Cyber Risks · Cisco Talos

Razorback Roadmap and Status Report

Summary: Cisco Talos published a status report on Razorback, its open-source detection framework, noting a 0.1.5 release on SourceForge as the last development on the proof-of-concept code first released at DEFCON the prior year. The team now has full-time developers funded by Sourcefire and is reimplementing the system on two-to-four-week cycles with quarterly tarball releases, with phase one using ActiveMQ and the Stomp protocol for data transmission and command and control.

What you should know: The project's own timeline puts completion of its Q2 development goals at the end of June, and the report states plainly that the roadmap is not a contract and not a guarantee - so anyone planning detection coverage around Razorback's response and data-block capabilities is working against an uncommitted schedule.

Read the original at Cisco Talos ↗

Topics
Malware
Related