Nested Lands Preview (PC)

We’ve seen a plethora of survival games over the past decade, and while they all try something new, they end up with something similar. Nested Lands strives to be different, since it brings us a ruthless survival experience that seamlessly combines village building with combat and large-scale social management. Not only do you need to create your own village, but you also try to expand it, all while dealing with raiders and a variety of attackers.

It’s not easy to create your own village, especially when you are starting all on your own. However, once you accumulate some resources, you will be able to slowly build stuff and start recruiting people to your village. What started with a small building can easily become a thriving and beautiful village, provided that you take the time to do it properly.

For me, the start of the game felt the most challenging, because the game has a day/night system and during the night you barely see anything. The survival instincts ki...

SecRule REQUEST_URI "@rx ..." "id:1001,phase:1,deny,status:403"

find /var/www -type f -name "*.php" -mmin -120

ss -tunp | grep -E ":(4444|1337|8080|9001)"

apt update && apt --only-upgrade install <pkg>

title: Detect Exploitation - Nested Lands Preview (PC)
id: 720449f9-13d3-41be-af8a-0ab3225a54c6
status: experimental
description: Automatisch generierte SIEM-Erkennungsregel basierend auf CTI Intelligence
references:
  - https://tsecurity.de/
author: iShareStuff CTI Automated Detection Engine
date: 2026-09-25
logsource:
  category: network_connection
  product: any
detection:
  selection:
      CommandLine|contains:
        - 'exploit'
  condition: selection
falsepositives:
  - Legitime administrative Zugriffe oder Penetrationstests
level: high
tags:
  - attack.initial_access

rule CTI_Threat_Indicator {
    meta:
        author = "iShareStuff CTI Automated Detection Engine"
        date = "2026-09-25"
        description = "YARA Signature for "
    strings:
        $str = "Nested Lands Preview (PC)" ascii wide
    condition:
        any of them
}

index=security sourcetype IN ("cisco:asa", "pan:traffic", "zeek_conn", "suricata", "WinEventLog:Security")
("Nested Lands Preview PC")
| stats count earliest(_time) as first_seen latest(_time) as last_seen by src_ip, dest_ip, dest_host, signature
| eval first_seen=strftime(first_seen, "%Y-%m-%d %H:%M:%S"), last_seen=strftime(last_seen, "%Y-%m-%d %H:%M:%S")
| sort - count

message: "*Nested Lands Preview PC*"

CommonSecurityLog
| where Message has "Nested Lands Preview PC"
| summarize EventCount = count(), FirstSeen = min(TimeGenerated), LastSeen = max(TimeGenerated) by SourceIP, DestinationIP, DestinationPort, Activity
| extend DetectionRule = "iShareStuff-CTI-Compiled"
| sort by EventCount desc