🆕 Explore the new ndaal SBOM Auditor demo!

Inspect Software Bills of Materials (SBOMs) and explore how better SBOM analysis can support software supply-chain security.

🌐 Demo: sbom.ndaal.eu
🦀 Open Source : crates.io/crates/sbom-...

Try it out and share your feedback!

#ndaal #sbom #opensource

🚀 New release of the ndaal CSAF demo!

Explore CSAF security advisory management, validation, and triage in action.

🔎 Demo: csaf.ndaal.eu
🦀 Open source Rust project: crates.io/crates/csaf-...

#ndaal #csaf #triage #opensource

🐧 Updated: the ndaal best-practice auditd rule set for Linux.
Apache-2.0, 1,369 commits, 44 tags since April 2023.
gitlab.com/ndaal_open_s...
#auditd #ndaal #opensource #linux #security

Track unauthorized compute utilization by monitoring binary execution of legacy and rogue miners like `minerd`.

Rules:
-a always,exit -F arch=b64 -F path=/usr/bin/minerd -F perm=x -F key=T1496_Resource_Hijacking

Detect unauthorized ..

#ndaal #auditd #linux #opensource

gitlab.com/ndaal_open_s...

Detect non-system users (`auid>=500`) reading vulnerability data history stored by `debsecan`.

Rules:
-a always,exit -F arch=b64 -F dir=/var/lib/debsecan/ -F perm=r -F auid>=500 -F auid!=-1 -F key=T1005_Data_From_Local_System
#ndaal #auditd #linux

Detect any unauthorized modification, write, or truncation attempts against your core Linux audit system logs.

Rules:
-a always,exit -F arch=b64 -F dir=/var/log/audit/ -F perm=wa -F key=T1685.004_Disable_or_Modify_Tools_Disable_or_Modify_Linux_Audit_System_Log

#ndaal #auditd #linux

🐧 Updated: the ndaal best-practice auditd rule set for Linux.
Apache-2.0, 1,369 commits, 44 tags since April 2023.
gitlab.com/ndaal_open_s...
#auditd #ndaal #opensource #linux #security

🐧 Updated: the ndaal best-practice auditd rule set for Linux.
Apache-2.0, 1,369 commits, 44 tags since April 2023.
gitlab.com/ndaal_open_s...
#auditd #ndaal #opensource #linux #security

🐧 Updated: the ndaal best-practice auditd rule set for Linux.
Apache-2.0, 1,369 commits, 44 tags since April 2023.
gitlab.com/ndaal_open_s...
#auditd #ndaal #opensource #linux #security

It's here: archmeld 🎉
A secure, memory-safe CLI for archive extraction, inspection & decompression — 100% safe Rust.
🛡️ zip-bomb & path-traversal protection
📦 ZIP, TAR, 7z, CAB, .deb, XAR/PKG, LZ4, gzip
🔓 MIT OR Apache-2.0
cargo binstall archmeld
#ndaal #uncompress #opensource #Rust

🦀 nvulnlookup 1.2.67 — correlate vulnerabilities across sources, independent of vulnerability IDs.

194 feeders: CVE, CSAF, KEV, EPSS, vendor advisories
Meilisearch search · REST API · RSS/Atom
Single binary, Apache-2.0

nvulnlookup.ndaal.eu/about

#ndaal #Rust #opensource #vulnerability #osint