A friendly reminder: Don't be afraid of #Linux #rootkits.

I have just released version 0.3.0 of rk-expose, a modern self-contained #rootkit detection tool that uses several techniques to detect signs of process hiding, file hiding, file content tampering from kernel or user space and can be used for hunting in large, diverse environments. rk-expose is written in #Rust.

Notable changes include:

• Clearer output format
• Generic improvements to process hiding detection to avoid false positives
• Improvements to cgroupfs process hiding detections
• A Velociraptor artifact
• An "auto" subcommand that runs checks using sensible defaults and interprets results

Really enjoying #hacklu2025 for the simple bits of wisdom

Found this while clearing out my Twitter account today. Sadly, it has aged well.

"IBM Consulting and Palo Alto Networks Announce Expansion of Key Strategic Cybersecurity Partnership"

UIs sind wie Witze. Wenn man sie erklären muss, sind sie nicht so gut.