VakarisZ
435f52a658
Changelog: add entry about removed netstat collector
2021-11-12 14:09:07 +02:00
VakarisZ
a451764a6f
Island: fix ATT&CK report T1082 technique to display that at least data about Network interfaces was gathered. Otherwise the "Info gathered" column might be empty.
2021-11-12 11:52:21 +02:00
VakarisZ
9e3ac63090
Agent, Island: remove netstat collector and references
2021-11-12 11:18:23 +02:00
VakarisZ
9220cd2f5b
Swimm: remove netstat system info collector references
2021-11-12 11:18:23 +02:00
Mike Salvatore
81fb015e6b
Merge pull request #1574 from guardicore/1567-sambacry-removal
...
1567 sambacry removal
2021-11-10 09:23:39 -05:00
VakarisZ
f5c8db979f
Project: remove remaining sambacry exploiter references in performance.py config template, vulture_allowlist.py and monkey_config_standard.json unit test data file
2021-11-10 15:44:05 +02:00
VakarisZ
e618f0613d
Changelog: add entry about the removed sambacry exploiter
2021-11-10 15:44:01 +02:00
VakarisZ
881800047b
Island: remove sambacry exploiter code and related infrastructure/docs
2021-11-10 15:43:51 +02:00
VakarisZ
73188e78cc
Agent: remove sambacry exploiter code and related infrastructure/docs
2021-11-10 15:43:51 +02:00
VakarisZ
d6e397871f
Deploy: remove sambacry binary download step from linux and windows deployment scripts
2021-11-10 15:43:51 +02:00
VakarisZ
67ea6c05ed
Docs: remove sambacry exploiter documentation
2021-11-10 15:43:51 +02:00
VakarisZ
136a105e56
BB: remove sambacry machines from BB infrastructure and docs
2021-11-10 15:43:51 +02:00
Shreya Malviya
dac2aa5464
Merge pull request #1575 from guardicore/1536-remove-kill-file
...
Remove "Kill file" config option
2021-11-10 19:00:30 +05:30
Shreya Malviya
124e9efe91
Changelog: Add entry for removing 'kill file'
2021-11-10 18:49:41 +05:30
Shreya Malviya
45dcceff9e
UT: Remove kill file config option from unit test data's config
2021-11-10 18:45:05 +05:30
Shreya Malviya
0989134141
UI: Remove kill file tab from config
2021-11-10 18:44:36 +05:30
Shreya Malviya
5727979383
Island: Remove kill file config option
2021-11-10 18:42:12 +05:30
Shreya Malviya
4966c74214
Agent: Remove kill file config option
2021-11-10 18:40:35 +05:30
Mike Salvatore
cb613393e2
Build: Add warning about building an AppImage on LXD with shiftfs
2021-11-08 21:22:52 -05:00
Mike Salvatore
2c3cbb2ef7
Merge pull request #1570 from guardicore/1556-broken-agent-manual-run-win
...
1556 broken agent manual run Windows
2021-11-05 11:49:53 -04:00
VakarisZ
c07f842c75
UI: small style fixes in local_windows_powershell.js
2021-11-05 11:46:45 -04:00
VakarisZ
7e1e5917cb
Changelog: add entry for manual monkey run option modifications
2021-11-05 11:46:43 -04:00
Mike Salvatore
0d0fffcd7a
Agent: Add performance-related TODOs to bit_manipulators.py
2021-11-05 11:35:38 -04:00
VakarisZ
4b5c8c23ea
UI: removed cmd manual run option for windows
...
Reasoning behind removal: hard to fix "launch as user" option, agent doesn't support machines without powershell (winXP)
2021-11-05 10:04:00 +02:00
VakarisZ
896cf7a21d
UI: remove -noexit flag from manual run command, because there's no point in opening an empty powershell window
2021-11-05 10:04:00 +02:00
VakarisZ
51eb6f2ce5
UI: fix manual run command for powershell as a user
2021-11-05 10:04:00 +02:00
Mike Salvatore
9eff78fb60
Merge pull request #1565 from guardicore/1533-remove-vsftpd
...
Remove the VSFTPD exploiter
2021-10-29 09:46:11 -04:00
Shreya Malviya
779ae79499
Changelog: Add entry for removing the VSFTPD exploiter
2021-10-29 18:24:23 +05:30
Shreya Malviya
455a8f2680
Docs: Remove VSFTPD exploiter from the docs
2021-10-29 18:20:12 +05:30
Shreya Malviya
c6cbaca75b
UT: Remove VSFTPD exploiter from unit tests' data - standard monkey config
2021-10-29 18:19:25 +05:30
Shreya Malviya
b005946d88
BB: Remove VSFTPD exploiter from BB performance test's config template
2021-10-29 18:17:33 +05:30
Shreya Malviya
ee79ea0a9d
Project: Remove variable 'VSFTPD' from Vulture's allowlist
2021-10-29 18:15:38 +05:30
Shreya Malviya
3f19c0bb3c
Island: Remove config and reporting stuff related to the VSFTPD exploiter
2021-10-29 18:12:40 +05:30
Shreya Malviya
97c50c3caa
UI: Remove components related to the VSFTPD exploiter
2021-10-29 18:12:06 +05:30
Shreya Malviya
40b9b5b730
Agent: Remove VSFTPD exploiter
2021-10-29 17:57:12 +05:30
Mike Salvatore
8ee918b5a2
Merge pull request #1561 from guardicore/1554-authentication-service-refactor
...
Authentication service refactor
2021-10-28 14:47:01 -04:00
Mike Salvatore
28df604d7b
Island: Raise exception instead of returning bool in authenticate()
2021-10-28 14:45:44 -04:00
VakarisZ
35509b2671
Merge pull request #1562 from guardicore/1545-telemetry-brief-loading
...
Bugfix: telemetry brief loading
2021-10-28 17:58:38 +03:00
VakarisZ
5cfe6de927
Changelog: add entry for fixed #1545
2021-10-28 10:49:25 -04:00
Mike Salvatore
730565c2aa
Island: Add missing typehints to AuthenticationService
2021-10-28 09:28:02 -04:00
Mike Salvatore
5e7a252a6b
Island: Rename KEY_FILE_DIRECTORY -> DATA_DIR
...
Neither the AuthenticationService, nor the function that initializes it
needs to know what the data_dir is for. AuthenticationService only needs
to know that datastore_encryptor needs it, but not why.
2021-10-28 09:28:02 -04:00
Mike Salvatore
c3412ac58f
Tests: Add unit tests for Authentication resource
2021-10-28 09:28:02 -04:00
Mike Salvatore
d51f331453
Tests: Add unit tests for Registration resource
2021-10-28 09:28:02 -04:00
Mike Salvatore
6e5b4cc793
Island: Move password_matches_hash() to AuthenticationService
2021-10-28 09:28:02 -04:00
Mike Salvatore
1be7232983
Island: Rename and relocate methods in AuthenticationService
2021-10-28 09:28:02 -04:00
Mike Salvatore
8a2bae7e14
Island: Move authentication logic into AuthenticationService
2021-10-28 09:28:02 -04:00
Mike Salvatore
17f7e22584
Island: Add needs_registration() to AuthenticationService
2021-10-28 09:28:02 -04:00
Mike Salvatore
252c1d940a
Island: Remove "auth user"
2021-10-28 09:28:02 -04:00
Mike Salvatore
6bdba71b69
Island: Remove _is_credentials_set_up() from Environment
2021-10-28 09:28:02 -04:00
Mike Salvatore
caa62c6272
Island: Remove _credentials_required property from Environment
...
Since #1418 , credentials are always required, rendering the
_credentials_required property of the Environment class obsolete.
2021-10-28 09:28:02 -04:00