Large-scale distributed sensor network project to monitor DDoS and other malicious activities. by @circl_lu & co-funded from the EU #CEFTelecom Programme.
I finally updated the original @d4_project Passive DNS analyser into an independent Passive DNS which can have collection from COF web-socket streams. A sample COF stream is provided with the newly seen AAAA records.
github.com/D4-project/analyz…
We published open source metrics about @circl_lu contributions to projects that we maintain or co-maintain such as @MISPProject@ail_project and others.
opensource-metrics.circl.lu/
The open source security community is important, don't forget to tune in #FOSDEM this week-end.
🔝 Muy recomendable la herramienta #BGPRanking de @d4_project@circl_lu
Permite consultar la reputación de IP y ASN en base a IOCs en las que aparece, puedes consultar IP, obtener el ranking de un ASN, su historico, etc.
For this new year we would like to thank the 461 contributors to the @MISPProject who helped us to make MISP a better open source software, open standard and improved community for threat intelligence and information sharing at large.
#threatintel#ctimisp-project.org/contributor…
ALT A visualisation of the 461 contributors to the MISP project.
There are major work in progress in our IPASN-History open source project github.com/D4-project/IPASN-… - thanks to @rafi0t - the API is improved with OpenAPI and the @circl_lu instance will be updated. Stay tuned!
ALT An Update on Industrialize the Tracking of Botnet Operations – A Practical Case with Large Coin-Mining Threat-Actor(s)
Alexandre Dulaunoy, Jean-Louis Huynen
CSIRTs/CERTS, like CIRCL, are regularly tracking, monitoring and disturbing botnet networks. This can be a tedious task for incident responders. We will release the threat intelligence related to a large coin-mining threat-actor(s) during this talk. Excel sheets don’t scale any more and this case showed us when to automate and where the benefit from proper tooling is a gain for a team. We will also propose some techniques for continuous monitoring of threat actors.
"Publishing open data in the cyber security field"
d4-project.org/2021/10/04/pu… - having proper metadata while publishing dataset is critical. The open-data-security format from @circl_lu used in the scope of @VARIoT_project can help to better measure cyber security. #OpenData
Looking at #SolarWinds Serv-U issue, the SSH banners (found in our Passive SSH) are hilarious especially the FIPS compliant ones. If you are an adversary, it's maybe the first you would like to target...
The D4 Project by the numbers. Do you wonder what we did for the past 3 years and half for the D4 project. Have a look at the numbers. Thanks to @EU_HaDEA and @circl_lu for the funding. It's just the beginning of new open source tools and building blocks to improve security.
ALT D4 - By the numbers
- 22708 hours of work at CIRCL for D4 project on a period over
3 years and 6 months.
- 112 organisations (26 EU member states) got access and use
the D4 project data.
- D4 project infrastructure at CIRCL is composed of 14
bare-metal servers on a 10 Gbit/s Internet network capacity.
- 30 TB of metadata collected by D4 project including Passive
DNS, Passive SSL, dark-web monitoring and network
telescope.
-50 repositories of Open Source code.