fibratus VS core

I'm excited to announce a new release of Fibratus - a tool for Windows kernel tracing and exploration focusing on runtime threat detection and prevention. Starting from this version, Fibratus is distributed with a catalog of detection rules built on top of the industry-recognized MITRE ATT&ACK framework. This initial catalog is focused on credential access, defense evasion, and initial access tactics. Still, the goal is to engage the community and security engineers who would help evolve and expand the catalog. Detection rules generate alerts and send them over a variety of notification channels, including email and Slack. Email rule alerts are turned into beautiful responsive HTML designs, as depicted in this image.

I've implemented a CPython wrapper to interact with the embedded Python interpreter. https://github.com/rabbitstack/fibratus/tree/master/pkg/filament/cpython

CPython bindings to spawn a full-fledged Python interpreter and permit interaction with the PVM. https://github.com/rabbitstack/fibratus/blob/master/pkg/filament/filament.go

If you have affinity for systems programming and security, https://github.com/rabbitstack/fibratus may be of your interest. I would be happy to mentor if needed.

If you're into security, threat detection and systems programming, fibratus may be a good fit. I would be happy to mentor and hand hold.

Fibratus - Tool for exploration and tracing of the Windows kernel.

I'm happy to announce fibratus 1.2.0 is out! This release brings some interesting features including DNS reverse lookups, function support in filters, new operators, and MSI-based installers among other changes and improvements. Here is the full changelog.

I'm happy to announce fibratus 1.2.0 is released. Fibratus is a tool for Windows kernel tracing and observability.

As a recap, StaticBackend is a simple backend server API easy to self-host or importable in Go program without hosting a separate server.

This release added SQLite as database provider using modernc.org/sqlite which does not require CGO. Another feature added is a full-text search using bleve package.

StaticBackend is a simple backend server API you may use to build complex web applications. Fully open source and easy to self-host. It handles lot of backend building blocks.

GitHub

I want to put StaticBackend on your radar. It's an open-source backend API I've worked on for more than 3.5+ years.

Since people often ask where they could contribute to a Go project, I thought I'd jump in as I took some times to create some good first contribution issues for StaticBackend.

It's not always present in issues what has to be done in a project. On that note, I'd shamelessly suggest to look at StaticBackend which is a backend API to help expedite v1 (MVP) launch time.

I can tell you what I like and don't like about my open source backend API (self-hosted Firebase) https://github.com/staticbackendhq/core