[email protected] @adulau]

@HackingLZ Thanks for sharing. It’s still a draft, open to contributions and updates. The main idea was to avoid « common words » being used and difficult to index or reference later. Don’t hesitate if you have proposals: https://t.co/tR1P79IkZD

[Alexandre Dulaunoy @[email protected] @adulau]

New blog post: Improving Cybersecurity Taxonomies Describing Impact and Cyber Harms Against Organizations

https://t.co/ECb6l6xT0a

#CyberSecurity #MISP #taxonomies #taxonomy

[Kunai Project (@[email protected]) @kunai_project]

🚀 New Kunai Release! 🎉

Fixes zombie process tracking 🧟‍♂️, better configs, and new features:

- Composite Rules for modular logic
- File Create Event Tracking
- ...

Docs: https://t.co/UZPWo2Zkmd
Details: https://t.co/qnohz1qZ0e
#Linux #OpenSource #SOC #DFIR #ThreatHunting

[CIRCL - @[email protected] @circl_lu]

We’re delighted to announce the release of Vulnerability-Lookup 2.2.0, packed with enhancements, new features, and bug fixes.

Online version: https://t.co/qhFE7ptHg6
Release notes: https://t.co/ilZ7r7c4vS

#cve #vulnerability #vulnerabilities #opensource #CyberSecurity

[CIRCL - @[email protected] @circl_lu]

New features in vulnerability lookup includes sighting from different sources including @MISPProject communities. The example below is a vulnerability in Android but the CVE is not yet published. You can track the sighting evolution.

https://t.co/oD7cG1edwb

#vulnerability #cve

[Kunai Project (@[email protected]) @kunai_project]

🚀 New Stable Release! 🚀 Now with log rotation, an overhauled CLI, new kill event, and hardened mode with LSM for enhanced security. YARA-X integration brings advanced threat detection, and Community-ID supports easy network data correlation.

https://t.co/we6AAmZCTG

[hack_lu @hack_lu]

https://t.co/jIxEOJNCg1 2024 Wraps Up a Thrilling 18th Edition with Global Participation and Networking Highlights

https://t.co/mwhH4iLNia

#infosec #hacklu2024 #hacklu #conference #threatintelligence

[Alessandro Decina @alessandrod]

The biggest cheat code to get better at programming is to do open source, where you have to read other people's code, modify it, and learn to collaborate with people that don't necessarily share your views or priorities.

Hire (and generally fund) open source people.

[Mara @m_ou_se]

One of the biggest Rust releases in a long time! What's your favourite new feature?

[Kunai Project (@[email protected]) @kunai_project]

🎉 We're thrilled to announce Kunai v0.3.0-beta.1!

🔍 New features:

💡 Event monitoring for files written then closed
🌐 Corelight community-ID integration
🛠️ New CLI options for logs & service installation

Check it out: https://t.co/73Pdc4NBTq

#dfir #soc #threathunting

[RawSec @0xrawsec]

@UK_Daniel_Card If I understand well the Linux kernel version on the left I don't think they benefit from the latest changes in terms of security patch and features 🧐

[Kunai Project (@[email protected]) @kunai_project]

Enhancing Detection Engineering with Automated Malware Sandboxing with @kunai_project

#detectionengineering #infosec #edr #sandbox #opensource #threathunting

📘 Blog post - https://t.co/9bt8g1AcJz
🔎 Git repository - https://t.co/lNb0ca2dmi
🔗 Dataset - https://t.co/gNCy9H8gzp

[Pass the SALT Conference @passthesaltcon]

Based on an initial suggestion by @Regiteric during Kunai talk at #pts24 😍

When we say that developers and security practitioners from all different cyber communities have to meet & exchange IRL ... 🙏

It is the main purpose of @passthesaltcon conference!

[[email protected] / EDRmetry / PurpleLabs @cr0nym]

Zeek/Suricata IDS Community-id + Kunai Runtime Security = 💕

[Kunai Project (@[email protected]) @kunai_project]

@corelight_inc Community-ID is now integrated into Kunai enabling correlation with external traffic analysis tools (e.g., IDS). This helps identify which Linux process generated traffic tied to network alerts. #Linux #ThreatHunting #DFIR

Check it out: https://t.co/v4TVhvseMI

[hack_lu @hack_lu]

https://t.co/reuUA39Vtf 2024: A Can’t-Miss Cybersecurity Event in the Heart of Europe.

The conference agenda is live! Explore the latest sessions and workshops.

#conference #hacklu #luxembourg #europe #infosec #cybersecurity #workshop #training

🔗 https://t.co/IZup0WvdRk

[Alexandre Dulaunoy @[email protected] @adulau]

I published a new blog post - Improve Your Forensic Analyses with hashlookup

https://t.co/Q2OjpVfWXS

#dfir #forensics #digitalforensics #infosec #opensource #hashlookup #opensource