Nedim Šabić² 🐰

warheart. I built fibratus.

[Nedim Šabić² 🐰 @arch_rabbit]

I'm thrilled to announce Fibratus - a modern tool for the Windows kernel tracing and observability built in @golang . Fibratus is the fruit of a lot of development
and research during the past two years.

To discover more about Fibratus, head to https://t.co/UYkj94uzNG

[Nedim Šabić² 🐰 @arch_rabbit]

One example: detecting files dropped over SMB and subsequently executed: a classic lateral movement pattern. The kernel callstack becomes the connective tissue between stages of execution, providing durable attribution that is more resistant to spoofing.

[Nedim Šabić² 🐰 @arch_rabbit]

I've uncovered a novel approach to identifying attack patterns through kernel frame callstacks.
While the userspace callstack telemetry has been widely used by modern security vendors, the kernel thread return addresses remain an unexplored territory.

[Nedim Šabić² 🐰 @arch_rabbit]

Fibratus now captures kernel return addresses and symbolizes them into module paths, exposing the exact drivers and kernel subsystems traversed during event execution. The result is a radically richer execution narrative that reveals context traditional telemetry cannot see

[Sai piano mood @impromptum2]

Hi all! I played Town Square from Kingdom Come: Deliverance
This is one of my favourite pieces from the game! ♥️
(Thank you for your support! )
@valtajan @WarhorseStudios
@thisistommckay ;)
#kcd

[Nedim Šabić² 🐰 @arch_rabbit]

🎉 Fibratus 3.0.0 has been released!

- Unprecedented performance gains and precision
- 50+ high quality rules (no AI slop ;)
- Improved telemetry and enrichment
Download: https://t.co/E9zxcoRdYs
Changelog: https://t.co/W7FqGdgrxA

[Sai piano mood @impromptum2]

🔥Fate of The Kingdoms from House of the Dragon @HouseofDragon
composed by Ramin Djawadi @Djawadi_Ramin
@HBO @StreamMaxES
https://t.co/AVmyqlx5Jr

Thank you for your support! ♥️

#HouseOfTheDragon #hbomax #GameOfThrones

[Sai piano mood @impromptum2]

Stranger Things Main Theme + Running Up That Hill mashup ending. Hope you like it and thank you for your support! ♥️
@Stranger_Things @StrangerNews11
@netflix
#StrangerThings5 #netflix #ST5

[Sai piano mood @impromptum2]

🌺Mayoi Uta is so beautiful! Here's my piano arrangement of it.
Thank you! ありがとうございます! ♥️
https://t.co/nYbdTtwWJq
@silenthill_jp @TeamSilentHill @DailySilentHill
#silenthillf

[Sai piano mood @impromptum2]

Cyrodiil!
#OblivionRemastered

[Sai piano mood @impromptum2]

A small tribute for fellow Dark Souls II fans. ♥️
https://t.co/7wryxPFyO8
#DarkSouls
@VaatiVidya

[Sai piano mood @impromptum2]

Quién más recuerda la música de este increíble juego? 🛡️🗡️
#JRPG #PlayStation

[Nedim Šabić² 🐰 @arch_rabbit]

@NinjaParanoid @elastic I'm following the lead of Elastic: https://t.co/feuQP7oK2H 😌

[Nedim Šabić² 🐰 @arch_rabbit]

🚀 Fibratus 2.4.0 is out!

I'm thrilled to announce the Fibratus 2.4.0 With over 100 commits, this release brings astonishing performance improvements, 24 new rules, threadpool telemetry and much more. Check the full change log
https://t.co/cDGpJcwOHU

[Clandestine @akaclandestine]

GitHub - rabbitstack/fibratus: Adversary tradecraft detection, protection, and hunting https://t.co/iZEvN2C9E1

[Nedim Šabić² 🐰 @arch_rabbit]

A short demo of the Eventlog alert sender
https://t.co/DVX8NBtUPJ

[Nedim Šabić² 🐰 @arch_rabbit]

Fibratus 2.3.0 is out!

🪲𝗥𝗲𝘃𝗮𝗺𝗽𝗲𝗱 𝗬𝗔𝗥𝗔 𝗺𝗲𝗺𝗼𝗿𝘆 𝘀𝗰𝗮𝗻𝗻𝗲𝗿
🪵𝗘𝘃𝗲𝗻𝘁𝗹𝗼𝗴 𝗮𝗹𝗲𝗿𝘁 𝘀𝗲𝗻𝗱𝗲𝗿
🕵 𝟭𝟬 𝗻𝗲𝘄 𝗱𝗲𝘁𝗲𝗰𝘁𝗶𝗼𝗻 𝗿𝘂𝗹𝗲𝘀
🪪 𝗠𝗦𝗜 𝗰𝗼𝗱𝗲 𝘀𝗶𝗴𝗻𝗶𝗻𝗴
🛡️ 𝗥𝘂𝗹𝗲 𝗹𝗮𝗻𝗴𝘂𝗮𝗴𝗲 𝗳𝗶𝗲𝗹𝗱𝘀

https://t.co/SMoc69oZsM

[Sai piano mood @impromptum2]

Hi! More SILENT HILL 2 OST 🌫️
Theme Of Laura (Reprise) composed by @AkiraYamaoka . The Soundtrack Preview inspired me for this one 😌.
https://t.co/DhHRe1kb6G
#SilentHill2Remake #KONAMI

@silenthill_jp @SilentHill @DailySilentHill @BlooberTeam @Konami @PlayStation Thank you!❤️

[Nedim Šabić² 🐰 @arch_rabbit]

@HadziomerovicB Money talks

[Sai piano mood @impromptum2]

🔥Dark Souls 3 - Firelink Shrine
(Full video on my YouTube channel)
#DarkSouls #fromsoftware #bandainamco