Kunai is a security monitoring tool for Linux. In this talk, I'll cover the most important updates since last year’s presentation at hack.lu, including the detection and filtering rule engine, IoC-based detections, file scanning with YARA rules, log storage with rotation, and more.