c87297eb2a
Island: fix a bug in lm_hash_processor.py
2022-02-22 17:40:56 +02:00
80bf561820
Island: fix a bug in lm_hash_processor.py
2022-02-22 17:40:56 +02:00
600753b53c
Island: add username processor
2022-02-22 17:40:56 +02:00
4b3750076a
Agent, Island, Common: change code to process CredentialType value
...
Island: rename credentials_type.py
2022-02-22 17:40:55 +02:00
bb760c7e8a
Island: fix detection if credential is a keypair
2022-02-22 17:21:48 +02:00
d874cd9d5a
Agent: fix broken pwd import on windows for ssh_handler.py
2022-02-22 17:18:57 +02:00
b344676425
Agent: add basic log statements to the mimikatz collector
2022-02-22 17:18:32 +02:00
036388e704
Agent: don't log the contents of credentials telemetries
2022-02-22 17:18:31 +02:00
b224348881
Island: Fix credential collector parsing for SSH
2022-02-22 17:18:31 +02:00
c96674f834
Island, Agent: fixed imports to reference credential type enum in common
2022-02-22 17:18:31 +02:00
73434537fe
Island: remove system_info processing file
...
No system info telemetries need to be processed anymore
2022-02-22 17:18:31 +02:00
5471e9854c
Island: remove credentials parsing boundary
2022-02-22 17:18:31 +02:00
a8717dc691
Agent: rename and move credentials_type enum to common
2022-02-22 17:18:31 +02:00
597fe35806
Island: Remove WMI handler that processed wmi info
...
* Leftover from broken info gathering package
2022-02-22 17:18:31 +02:00
5c5e170296
Island: Add processors for credentials
2022-02-22 17:18:31 +02:00
96bd7bca24
Merge pull request #1728 from guardicore/1605-modify-exploit-result-data
...
Modify ExploiterResultData
2022-02-22 20:38:22 +05:30
b91f3b1551
Agent: Fix comment in ExploitTelem
2022-02-22 17:54:31 +05:30
f0679ebb26
Agent: Move `pwd`'s import statement to avoid using try/except
2022-02-22 17:49:08 +05:30
e47239f81c
Island: Modify exploit telemetry processing to conform to changes to ExploiterResultData
2022-02-22 14:08:39 +05:30
dff5bde894
UT: Modify ExploitTelem calls in UTs
2022-02-22 12:50:01 +05:30
afb7210179
Agent: Modify ExploitTelem to accept param of type ExploiterResultData
2022-02-22 12:47:42 +05:30
4b83c79134
Merge pull request #1724 from guardicore/1605-pass-wormconfig-options
...
1605 pass wormconfig options
2022-02-21 13:52:28 +01:00
c83285c782
Agent: Modify exploiters to have general and exploiter options
2022-02-21 13:45:58 +01:00
10d8dc1f33
Merge pull request #1729 from guardicore/1605-remove-skip_exploit_if_file_exist-config-option
...
Remove `skip_exploit_if_file_exist` config option
2022-02-21 17:59:51 +05:30
3c80e1c38b
UT: Remove `skip_exploit_if_file_exist` config field
2022-02-21 16:46:23 +05:30
201a838e23
Island: Remove `skip_exploit_if_file_exist` from internal config
2022-02-21 16:45:45 +05:30
e6f4c74b79
Agent: Remove `skip_exploit_if_file_exist` option
2022-02-21 16:45:17 +05:30
1cce742692
UT: Fix UTs as per changes to ExploiterResultData and ExploitTelem
2022-02-21 16:02:00 +05:30
125412ee18
Agent: Rename variables to make more sense
2022-02-21 14:50:33 +05:30
a9e000f100
Agent: Modify ExploitTelem based on ExploiterResultData changes
2022-02-21 14:38:12 +05:30
9f01aa0a0d
Agent: Add try/except for importing pwd (can't do it on Windows)
2022-02-21 13:49:40 +05:30
ae856383a9
UT: Modify UTs to conform to modified ExploiterResultData
2022-02-21 13:27:11 +05:30
add9c3a4fe
Agent: Modify mock puppet to conform to modified ExploiterResultData
2022-02-21 13:26:25 +05:30
8d0fa3faef
Agent: Modify ExploiterResultData to have more details
2022-02-21 13:18:53 +05:30
6150610bdc
Agent: Remove HostExploiter's dependency on Plugin
...
Issue #1605
PR #1725
2022-02-21 09:29:45 +02:00
250530b456
Agent: Remove disused HostScanner abstract class
2022-02-20 14:21:21 -05:00
17be51fe71
Agent: Remove disused HostFinger abstract class
2022-02-20 14:20:33 -05:00
ccfe0a773e
Agent: Use filecmp instead of sha256 hash in ransomware payload
2022-02-20 14:03:42 -05:00
cecf131528
Island: Modify config to add exploiters and exploit options
2022-02-18 20:04:24 +01:00
5fe2f80aa4
Merge pull request #1723 from guardicore/1605-brute-force-utils
...
1605 brute force utils
2022-02-18 09:04:00 -05:00
4d6f552ba2
Agent: Add documentation to functions in brute_force.
2022-02-18 09:02:41 -05:00
5c872a67c3
Agent: Simplify generate_username_password_or_ntlm_hash_combinations()
2022-02-18 08:01:49 -05:00
b7c7650f49
Agent: Copy credential generation from WormConfig to new brute_force.py
...
* Create a new module for useful functions for brute-force exploiters
* Copy functions for generating all pairs of username/password to
brute_force.py
* Replace specific functions for generating username/password pairs and
username/ssh_key pairs with a single generate_identity_secret_pairs()
function, since the distinction is no longer needed.
* Add unit tests
2022-02-18 08:00:46 -05:00
915c58e8cc
Agent, Island: Modify config to remove boolean propagator field
2022-02-18 06:06:11 -05:00
0bfa0cd1ca
Merge pull request #1721 from guardicore/1605-get-updated-credentials
...
1605 get updated credentials
2022-02-18 06:01:25 -05:00
c66671821c
Agent: update pypykatz version to 0.5.2
...
Update contains fixes for latest windows versions
2022-02-18 10:10:25 +02:00
e2d116fdf1
Agent: Make request_cache() decorator thread-safe
2022-02-17 14:40:07 -05:00
4005ea2924
Agent: Add caching to ControlChannel.get_credentials_for_propagation()
2022-02-17 14:34:21 -05:00
c3e9690280
Agent: Add request_cache decorator
2022-02-17 14:25:03 -05:00
2305a9d413
UT: Add fixture to test_exploiter to remove code duplication
2022-02-17 12:41:27 -05:00
vakarisz
Ilija Lazoroski
Shreya Malviya
Mike Salvatore