Commit Graph

2878 Commits

Author SHA1 Message Date
Shay Nehmad 05a1b2d235 Remove type hint as it doesn't work well with python2. 😢 2019-08-26 15:24:55 +03:00
Shay Nehmad 4601882ba2 Merge branch '400-zero-trust-mvp-venn-diagram' of https://github.com/guardicore/monkey into 400-zero-trust-mvp-venn-diagram 2019-08-26 14:23:17 +03:00
Shay Nehmad a9ba3273dd Added positive segmentation findings 2019-08-26 14:23:14 +03:00
Shay Nehmad fbb82f412b Fixed copy-pasta bug about state telemetry. 2019-08-26 14:08:45 +03:00
Shay Nehmad f865c4b4b9 Added sent telemetry logging. 2019-08-26 14:08:18 +03:00
VakarisZ 88cf67aab7 Added ability to disable telemetry briefs for certain telemetries. 2019-08-26 11:30:30 +03:00
vkuchinov e4a03ce3e0 Removing rudimentary variables from ResponsiveVennDiagram and VennDiagram
[x] childrenWidth/childrenHeight were removed, have beed used previously for non-responsive SVG
[x] this.ZOrder array was removed, since there is another way of soring z-indices
[x] translate was removed, since now it's the part of viewPortParameters string ((-this.width / 2) + ' ' + (-this.height / 2))
2019-08-26 09:59:36 +03:00
Shay Nehmad 01996a59ee Merge branch '400-zero-trust-mvp-venn-diagram' of https://github.com/guardicore/monkey into 400-zero-trust-mvp-venn-diagram 2019-08-26 09:22:10 +03:00
Shay Nehmad 9367b6ce8e Fixed arcnode text bug + formatting 2019-08-26 09:20:59 +03:00
vkuchinov f0d43e033e Update ArcNode.js
HAve returned missing labels
2019-08-26 08:12:51 +03:00
VakarisZ 7e0b85a34d Improved description of T1090 connection proxy 2019-08-25 18:58:34 +03:00
Shay Nehmad 79fabb1ac1 Whitespace fixes 2019-08-25 18:49:57 +03:00
VakarisZ 4d8cd768fc Updated monkeyzoo images and added tunneling-11 2019-08-25 18:33:21 +03:00
Shay Nehmad 0a044e2295 Reverted changed to ZT report page and fixed rule bug in diagram + whitespace. 2019-08-25 18:30:56 +03:00
Shay Nehmad 223adb0f33 Added state function, WIP 2019-08-25 18:14:15 +03:00
Shay Nehmad 05eab34d45 Merge branch '400-zero-trust-mvp-venn-diagram' of https://github.com/guardicore/monkey into 400-zero-trust-mvp-venn-diagram 2019-08-25 18:08:43 +03:00
Shay Nehmad 470806f3bc Added segmentation violation test 2019-08-25 18:08:21 +03:00
Shay Nehmad 9dfb250d59 Added a custom segmentation finding type 2019-08-25 18:07:49 +03:00
vkuchinov b9cb655114 Fixes
Fixes for issues posted by Shay at VennDiagram component #412

[x] ResponsiveVennDiagram.js, VennDiagram.js
[x] VennDiagram.css (rename)
[x] ArcNode, CicularNode, Tooltip as .js
and other minor issues
2019-08-25 17:32:21 +03:00
VakarisZ 51b689366a Current section not changed on import 2019-08-25 15:47:24 +03:00
vkuchinov 5c4797108e Rules update
The rules are now set at this.rules array.
While some of them have two conditions, i.e. Rule #2 shoud check if Conclusive is 0 and Inconclusive > 0, all rules has its own function (formula), which returns true or false.

Eventually, I could shorten variable naming, for example, d_['Conclusive'] to something more prompt, but keeping this helps understand formulas even without referencing to upper comments.
2019-08-25 13:05:56 +03:00
Shay Nehmad 6ec4e613cf Extracted segmentation utils function 2019-08-25 11:31:31 +03:00
Shay Nehmad fb01bface6 Extracted config utility function to new package - in future all config should move here 2019-08-25 10:30:17 +03:00
Daniel Goldberg bd37995054
Merge pull request #414 from VakarisZ/private_key_query_fix
Attack: private key query fix, mimikatz: log message.
2019-08-25 08:46:03 +02:00
VakarisZ 97b0568c35 Added success log message in mimikatz and fixed private keys attack query 2019-08-23 16:08:53 +03:00
vkuchinov 244be146bb Update VennDiagram/index.js
[x] Scrolling issue. Since only window/document have 'scroll' event, the only option to fix tooltip issue on scrolling is just simply hide it.

That works well if after scrolling the mouse pointer doesn't stay on any venn nodes. Otherwise, you have to move mouse for the tooltip.

Theoretically, I could store hovered node coordinates and use them in _onScroll function to check if mouse is still on top one Venn nodes find window.pageYOffset difference.
2019-08-23 02:41:00 +03:00
Daniel Goldberg 489a6e8ebb
Merge pull request #409 from guardicore/feature/remove_rdp_grinder
Feature/remove rdp grinder
2019-08-22 16:11:21 +02:00
Shay Nehmad af8c7dc29f Added elasticsearch test 2019-08-22 16:18:37 +03:00
Shay Nehmad 3fef55eefa Now periodically updating the report. 2019-08-22 15:00:50 +03:00
vkuchinov 20e282f5fb Update index.js
[x] Z-Indices sorting on hover
[x] Resize (viewBox solution]
[x] Rule correction, have excluded 'Unexecuted' parameter from the sum for Rule #1

Still on my today's TODO list:

[-] Still looking for an elegant solution to scrolling glitch.
     Yes, the easiest way is to hide tooltip on scrolling, but that's not cool

[-] Need some coding refining
2019-08-22 14:50:07 +03:00
Shay Nehmad bf417ab01d Added machine exploited ZT test 2019-08-22 14:40:05 +03:00
Shay Nehmad bd97c965f1 Fixed another state bug in ZT report using deep copy 2019-08-22 14:39:40 +03:00
Itay Mizeretz d4c337dc42
Merge pull request #390 from VakarisZ/attack_scripting
T1064 Scripting
2019-08-22 14:24:33 +03:00
Itay Mizeretz 9bd4238d9c
Merge pull request #385 from VakarisZ/attack_remote_services
T1021 Remote services
2019-08-22 14:11:56 +03:00
VakarisZ b9a5ac1fe4 Refactored: scripting telemetry is send as a string, without using UsageEnum 2019-08-22 14:04:45 +03:00
Shay Nehmad 2174f43a84 Added d3 to package.json and now using the ResponsiveVennDiagram in Pillaroverview 2019-08-22 13:33:40 +03:00
Shay Nehmad 4455700c2a Merge branch '400/zero-trust-mvp' into 400-zero-trust-mvp-venn-diagram 2019-08-22 11:46:12 +03:00
Shay Nehmad 7f98f55e64 Fixed error +warning in UI
Error - didn't use deep copy and caused error
Warning - 2 events might have the same timestamp
2019-08-22 11:21:52 +03:00
Shay Nehmad 4581376d8d Added the open http endpoint test 2019-08-22 10:52:33 +03:00
vkuchinov 83ed12249e VennDiagram component 2019-08-22 10:13:10 +03:00
VakarisZ 9b23be44ed Added hash parsing to the T1021 remote services attack technique. 2019-08-22 09:28:53 +03:00
Shay Nehmad d6104bbcf9 Started implementing the open_data_endpoints test, still not creating findings 2019-08-21 21:28:15 +03:00
Shay Nehmad 6843606a4f Merge commit leftovers 2019-08-21 19:03:51 +03:00
Shay Nehmad 293a6639f2 Merge branch 'develop' into 400/zero-trust-mvp 2019-08-21 19:03:33 +03:00
Shay Nehmad bfaa05aa51 Minor CR fixes - changed downlaod filename, refactored some names 2019-08-21 18:48:02 +03:00
Shay Nehmad 3f85c336b9 Moved init of mappings to init file 2019-08-21 18:32:39 +03:00
Daniel Goldberg ef4113d31b
Merge pull request #410 from VakarisZ/default_server_bugfix
Bugfix for monkey without -s flag
2019-08-21 16:47:02 +02:00
Itay Mizeretz fc23faed3e
Merge pull request #384 from VakarisZ/attack_sys_network_config
T1016 System network configuration discovery
2019-08-21 17:41:46 +03:00
Itay Mizeretz 145488edd4
Merge pull request #383 from VakarisZ/attack_system_discovery
T1018 Remote System Discovery
2019-08-21 17:39:05 +03:00
Itay Mizeretz 3202deaf51
Merge pull request #382 from VakarisZ/attack_data_from_system
T1005 Data from local system
2019-08-21 17:37:41 +03:00