Rulezet (The detection rule management) v1.4.0 released — Taxonomy, Precision, and Advanced Discovery

Version 1.4.0 is a milestone update that transforms how intelligence is categorized and retrieved within Rulezet. By placing Tags and Taxonomies at the heart of the ecosystem, this release empowers users with granular control over their data. From private custom tagging to a revolutionary filtering engine, v1.4.0 ensures that finding the right rule is no longer a search—it’s a precision operation.

On the administrative side, we’ve introduced robust tools for visibility control and system resilience, including a new backup architecture and CVE sanitization to maintain data integrity across the platform.

🔗 Online version https://rulezet.org/
  Release notes https://github.com/ngsoti/rulezet-core/releases/tag/v1.4.0
🔗 Source code https://github.com/ngsoti/rulezet-core

#nids #ids #opensource #opendata #cybersecurity #detection #soc

@circl

Anyone ever used CrowdSec?

https://github.com/crowdsecurity/crowdsec

I mean the logo are 3 llamas with sunglasses, so @jerry must have used it 😂 (if not programmed it!)

#infosec #NIDS #HIDS #NIPS #HIPS

On dirait bien que certains nids d'hirondelles de la cave ont de la mousse neuve à l'intérieur. 👀

#nid #hirondelle #nids #hirondelles

→ Ces rapaces détruisent 25 000 nids de frelons asiatiques chaque année en Galice
https://lareleveetlapeste.fr/ces-rapaces-detruisent-25-000-nids-de-frelons-asiatiques-chaque-annee-en-galice/

« La #Bondrée_apivore est protégée des dards acérés de ses proies grâce à de toutes petites plumes très dures sur sa tête, et des paupières imperméables. Ses petites narines empêchent également les guêpes d’y rentrer, et le rapace serait probablement immunisé contre leur venin. Voici qu’elle s’attaque désormais aux #frelons_asiatiques. »

#nids #venin #Galice #guêpes #rapace

Zeek 8.0 is just around the corner, and we're excited to share pluggable connection keys. You can now customize how Zeek defines a connection beyond the classic 5-tuple. Want to key by VLAN IDs or VXLAN VNIs? You can write your own plugin to do it.

Find the docs and tutorial here: https://community.zeek.org/t/zeek-newsletter-issue-52-june-2025/7823#p-29412-pluggable-connection-keys-7

#Zeek #NetworkSecurity #OpenSource #NIDS #Zeek8

Jour 2
C'est très marrant :)

#oiseaux #pigeons #nids #birdsofmastodon

How to filter zeek logs:

cat conn.log | zeek-cut <columns> | column -t | less -S

(column and less display the columns aligned and readable)

#DFIR #knowledgedrop #NIDS #zeek