Commit Graph

3360 Commits

Author SHA1 Message Date
Shreya Malviya b0a5c9ef0d
Merge pull request #674 from shreyamalviya/T1158
Add T1158 attack technique
2020-06-24 17:01:22 +05:30
Shreya a11852ce3c Pass build
Pass build
2020-06-24 16:47:46 +05:30
Shreya 971a102eb6 Change order of techniques in ATT&CK matrix
T1158: Hidden files before T1504: Powershell profile
2020-06-24 15:22:34 +05:30
Shreya 6b75092823 Small fixes after rebasing 2020-06-24 15:15:45 +05:30
Shreya a91e65e49a Use mongo search for report data 2020-06-24 14:37:42 +05:30
Shreya 37d37b6f9f Fix status being sent in report data 2020-06-24 14:37:42 +05:30
Shreya 3819041632 PBA command modifications 2020-06-24 14:37:42 +05:30
Shreya 2dbf798c4a Linux: fix hidden file/folder deletion issue 2020-06-24 14:37:42 +05:30
Shreya d0dc305a33 Remove detection time for AV software 2020-06-24 14:37:42 +05:30
Shreya a98f321ed0 Windows: change location of hidden file/folder + add system attribute 2020-06-24 14:37:42 +05:30
Shreya 87bfe41c50 Linux: change location of hidden file/folder 2020-06-24 14:37:42 +05:30
Shreya eea5352084 Little changes based on review 2020-06-24 14:36:03 +05:30
Shreya 6b4e90e6d0 PBA tweaks: Windows 2020-06-24 14:36:03 +05:30
Shreya 80c8a42bd0 Mentioning 'type' doesn't seem necessary 2020-06-24 14:36:03 +05:30
Shreya 0f6fcc799c Add report components, link to matrix 2020-06-24 14:36:03 +05:30
Shreya 49350aa303 PBA changes: Windows 2020-06-24 14:33:08 +05:30
Shreya 15ac77056a PBA changes: Linux 2020-06-24 14:33:08 +05:30
Shreya 2b9d54408a Tweak PBA logic
Don't need to use winAPI to delete file
2020-06-24 14:33:08 +05:30
Shreya 1d952a4781 PBA stuff 2020-06-24 14:33:08 +05:30
Shreya 45c5546f17 Add "Hidden files" PBA feature
TODO: winAPI
2020-06-24 14:33:08 +05:30
Shreya Malviya 08727305d8
Merge pull request #687 from shreyamalviya/T1156
Add T1156 and T1504 attack techniques (shell startup file modifications)
2020-06-24 14:13:09 +05:30
Shreya 53e6f893c6 Disabled prop-types warning in eslint
(Accidentally force-pushed over the previous commit changing this)
2020-06-24 13:58:52 +05:30
Shay Nehmad 46dd6d30b7
Merge pull request #690 from guardicore/602/accounts-and-security
Added accounts and security page
2020-06-24 11:25:08 +03:00
Shreya f21dbde27d Extend windows PBA for all users on system 2020-06-24 13:37:08 +05:30
Shreya 7efeff3ff0 Modify linux PBA so it doesn't give errors when running on windows 2020-06-24 13:25:54 +05:30
Shreya 6f6bfca9f9 Use mongo search for report data
(For linux, shows only bash startup files in ATT&CK report)
2020-06-24 13:25:54 +05:30
Shreya 7459105bbc Extend linux PBA for all users on system
TODO: ATT&CK report stuff (mongo search + show only bash file modification info)
TODO: Windows
2020-06-24 13:25:54 +05:30
Shreya 8d2aaac65f Fix + make linux PBA commands cleaner 2020-06-24 13:25:54 +05:30
Shreya e5f92d29b5 Add startup files for fish, zsh, dash, ksh, sh, csh, tcsh 2020-06-24 13:25:54 +05:30
Shreya 0c60ad16ae Code design changes 2020-06-24 13:25:54 +05:30
Shreya 60207e3a79 Change file locations 2020-06-24 13:25:54 +05:30
Shreya 6d98f95d4c Make used/scanned/unscanned messages descriptive 2020-06-24 13:25:54 +05:30
Shreya 58a0a67244 Add T1504 to config_schema 2020-06-24 13:25:54 +05:30
Shreya ef6bb52302 Remove Privilege escalation/T1504 in attack_schema
Shows it twice in ATT&CK matrix in the configuration,
but shows it only once in the ATT&CK matrix in the report section.
2020-06-24 13:25:54 +05:30
Shreya 8bb5096add Add T1504 report data + modify T1156 report data 2020-06-24 13:25:54 +05:30
Shreya 1b040dc874 Add windows PBA 2020-06-24 13:25:54 +05:30
Shreya 3fe4dd679b Pass empty string to linux_cmds if OS is windows 2020-06-24 13:25:54 +05:30
Shreya dfa34e602f Started T1504 implementation
Add to `attack_schema.py`, `attack_report.py`
Add report `T1504.js`
2020-06-24 13:25:54 +05:30
Shreya e2d35ca267 Simpler bash commands for linux PBA 2020-06-24 13:25:54 +05:30
Shreya a9c763cd9c Add linux PBA + report components 2020-06-24 13:25:49 +05:30
VakarisZ 9ca2507f34 Changed minimum mongodb version required in main 2020-06-23 16:36:37 +03:00
VakarisZ 37f356a6e2 Run monkey page improvement, small style and attack report fixes 2020-06-23 16:31:00 +03:00
VakarisZ 44c8ffda60 Missing svg image added, registration error overlap fixed 2020-06-23 15:38:25 +03:00
VakarisZ 0b7fef8c23 Typos, draft version set to false, added language indication to code fragment 2020-06-23 12:56:34 +03:00
VakarisZ 09b8239fdb More quote fixes, increased JS warnings to 500 2020-06-23 12:46:11 +03:00
VakarisZ 4c8c423b9d Linting fixes 2020-06-23 12:24:36 +03:00
VakarisZ 30fde6deb3 Changed testing documentation that relates to password protection 2020-06-23 12:24:02 +03:00
VakarisZ bd537faa11 Bugfix: PreviewPane.js log download button no longer enabled when no log is present 2020-06-23 12:23:30 +03:00
VakarisZ 0be1b3a908 Merge remote-tracking branch 'upstream/develop' into password_setup 2020-06-23 11:11:22 +03:00
Shay Nehmad 6ead5d43cf
Merge pull request #691 from guardicore/bugfix/pth_map_include
UI bugfix: non-existent PTH map include
2020-06-23 10:43:56 +03:00