Still using a guinevere box here, and obviously it's long in the tooth.
I've updated all the rules for SA for it and written a bunch of my own
but I'm unhappy with it's filtering in the last 6 months or so. Part of
that would improve if I built a linux box and ran the current version
and used some plugins for it, but I'm wondering if it's worth the
effort. Development seems to have slowed dramatically on it, places
like SARE no longer update rules.. Has everyone else moved on?