rabbitstack

Follow

Nedim Šabić² rabbitstack

Follow

The place where bunnies dwell, and bits become colossal

189 followers · 8 following

Achievements

Achievements

Pinned Loading

fibratus Public

Adversary tradecraft detection, protection, and hunting

Go 2.3k 196
cubostratus Public

Blazingly fast Linux syscall collector

Rust 74 1
rabbitc Public

Micro container runtime

Rust 189 4
netmutatus Public

Linux TCP/IP stack manipulation via Netlink / Netfilter

Ruby 5

901 contributions in the last year

Learn how we count contributions

Less

More

Contribution activity

March 2025

Created 9 commits in 1 repository

rabbitstack/fibratus 9 commits

Opened 13 pull requests in 1 repository

rabbitstack/fibratus 6 open 7 merged

feat(rules): New Potential ClickFix infection chain via Run window rule
This contribution was made on Mar 24
feat(rules): New LSASS memory dump via MiniDumpWriteDump rule
This contribution was made on Mar 22
feat(filter): Thread pool filter fields
This contribution was made on Mar 21
chore(rules): Improve Unsigned DLL injection via remote thread rule
This contribution was made on Mar 20
fix(rule-engine): Add expire sequence condition for CreateThread event
This contribution was made on Mar 20
fix(ci): Only consider modified rules
This contribution was made on Mar 19
feat(rules): New Suspicious object symbolic link creation rule
This contribution was made on Mar 18
fix(filter): Interpolation for arg-based fields
This contribution was made on Mar 18
fix(rules): Add process executable exceptions for Potential process injection via tainted memory section rule
This contribution was made on Mar 14
fix(pe): Erratic driver identification
This contribution was made on Mar 14
fix(action): Fix isolate action
This contribution was made on Mar 12
perf(processors): Speed up image file characteristics parsing
This contribution was made on Mar 8
chore(callstack): Better expvar insights for stackwalk decorator
This contribution was made on Mar 8

Reviewed 4 pull requests in 1 repository

rabbitstack/fibratus 4 pull requests

fix(rules): Exclusion for OneDrive to tune false positives in Potential process hollowing rule
This contribution was made on Mar 8
fix(rules): Add CompatTelRunner.exe as an exclusion in Unusual process modified registry run key rule
This contribution was made on Mar 8
fix(rules): Add process exclusions in Potential privilege escalation via phantom DLL hijacking rule
This contribution was made on Mar 8
chore(rules): Improve Script interpreter host or untrusted process persistence rule
This contribution was made on Mar 8

23 contributions in private repositories Mar 10 – Mar 25