Introducing Kunai: A New Solution for DNS Logging and Ransomware Decryption

This chapter introduces Kunai, a security tool designed to replace Sysmon for Linux, enabling users to connect DNS requests with processes for enhanced log analysis. It also covers a newly developed decrypter for the Doonex ransomware, assisting victims in recovering their files.