News about https://xitter.cf/t.co/M4GilJbkcS
Luxembourg
Joined January 2024
- Tweets35
- Following0
- Followers99
- Likes12
🚀 Kunai pushes further @MISPProject integration!
New tool kunai-to-misp (github.com/kunai-project/pyk…) lets you push Kunai logs to MISP (misp-project.org) for better threat intel sharing.
#ThreatIntel #Linux #SOC #OpenSource #ThreatHunting
Kunai v0.5.0 is here! 🔥 New start/error/event_loss events + file system event limiting & bug fixes. Enhanced observability. Check it out: github.com/kunai-project/kun… #dfir #soc #ebpf #opensource #Linux
Kunai Project (@[email protected]) retweeted
"@kunai_project: threat-hunting tool for #Linux leveraging #eBPF with #kernel-level probes that capture critical events"
@breakawaybilly
github.com/kunai-project/kun…
🎉 The Kunai Project will join Hackathon.lu 2025 on April 8-9! Let’s work together toward a common goal.
📅 Details: hackathon.lu/
🔎 Explore Kunai: github.com/kunai-project/kun…
#OpenSource #ThreatHunting #Linux
🚀 New Kunai Release! 🎉
Fixes zombie process tracking 🧟♂️, better configs, and new features:
- Composite Rules for modular logic
- File Create Event Tracking
- ...
Docs: why.kunai.rocks/
Details: github.com/kunai-project/kun…
#Linux #OpenSource #SOC #DFIR #ThreatHunting
🚀 New Stable Release! 🚀 Now with log rotation, an overhauled CLI, new kill event, and hardened mode with LSM for enhanced security. YARA-X integration brings advanced threat detection, and Community-ID supports easy network data correlation.
github.com/kunai-project/kun…
🎉 We're thrilled to announce Kunai v0.3.0-beta.1!
🔍 New features:
💡 Event monitoring for files written then closed
🌐 Corelight community-ID integration
🛠️ New CLI options for logs & service installation
Check it out: github.com/kunai-project/kun…
#dfir #soc #threathunting
Kunai Project (@[email protected]) retweeted
Linux sandboxing infrastructure based on QEMU for virtualization and Kunai for sample monitoring - so cool! 🔥👏👏✌️
Enhancing Detection Engineering with Automated Malware Sandboxing with @kunai_project
#detectionengineering #infosec #edr #sandbox #opensource #threathunting
📘 Blog post - why.kunai.rocks/blog/2024/10…
🔎 Git repository - github.com/kunai-project/san…
🔗 Dataset - helga.circl.lu/NGSOTI/malwar…
Enhancing Detection Engineering with Automated Malware Sandboxing with @kunai_project
#detectionengineering #infosec #edr #sandbox #opensource #threathunting
📘 Blog post - why.kunai.rocks/blog/2024/10…
🔎 Git repository - github.com/kunai-project/san…
🔗 Dataset - helga.circl.lu/NGSOTI/malwar…
Kunai Project (@[email protected]) retweeted
Zeek/Suricata IDS Community-id + Kunai Runtime Security = 💕
@corelight_inc Community-ID is now integrated into Kunai enabling correlation with external traffic analysis tools (e.g., IDS). This helps identify which Linux process generated traffic tied to network alerts. #Linux #ThreatHunting #DFIR
Check it out: github.com/kunai-project/kun…
🔔 For those wondering how to gain visibility on their #Linux system for #ThreatDetection and #ThreatHunting:
Check out the Kunai Project! It's completely free and supports IoC-based detection, Yara rules, custom detection rules, and more.
New release: github.com/kunai-project/kun…
📷 A public preview of new features landing soon in the Kunai Project:
- Define actions triggered by detections
- Scan files with YARA as an action
💣 You can even detect #malware in #linux containers (see example)
Follow progress: github.com/kunai-project/kun…
🔧 I initiated the work on next version. I am already planning to add one security event generated when a task tries to kill another. If you'd like other events, reply to this post with your ideas. #linux #threathunting #threatdetection
🎉 New Kunai release with small enhancements concerning detection/filtering rules and aarch64 compatibility. This is the latest release for v0.2 as I'll start working on v0.3 to bring new events and new features. Check it out: github.com/kunai-project/kun…
Kunai Project (@[email protected]) retweeted
Learning from the Recent Windows/Falcon Sensor Outage - Causes and Potential Improvement Strategies in Linux with Open Source
circl.lu/pub/learning-from-f…
#infosec #crowdstrike #opensource #edr
Kunai Project (@[email protected]) retweeted
👏👏👏 to Quentin, the @kunai_project leader, for this blazing fast implementation of the feature request asked during the #kunai talk at our 2024 edition!
This is exactly the purpose of our conference: giving opportunity to FLOSS developers to interact with users and security professionals of their field ... or not!
List of achievements (code, idea, collab etc) since @passthesaltcon launch: pass-the-salt.org/achievemen… (what we are aware of!) 🚀
#sharingiscaring
Hey ! It seems there is a new Kunai release, featuring one of the functionality which has been asked to me two weeks ago at @passthesaltcon: aka log rotation. Check it out at: github.com/kunai-project/kun… cc:@DavidSzili @xme
Hey ! It seems there is a new Kunai release, featuring one of the functionality which has been asked to me two weeks ago at @passthesaltcon: aka log rotation. Check it out at: github.com/kunai-project/kun… cc:@DavidSzili @xme
Many thanks 🙏 to @xme for writing a blog post about Kunai. Check it out at isc.sans.edu/diary/Kunai+Kee…
Kunai Project (@[email protected]) retweeted
Today is the third day of @passthesaltcon. I'm learning about @kunai_project:
cfp.pass-the-salt.org/pts202…
It's a #sysmon alternative for #Linux targeted at #infosec, however I plant to use it to debug syslog-ng :-)
Kunai Project (@[email protected]) retweeted
SECOND DAY
Conference restarted with @kunai_project 🥰
Listening to Quentin JEROME at @passthesaltcon talking about:
Kunai Updates
cfp.pass-the-salt.org/pts202…
Kunai is a #Sysmon alternative for #Linux
#pts24