Commit Graph

  • 74831c4c97 feat: improved localization for new modules: shell, osquery, auditd master v1.3.0 Dmitry Ng 2023-06-06 15:19:42 +03:00
  • f1c1e49db1 fix: issue with default server module implementation in osquery modules Dmitry Ng 2023-05-27 20:17:58 +03:00
  • 0a3f02bc5f fix: rpath value to /usr/lib/vxagent for linux modules Dmitry Ng 2023-05-25 14:53:54 +03:00
  • a8be3ba0af fix: auditd module tests Dmitry Ng 2023-05-25 14:50:02 +03:00
  • af941e1c71 fix: tests for osquery and shell modules Dmitry Ng 2023-05-25 13:47:45 +03:00
  • be3651d827 style: changed liter issues and bringing to a single style of modules Dmitry Ng 2023-05-25 11:53:27 +03:00
  • a1df667c98 feat: bumped wineventlog module to the latest version Dmitry Ng 2023-05-25 11:43:15 +03:00
  • dfbdbbc495 feat: bumped file_reader module to the latest version Dmitry Ng 2023-05-25 11:33:01 +03:00
  • c18af383fd feat: bumped sysmon version up to 14.16 to avoid security issue https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-29343 Dmitry Ng 2023-05-24 19:44:33 +03:00
  • 599b5180e9 feat: major update of yara scanner module which brings new caching of scans result with policy timeout Dmitry Ng 2023-05-24 19:39:50 +03:00
  • 1e827cf5a0 feat: bump wineventlog module to the latest version and added topic mechanism to transmit raw events data Dmitry Ng 2023-05-24 19:09:42 +03:00
  • d19f506558 fix: update correlator_linux bundle to the latest version Dmitry Ng 2023-05-24 17:34:26 +03:00
  • 8e032785d7 feat: added secure config to osquery_linux module Dmitry Ng 2023-05-24 17:04:59 +03:00
  • d28ff67b4f feat: added osquery_linux to the target build Dmitry Ng 2023-05-24 16:57:04 +03:00
  • 094fd0d190 Merge pull request #39 from vxcontrol/osquery_linux Dmitry Ng 2023-05-24 16:51:02 +03:00
  • ad90fa13b3 fix: added empty security config for osquery module Dmitry Ng 2023-05-24 15:51:49 +03:00
  • 34a0c99813 Merge pull request #27 from vxcontrol/osquery Dmitry Ng 2023-05-24 14:39:51 +03:00
  • ce42366da7 Merge branch 'master' into osquery Dmitry Ng 2023-05-24 14:39:05 +03:00
  • f3b4b61be3 feat: added auditd module to the target build Dmitry Ng 2023-05-24 14:34:47 +03:00
  • fdcd94b4d9 Merge pull request #46 from cyberok-org/auditd Dmitry Ng 2023-05-24 14:21:32 +03:00
  • 4baa30e8c7 Merge pull request #47 from cyberok-org/shell_module Dmitry Ng 2023-05-24 14:17:51 +03:00
  • bf545f1a7a Merge pull request #48 from vxcontrol/bugfix/win_correlator Dmitry Ng 2023-05-24 14:11:58 +03:00
  • b3ce04b5c6 fix: bump correlator last update field to the latest version Dmitry Ng 2023-05-24 13:32:33 +03:00
  • 39c72a5577 fix: update correlator bundle to avoid issue with running it on windows 10 22H2 Dmitry Ng 2023-05-24 12:54:29 +03:00
  • faa553a310 Shell: remove comments and debug prints. jnovikov 2023-02-12 23:11:19 +00:00
  • afda35651c Shell: add tests, config, fixes issues. jnovikov 2023-02-12 20:33:12 +00:00
  • 03856d1336 auditd: revert luapower Aleksey Nikitin 2023-02-10 17:45:45 +03:00
  • 7ec96dd84c auditd: fix tests on Oracle Linux 8 Aleksey Nikitin 2023-02-07 21:38:37 +03:00
  • 75dd83eecf auditd: disable installing make inside the testing docker images Aleksey Nikitin 2023-02-07 19:31:44 +03:00
  • 19514048aa auditd: disable installing systemd inside the testing docker images Aleksey Nikitin 2023-02-07 12:24:15 +03:00
  • b10cc7bfc0 auditd: update default config Aleksey Nikitin 2023-02-07 12:16:25 +03:00
  • a0ca8fd1dc auditd: watch after online audit rules Aleksey Nikitin 2023-02-06 20:03:10 +03:00
  • 2445f9bb0c auditd: refactoring Aleksey Nikitin 2023-02-05 21:13:52 +03:00
  • 69886543bb auditd: use try helper, refactoring Aleksey Nikitin 2023-02-05 18:16:45 +03:00
  • ffb0b15cca auditd: handle "error" event Aleksey Nikitin 2023-02-05 16:30:19 +03:00
  • 5a04c3a8a5 auditd: exec: fix typo Aleksey Nikitin 2023-02-05 16:13:37 +03:00
  • 77048d99ce auditd: implement audit configuration watcher Aleksey Nikitin 2023-02-05 15:02:09 +03:00
  • cd842fce75 auditd: provide configuration settings in UI Aleksey Nikitin 2023-02-03 19:24:35 +03:00
  • e168a06f78 auditd: implement main module loop Aleksey Nikitin 2023-02-03 19:14:21 +03:00
  • 6687c3e552 auditd: Makefile: rafactor running tests in docker Aleksey Nikitin 2023-02-03 18:35:28 +03:00
  • 08d0876321 auditd: merge with the empty module template Aleksey Nikitin 2023-02-03 11:59:42 +03:00
  • 10cc0f34ae auditd: exec: close stdin Aleksey Nikitin 2023-02-02 22:07:49 +03:00
  • 29ab89ff01 auditd: implement audit+config+rules setup Aleksey Nikitin 2023-02-02 19:29:02 +03:00
  • 977496eb24 auditd: add helper: managed.ensure_all() Aleksey Nikitin 2023-02-02 11:30:10 +03:00
  • 298e80e243 auditd: refactoring Aleksey Nikitin 2023-02-02 11:28:29 +03:00
  • e715eaaf41 auditd: refactor testing inside docker Aleksey Nikitin 2023-02-01 11:59:21 +03:00
  • 1141e4f8fd auditd: disable sync command for DNF/YUM Aleksey Nikitin 2023-02-01 11:56:45 +03:00
  • fb768ad945 auditd: refactoring Aleksey Nikitin 2023-01-31 22:51:25 +03:00
  • 2b13bef44b auditd: set package.path via .busted Aleksey Nikitin 2023-01-31 19:54:09 +03:00
  • 0a521c7b0a auditd: add helper to manage configuration files Aleksey Nikitin 2023-01-31 19:50:24 +03:00
  • 0edb31670c auditd: refactoring Aleksey Nikitin 2023-01-30 23:06:22 +03:00
  • 665fc773ec auditd: pkg.Manager supports alternative names in install() Aleksey Nikitin 2023-01-30 14:53:19 +03:00
  • 4ea8a4bb93 auditd: refactoring Aleksey Nikitin 2023-01-30 10:21:56 +03:00
  • 8df2641f71 auditd: support package managers: YUM, DNF Aleksey Nikitin 2023-01-29 17:29:30 +03:00
  • ab2ae0e487 auditd: refactoring Aleksey Nikitin 2023-01-28 12:14:29 +03:00
  • c0fd490a93 auditd: refactoring Aleksey Nikitin 2023-01-27 20:47:45 +03:00
  • 862659a747 auditd: implement package installation Aleksey Nikitin 2023-01-27 18:01:33 +03:00
  • 0eafc0cfb5 auditd: luajit-busted: fix PATH Aleksey Nikitin 2023-01-27 16:53:55 +03:00
  • f9ef7b0dcc auditd: improve luajit/busted helpers Aleksey Nikitin 2023-01-27 15:02:49 +03:00
  • a2c586c809 auditd: add helpers to run luajit/busted Aleksey Nikitin 2023-01-27 11:56:58 +03:00
  • e017a46a59 auditd: add format_cmd helper Aleksey Nikitin 2023-01-26 19:43:37 +03:00
  • 281f6d71f8 auditd: add exec helper Aleksey Nikitin 2023-01-26 19:42:45 +03:00
  • 9640b655ff Shell: Implemented module. jnovikov 2023-02-09 23:54:01 +00:00
  • 06b2fab216 fix: yara_scanner module rules json file running on linux Dmitry Ng 2023-01-26 21:52:40 +03:00
  • 5aab1e119f add module osquery_linux v1.0.0 Roman 2023-01-09 19:56:16 +03:00
  • fd8b19d458 add module osquery v1.0.0 Roman 2022-12-15 20:32:25 +03:00
  • a943faf956 Merge pull request #38 from vxcontrol/fix-luacov-import Dmitry Ng 2023-01-16 11:23:41 +03:00
  • d5324301ed Feature/improve protocol (#43) Mikhail Kochegarov 2023-01-16 18:19:36 +10:00
  • 89c123afa7 fix importing luacov for tests running Roman 2022-12-29 20:22:47 +06:00
  • e26ea21191 preserve actions list while getting them from callback data (#36) Mikhail Kochegarov 2023-01-16 17:47:26 +10:00
  • 0e3500583e Merge pull request #41 from cyberok-org/tests-fix-setup Dmitry Ng 2023-01-16 10:36:57 +03:00
  • 127a97795c Suppress debug output by default in the tests (#40) Aleksey Nikitin 2023-01-15 15:16:06 +03:00
  • 909306160c Tests: move effecting code from description to setup Aleksey Nikitin 2023-01-10 14:40:28 +03:00
  • 89005d4e34 Merge pull request #7 from vxcontrol/issue-2-add-github-templates v1.1.0 Dmitry Ng 2022-12-26 11:42:18 +03:00
  • 43df33625b feat: add recommended extensions Dmitry Ng 2022-12-22 21:59:04 +03:00
  • 989cc8a0dd fix: linter issues in file_reader and wineventlog modules Dmitry Ng 2022-12-22 21:57:31 +03:00
  • c5bfb2bc8a fix: bug in file_remover module with proxying browser requests to the agent Dmitry Ng 2022-12-22 20:05:04 +03:00
  • 16202c0b3c fix: using utils in file_remover module Dmitry Ng 2022-12-22 19:01:29 +03:00
  • 2e09f2fb59 fix: unexpected args.json file format in file_remover module Dmitry Ng 2022-12-22 18:41:19 +03:00
  • 8c0cdb92df [issue-2] add templates Aleksandr Abroskin 2022-12-22 18:20:29 +03:00
  • 40647f6cde Merge pull request #35 from vxcontrol/sync_modules Dmitry Ng 2022-12-22 10:34:34 +03:00
  • 357bb09836 chore: bump last_update modules field to synchronize it on the product installations; affected modules: file_uploader Dmitry Ng 2022-12-21 23:23:19 +03:00
  • ba8311d7e6 Merge pull request #34 from cyberok-org/ab/XDR-78-2 Dmitry Ng 2022-12-21 23:20:59 +03:00
  • 5469e06baa chore: bump last_update modules field to synchronize it on the product installations; affected modules: sysmon, file_remover, proc_terminator, file_reader, correlator_linux Dmitry Ng 2022-12-21 23:05:27 +03:00
  • 7cf37a9683 feat: add tests for proc_terminator module Dmitry Ng 2022-12-21 22:56:29 +03:00
  • 94c1543b1e fix: missing class name for luacheckrc config Dmitry Ng 2022-12-21 21:17:53 +03:00
  • 938e000ba3 feat: bump version of sysmon executable files up to v14.13 Dmitry Ng 2022-12-21 21:17:16 +03:00
  • 8ed3604ea2 fix: declaration of winapi constants in proc_terminator module Dmitry Ng 2022-12-21 21:10:31 +03:00
  • a5030cf001 fix: change vue file style for file_reader module Dmitry Ng 2022-12-21 21:05:53 +03:00
  • fdd581324c fix: update linux libraries for correlator_linux and file_reader modules to old linux support Dmitry Ng 2022-12-21 21:04:41 +03:00
  • 793f835932 XDR-78: fix to upload files with cyrillic sympols in filename (on windows) BurovAV 2022-12-21 20:36:42 +03:00
  • e0f94fda6f Merge pull request #33 from vxcontrol/module_protocol Dmitry Ng 2022-12-21 17:39:21 +03:00
  • 67a94ae3b3 Merge pull request #22 from cyberok-org/rewind-log-file-reading-on-demand Dmitry Ng 2022-12-21 17:35:50 +03:00
  • 701cf72ea1 add junit test results output formatter Mikhail Kochegarov 2022-12-20 21:50:34 +10:00
  • 616faaa8d5 add file_remover unit tests Mikhail Kochegarov 2022-12-20 21:50:05 +10:00
  • c6b6df1ce6 refactor file_remover to use new common module protocol implementation Mikhail Kochegarov 2022-12-20 21:49:47 +10:00
  • 8d829e8c88 remove outdated module tests Mikhail Kochegarov 2022-12-20 21:49:11 +10:00
  • d962eb358d add common module protocol implementation Mikhail Kochegarov 2022-12-20 21:48:44 +10:00
  • 7fc9e94903 fix utils/mock Mikhail Kochegarov 2022-12-20 21:48:15 +10:00
  • 90c1c37c64 Merge pull request #32 from vxcontrol/luapower_repository_link_update Dmitry Ng 2022-12-20 17:49:08 +03:00