Labrador Intrusion Detection / News: Recent posts

After a long hiatus, the new release of Labrador Intrusion Detection is out! Check out the release notes for a complete description of what's new!

As usual, please report any bugs (and fixes) to me so Labrador can become better and better every day keeping your systems safe ;-)

Enjoy Labrador!

Labrador is a Host-based Intrusion Detection System (HIDS) and Integrity Checker written in Perl. It aims to be a complete, free, multiplatform, and open-source solution for detecting modifications and tamperings in files.

This release fixes a bug in the <execute> tag and adds the -s (--silent) option to run without displaying anything. It also adds the "perlcheck.pl" script in the /tools subdirectory to automatically check and install any needed Perl modules (in case you're not using the binary version) and updates the documentation.... read more

Labrador Intrusion Detection's development is being branched to start preparing the 1.0 release (codenamed "rex").

This release will implement major changes in the code and also in the program's behavior. Labrador 1.0 will be separated in several Perl modules, such as Labrador::Simple, Labrador::Encryption, Labrador::Compression, and so on. This will make coding even easier, and (hopefully) attract contributors to the project.... read more

I hate webdesigning. And I'm not good at all with it either. But I've got a little too much "great tool, horrible site" messages, so I guess a lot of people didn't actually get the noir design that this page had - or maybe *I* was the one that didn't get it. Anyway, here it is:

http://labrador-ids.sf.net

a brand new design, with light colors, a menu on the left, and all that. I think it still sucks, but I'll let you be the judge. If you have any comments, sugestions, don't hesitate do email me. Thanks!

I was invited to do a presentation of Labrador on the 1st SegInfo, a congress in Rio de Janeiro. A lot of great people will present there, including Lance Spitzner (honeynet) and Nelson Murilo (chkrootkit). See you guys there!

More information in http://www.seginfo.com.br

This release fixes a few bugs found in version 0.7.0, and users should upgrade as soon as possible to enjoy labrador-ids at its best (well, at least until version 0.8.0 arrives ;-)

Hello everybody. Sorry for the delay, but version 0.7.0 is finally released!!! Please check the changelog for a complete list of features, which now include (among several others): email sending, database compression and encryption and a lot of other checks, like if there are new (or hidden, or executable, etc) in a specified directory, and a lot of other hash algorithms like SHA-512 and RIPEMD-160. Also regular expressions support in the rules file and...well, I could just go on and on but it's better if you just check it out!... read more

Labrador's one-hour lecture during the International Free Software Forum (FISL - Forum Internacional de Software Livre) in Porto Alegre, Brazil, was a major hit. The room was full of people who listened carefully as all the major features of Labrador 0.7.0 were explained. After the talk was over, there was also a demonstration of the tool and its source code at the Perl Mongers kiosk inside FISL.... read more

Stay tuned for Labrador 0.7.0! It will be released this week!