Epsilon

2024 Conference report

Website of the 2024 edition of the Pass the SALT conference

P7030556

Channels - Pass the SALT Archives

Catalog content browser.

Channels - Pass the SALT Archives

Catalog content browser.

Kunai Updates pts2024

In this talk, we'll delve into the evolution and foundational principles of Kunai, a specialized threat detection and hunting tool crafted for Linux environments. We'll revisit its core objectives while unveiling its latest features, including its integration with MISP and its detection rules engine, demonstrating how Kunai enhances daily Linux machine monitoring. Through practical demonstrations and real-world examples, attendees will learn how to leverage Kunai's capabilities to reinforce the security of Linux infrastructures against ever-evolving cyber threats.

Landlock workshop: Linux sandboxing in practice pts2024

The goal of this workshop is to illustrate how sandboxing can mitigate vulnerabilities. To showcase usefulness of sandboxing, we'll use an old and vulnerable version of ImageMagick, but all kind of applications could still be impacted by similar vulnerabilities. The CVE-2016-3714 vulnerability, aka ImageTragick, is caused by an insufficient shell characters filtering that can lead to (potentially remote) code execution. Thanks to Landlock, we'll restrict the convert tool's access rights before it can get exploited by opening a malicious file, and then mitigate the impact of such vulnerability. Attendees should be fluent in C, have a working Linux system, and follow these instructions (if possible before the workshop): https://github.com/landlock-lsm/workshop-imagemagick See https://landlock.io for useful links.