July 2014 Summaries

Sysdig version 0.1.85, announced by Gianluca Borello on July 9, 2014, primarily focuses on fixing two critical bugs that could lead to kernel panic under specific conditions and introduces a new feature for command completion in bash and zsh shells. This release enhances user experience by allowing users to use the TAB key for command completion, reducing the need to frequently consult the manual, with zsh offering more dynamic completions than bash. The update also outlines the installation paths for completion files depending on whether Sysdig is installed via binary repositories or from source, and encourages community contributions to enhance bash completion to match zsh's capabilities. Community support is available via the Sysdig mailing list, with bug and issue reports being managed through GitHub.

Sysdig has enhanced its forensics capabilities to help users identify suspicious activity more efficiently by introducing new features like the updated spy_users chisel and the list_login_shells chisel. These tools aid in analyzing command execution on Unix systems, making it easier to distinguish between interactive user sessions and automated scripts, which is crucial for identifying potential security breaches. The spy_users chisel now supports filtering based on indentation levels, allowing users to focus on significant activities, while list_login_shells helps pinpoint sessions containing specific commands or arguments, such as those often associated with hacking attempts. These improvements aim to streamline the process of detecting and investigating malicious activities, encouraging users to upgrade to the latest version of Sysdig for optimal functionality.