 Dmitry Ng
|
74831c4c97
|
feat: improved localization for new modules: shell, osquery, auditd
v1.3.0
|
2023-06-06 15:19:42 +03:00 |
|
|
Dmitry Ng
|
f1c1e49db1
|
fix: issue with default server module implementation in osquery modules
|
2023-05-27 20:17:58 +03:00 |
|
|
Dmitry Ng
|
0a3f02bc5f
|
fix: rpath value to /usr/lib/vxagent for linux modules
|
2023-05-25 14:53:54 +03:00 |
|
|
Dmitry Ng
|
a8be3ba0af
|
fix: auditd module tests
|
2023-05-25 14:50:02 +03:00 |
|
|
Dmitry Ng
|
af941e1c71
|
fix: tests for osquery and shell modules
|
2023-05-25 13:47:45 +03:00 |
|
|
Dmitry Ng
|
be3651d827
|
style: changed liter issues and bringing to a single style of modules
|
2023-05-25 11:53:27 +03:00 |
|
|
Dmitry Ng
|
a1df667c98
|
feat: bumped wineventlog module to the latest version
|
2023-05-25 11:43:15 +03:00 |
|
|
Dmitry Ng
|
dfbdbbc495
|
feat: bumped file_reader module to the latest version
|
2023-05-25 11:42:36 +03:00 |
|
|
Dmitry Ng
|
c18af383fd
|
feat: bumped sysmon version up to 14.16 to avoid security issue https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-29343
|
2023-05-24 19:46:04 +03:00 |
|
|
Dmitry Ng
|
599b5180e9
|
feat: major update of yara scanner module which brings new caching of scans result with policy timeout
|
2023-05-24 19:39:50 +03:00 |
|
|
Dmitry Ng
|
1e827cf5a0
|
feat: bump wineventlog module to the latest version and added topic mechanism to transmit raw events data
|
2023-05-24 19:09:42 +03:00 |
|
|
Dmitry Ng
|
d19f506558
|
fix: update correlator_linux bundle to the latest version
|
2023-05-24 17:34:26 +03:00 |
|
|
Dmitry Ng
|
8e032785d7
|
feat: added secure config to osquery_linux module
|
2023-05-24 17:04:59 +03:00 |
|
|
Dmitry Ng
|
d28ff67b4f
|
feat: added osquery_linux to the target build
|
2023-05-24 16:57:04 +03:00 |
|
|
Dmitry Ng
|
094fd0d190
|
Merge pull request #39 from vxcontrol/osquery_linux
add module osquery_linux v1.0.0
|
2023-05-24 16:51:02 +03:00 |
|
|
Dmitry Ng
|
ad90fa13b3
|
fix: added empty security config for osquery module
|
2023-05-24 15:51:49 +03:00 |
|
|
Dmitry Ng
|
34a0c99813
|
Merge pull request #27 from vxcontrol/osquery
add module osquery v1.0.0
|
2023-05-24 14:39:51 +03:00 |
|
|
Dmitry Ng
|
ce42366da7
|
Merge branch 'master' into osquery
|
2023-05-24 14:39:05 +03:00 |
|
|
Dmitry Ng
|
f3b4b61be3
|
feat: added auditd module to the target build
|
2023-05-24 14:34:47 +03:00 |
|
|
Dmitry Ng
|
fdcd94b4d9
|
Merge pull request #46 from cyberok-org/auditd
New module: auditd
|
2023-05-24 14:21:32 +03:00 |
|
|
Dmitry Ng
|
4baa30e8c7
|
Merge pull request #47 from cyberok-org/shell_module
Shell module
|
2023-05-24 14:17:51 +03:00 |
|
|
Dmitry Ng
|
bf545f1a7a
|
Merge pull request #48 from vxcontrol/bugfix/win_correlator
Bumped windows correlator implementation
|
2023-05-24 14:11:58 +03:00 |
|
|
Dmitry Ng
|
b3ce04b5c6
|
fix: bump correlator last update field to the latest version
|
2023-05-24 13:32:33 +03:00 |
|
|
Dmitry Ng
|
39c72a5577
|
fix: update correlator bundle to avoid issue with running it on windows 10 22H2
|
2023-05-24 12:54:29 +03:00 |
|
|
jnovikov
|
faa553a310
|
Shell: remove comments and debug prints.
|
2023-02-12 23:11:19 +00:00 |
|
|
jnovikov
|
afda35651c
|
Shell: add tests, config, fixes issues.
|
2023-02-12 20:33:12 +00:00 |
|
|
Aleksey Nikitin
|
03856d1336
|
auditd: revert luapower
|
2023-02-10 17:45:45 +03:00 |
|
|
Aleksey Nikitin
|
7ec96dd84c
|
auditd: fix tests on Oracle Linux 8
|
2023-02-10 17:08:54 +03:00 |
|
|
Aleksey Nikitin
|
75dd83eecf
|
auditd: disable installing make inside the testing docker images
|
2023-02-10 17:08:54 +03:00 |
|
|
Aleksey Nikitin
|
19514048aa
|
auditd: disable installing systemd inside the testing docker images
|
2023-02-10 17:08:54 +03:00 |
|
|
Aleksey Nikitin
|
b10cc7bfc0
|
auditd: update default config
|
2023-02-10 17:08:54 +03:00 |
|
|
Aleksey Nikitin
|
a0ca8fd1dc
|
auditd: watch after online audit rules
|
2023-02-10 17:08:54 +03:00 |
|
|
Aleksey Nikitin
|
2445f9bb0c
|
auditd: refactoring
|
2023-02-10 17:08:54 +03:00 |
|
|
Aleksey Nikitin
|
69886543bb
|
auditd: use try helper, refactoring
|
2023-02-10 17:08:54 +03:00 |
|
|
Aleksey Nikitin
|
ffb0b15cca
|
auditd: handle "error" event
|
2023-02-10 17:08:54 +03:00 |
|
|
Aleksey Nikitin
|
5a04c3a8a5
|
auditd: exec: fix typo
|
2023-02-10 17:08:54 +03:00 |
|
|
Aleksey Nikitin
|
77048d99ce
|
auditd: implement audit configuration watcher
|
2023-02-10 17:08:54 +03:00 |
|
|
Aleksey Nikitin
|
cd842fce75
|
auditd: provide configuration settings in UI
|
2023-02-10 17:08:54 +03:00 |
|
|
Aleksey Nikitin
|
e168a06f78
|
auditd: implement main module loop
|
2023-02-10 17:08:54 +03:00 |
|
|
Aleksey Nikitin
|
6687c3e552
|
auditd: Makefile: rafactor running tests in docker
|
2023-02-10 17:08:54 +03:00 |
|
|
Aleksey Nikitin
|
08d0876321
|
auditd: merge with the empty module template
|
2023-02-10 17:08:54 +03:00 |
|
|
Aleksey Nikitin
|
10cc0f34ae
|
auditd: exec: close stdin
|
2023-02-10 17:08:54 +03:00 |
|
|
Aleksey Nikitin
|
29ab89ff01
|
auditd: implement audit+config+rules setup
|
2023-02-10 17:08:54 +03:00 |
|
|
Aleksey Nikitin
|
977496eb24
|
auditd: add helper: managed.ensure_all()
|
2023-02-10 17:08:54 +03:00 |
|
|
Aleksey Nikitin
|
298e80e243
|
auditd: refactoring
|
2023-02-10 17:08:54 +03:00 |
|
|
Aleksey Nikitin
|
e715eaaf41
|
auditd: refactor testing inside docker
|
2023-02-10 17:08:54 +03:00 |
|
|
Aleksey Nikitin
|
1141e4f8fd
|
auditd: disable sync command for DNF/YUM
|
2023-02-10 17:08:54 +03:00 |
|
|
Aleksey Nikitin
|
fb768ad945
|
auditd: refactoring
|
2023-02-10 17:08:54 +03:00 |
|
|
Aleksey Nikitin
|
2b13bef44b
|
auditd: set package.path via .busted
|
2023-02-10 17:08:54 +03:00 |
|
|
Aleksey Nikitin
|
0a521c7b0a
|
auditd: add helper to manage configuration files
|
2023-02-10 17:08:54 +03:00 |
|