Announcing Fibratus 1.8.0 - a modern tool for Windows kernel tracing with a focus on security

• fibratus

  46 2,071 8.4 Go

  A modern tool for Windows kernel exploration and tracing with a focus on security

I'm excited to announce a new release of Fibratus - a tool for Windows kernel tracing and exploration focusing on runtime threat detection and prevention. Starting from this version, Fibratus is distributed with a catalog of detection rules built on top of the industry-recognized MITRE ATT&ACK framework. This initial catalog is focused on credential access, defense evasion, and initial access tactics. Still, the goal is to engage the community and security engineers who would help evolve and expand the catalog. Detection rules generate alerts and send them over a variety of notification channels, including email and Slack. Email rule alerts are turned into beautiful responsive HTML designs, as depicted in this image.

• attack-stix-data

  58 282 4.1 Python

  STIX data representing MITRE ATT&CK

  

I'm excited to announce a new release of Fibratus - a tool for Windows kernel tracing and exploration focusing on runtime threat detection and prevention. Starting from this version, Fibratus is distributed with a catalog of detection rules built on top of the industry-recognized MITRE ATT&ACK framework. This initial catalog is focused on credential access, defense evasion, and initial access tactics. Still, the goal is to engage the community and security engineers who would help evolve and expand the catalog. Detection rules generate alerts and send them over a variety of notification channels, including email and Slack. Email rule alerts are turned into beautiful responsive HTML designs, as depicted in this image.

• InfluxDB

  www.influxdata.com sponsored

  Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

  

Suggest a related project