Hyde

Psst... ninjas. New Kunai rules. Go dig into it.

If something malicious runs on your Linux system, would you notice? Most of the time, it just looks like normal activity.

That's usually where detection falls apart. I've been updating my Kunai rules to make that easier to spot. The repository now has 200+ rules. Still a lot of iteration, mostly driven by real usage. Less noise. Better context.

200+ behavioral detection rules for Kunai (Linux eBPF). Covers MITRE ATT&CK with 92 techniques across execve, connect, DNS, file ops, ptrace, BPF, and more. Ready-to-use profiles for servers and desktops.

https://github.com/digisquad-repo/kunai-rules

Looking for an open-source cyber range solution?
We are building one ; designed for hands-on security training, community-driven, and freely available. Still a work progress but take a look

https://github.com/range42/range42

Ebpf rootkit analysis - https://www.synacktiv.com/en/publications/linkpro-ebpf-rootkit-analysis

collaborative threat intel platform to identify patterns and artifacts indicating potential exploitation or misuse of Large Language Models - https://promptintel.novahunting.ai/feed

You use Linux. But are you a ninja?  Do you use Kunai? No? You probably should. 🥷You cannot detect an attack if you cannot even see it. https://github.com/digisquad-repo/kunai-rules

Pixnapping: Bringing Pixel Stealing out of the Stone Age - https://www.pixnapping.com/pixnapping.pdf