D4 Project

Large-scale distributed sensor network project to monitor DDoS and other malicious activities. by @circl_lu & co-funded from the EU #CEFTelecom Programme.

[Alexandre Dulaunoy @[email protected] @adulau]

I finally updated the original @d4_project Passive DNS analyser into an independent Passive DNS which can have collection from COF web-socket streams. A sample COF stream is provided with the newly seen AAAA records.

https://t.co/E6qlzWaiSz

[CIRCL - @[email protected] @circl_lu]

FYI, the old IP ASN History is archived at @circl_lu and it is now https://t.co/XnN40CS9zO under the @d4_project and maintained over there.

[CIRCL - @[email protected] @circl_lu]

We published open source metrics about @circl_lu contributions to projects that we maintain or co-maintain such as @MISPProject @ail_project and others.

https://t.co/5C6eBl8N62

The open source security community is important, don't forget to tune in #FOSDEM this week-end.

[Sí, soy yo @nuria_imeq]

🔝 Muy recomendable la herramienta #BGPRanking de @d4_project @circl_lu
Permite consultar la reputación de IP y ASN en base a IOCs en las que aparece, puedes consultar IP, obtener el ranking de un ASN, su historico, etc.

[D4 Project @d4_project]

BGP Ranking software back-end version 2.0 released.

https://t.co/B6KARt06Wg

Release notes: https://t.co/MVWXrCp8vl

Online public version at @circl_lu :

https://t.co/DQSBVf8Ec1

Thanks to @rafi0t and all the supporters (@EU_HaDEA) . #ThreatIntelligence #opensource

[CIRCL - @[email protected] @circl_lu]

We are working on improvements to the @d4_project BGP Ranking core open source software.

CIRCL BGP Ranking now runs the current beta version with a faster database back-end. #ThreatIntelligence

Live https://t.co/g8yrTYIbwM
Source code https://t.co/Qg6wdw01nM

[Alexandre Dulaunoy @[email protected] @adulau]

Every day (and night) is such a gift to be in teams of talented individuals within @MISPProject @ail_project @circl_lu @d4_project @cerebrateproje1 and many others. I strongly the believe open source strength are the communities behind.

Happy new year!

https://t.co/t5MPfUEx7f

[D4 Project @d4_project]

There are major work in progress in our IPASN-History open source project https://t.co/v2qXyrGRaE - thanks to @rafi0t - the API is improved with OpenAPI and the @circl_lu instance will be updated. Stay tuned!

[Anna Felkner @Anna_cybersec]

It was a great presentation!

[D4 Project @d4_project]

We presented our updated pipeline for analysing botnets abusing tor2web gateways at @securepl using open source tools such as @d4_project @MISPProject and also Karton and MWDB from @CERT_Polska @NASK_pl

Slides: https://t.co/0I9sUxoQ8I

https://t.co/lJTbInROOn

[CIRCL - @[email protected] @circl_lu]

We (@gallypette and @adulau) will present at @securepl about our ongoing monitoring techniques of a botnet using Tor. It's an update of our @FIRSTdotOrg CTI presentation. https://t.co/wgcAo9yTXN #infosec

[D4 Project @d4_project]

"Publishing open data in the cyber security field"
https://t.co/VRr1kDWWOQ - having proper metadata while publishing dataset is critical. The open-data-security format from @circl_lu used in the scope of @VARIoT_project can help to better measure cyber security. #OpenData

[D4 Project @d4_project]

The @d4_project team (@Terrtia @gallypette @adulau @chrisred_68 ) will join the @circl_lu / @MISPProject hackathon (Monday 25th October 2021 and Tuesday 26th October 2021) https://t.co/237q0u5Mf9 #opensource #infosec - join us!

[MISP (@[email protected]) @MISPProject]

Open Source Security hackathon - Monday 25th October 2021 and Tuesday 26th October 2021 - don't hesitate to join us @MISPProject @circl_lu @ail_project @d4_project @cve_search @cerebrateproje1 @lookyloo_app and many others. #opensource #infosecurity

https://t.co/Sjg5yw5W5R

[AIL Project @ail_project]

AIL Framework version 3.7 released with many bugs fixed, improvement and new feeders (including Discord, ActivityPub and RSS/Atom). #threatintelligence #DarkWeb #opensource

https://t.co/9MJmjGfrOj

[AIL Project @ail_project]

AIL Framework version 3.6 released with new features (such as YARA retrohunt) and many bugs fixed. #ThreatIntel #dataleak #DarkWeb

https://t.co/Q04qXH14ah

[Alexandre Dulaunoy @[email protected] @adulau]

Looking at #SolarWinds Serv-U issue, the SSH banners (found in our Passive SSH) are hilarious especially the FIPS compliant ones. If you are an adversary, it's maybe the first you would like to target...

[D4 Project @d4_project]

The D4 Project by the numbers. Do you wonder what we did for the past 3 years and half for the D4 project. Have a look at the numbers. Thanks to @EU_HaDEA and @circl_lu for the funding. It's just the beginning of new open source tools and building blocks to improve security.

[CIRCL - @[email protected] @circl_lu]

The weird network scanning of the day from 36.27.214.242 (CN) targeting DNS on UDP (53): Bytes SzoBIAABAAAAAAAAB3ZlcnNpb24EYmluZMAbABAAAw==

[Alexandre Dulaunoy @[email protected] @adulau]

"Improving Internet Wide Scanning with Dynamic Scanning" - Slides https://t.co/MWwY94D6L9 given at #FIRSTCON21 @FIRSTdotOrg

[CIRCL - @[email protected] @circl_lu]

@malwaremustd1e @SeraphimDomain @Sug4r7 @adulau @FaLconIntel @trompi @jcanto @bletchley13 Thanks for the organisation and the whole team, it was great. Our slides are available there https://t.co/cJIRMQ1M5B including the open source release of the tooling used for monitoring botnets via tor2web services.