Daniel Goldberg
9d7b345d1d
Split up Azure credential working to make it easier for the server to understand.
...
Fixed bugs in Azure report server side and fixed a hardcoded constant in get_issues_overview
2018-03-29 11:01:06 +03:00
Daniel Goldberg
93fee0d2c5
Add Azure password stealing to the report.
2018-03-29 11:01:06 +03:00
Daniel Goldberg
21abdb5cef
Add tag to system info if on Azure and harvested creds.
2018-03-29 11:01:05 +03:00
Daniel Goldberg
e3bd29ef6f
Add credential harvesting by default to both OS colelctors
2018-03-29 11:01:05 +03:00
Daniel Goldberg
cb39be6f58
Initial commit of standalone Azure password harvester
2018-03-29 11:01:05 +03:00
Ace Pace
225c7fae6f
Delete current monkey business code from repository untill we go back to developing it.
2018-03-22 09:47:30 +02:00
Daniel Goldberg
8f0251e822
Updated readme links
2018-03-13 11:08:23 +02:00
Itay Mizeretz
08e7f8cd3a
quick bugfix for auth
2018-03-11 19:03:40 +02:00
Oran Nadler
96c9681bf1
eliminate some 'None'-s from the report
2018-03-10 23:58:51 -08:00
Oran Nadler
8807e68177
add posssible attacks per sid
2018-03-10 23:18:53 -08:00
Daniel Goldberg
0fb4feb78c
Merge pull request #107 from guardicore/develop
...
Finish the current small sprint.
New additions
* New icons
* Encrypted creds in the DB
* Option to pull logs from the monkey
* Rename C&C to Monkey Island
* Get rid of chaos monkey (at last!)
* Async scanning of victims
2018-03-10 18:44:21 +02:00
Itay Mizeretz
6caec5ccf2
quick bugfix to not try and drop system collections
2018-03-10 18:24:58 +02:00
itaymmguardicore
1a3ca06ce8
Merge pull request #86 from guardicore/feature/secure-island-db
...
Feature/secure island db
2018-03-08 20:03:40 +02:00
Itay Mizeretz
444828ad02
Remove isparta-instrumenter-loader
...
Force up-to-date moment dep
2018-03-08 19:12:51 +02:00
Itay Mizeretz
cf86294eb4
fix CR
2018-03-08 15:37:45 +02:00
Itay Mizeretz
795885b322
Fix CR
2018-03-08 14:17:27 +02:00
Oran Nadler
ce1c8a54f8
show only real attacks in the graph
2018-03-07 07:45:48 -08:00
Oran Nadler
e0b64ee63b
cosmetics
2018-03-07 06:48:03 -08:00
Oran Nadler
1ee53972a8
small fixeS
2018-03-07 06:47:29 -08:00
Oran Nadler
458cc20ceb
small fixes
2018-03-07 00:03:55 -08:00
Oran Nadler
3291e4f0bc
fix html tableS
2018-03-07 00:01:43 -08:00
Oran Nadler
9be9c48253
analsis runs
2018-03-06 23:56:32 -08:00
Oran Nadler
b56f05335b
fix todo
2018-03-06 23:36:04 -08:00
Oran Nadler
3f9204dd83
add a lot of information to report
2018-03-06 22:29:17 +02:00
Oran Nadler
86be96eb44
Add dc table
2018-03-06 21:55:56 +02:00
Oran Nadler
18114ea7fe
add draft for some tables
2018-03-06 21:53:22 +02:00
Daniel Goldberg
8f5643b0b5
Merge pull request #87 from guardicore/feature/send-raw-log
...
Feature/send raw log
2018-03-06 18:10:22 +02:00
Oran Nadler
492bea27a5
add more queries
2018-03-06 07:31:35 -08:00
Oran Nadler
22b0aeb6cc
better handle multiple runs of monkey & add a few more queries
2018-03-06 05:37:50 -08:00
Oran Nadler
cbc6f2395d
add ntds information to map
2018-03-06 04:52:39 -08:00
Oran Nadler
01b071dfe1
add labels
2018-03-06 00:32:57 -08:00
Itay Mizeretz
450f3ed3be
Use 32bit as default path
2018-03-04 17:50:35 +02:00
Itay Mizeretz
a37ef02772
Fix mutual import
2018-03-04 17:21:01 +02:00
Itay Mizeretz
ee23703bfa
Monkey now uses different names for 32,64bit on windows.
...
No need to use dropper or rename moneky
2018-03-04 17:05:43 +02:00
Oran Nadler
8a3216d812
works
2018-03-04 06:24:22 -08:00
Oran Nadler
00fe34d431
add pth map to ui
2018-03-04 05:22:34 -08:00
Oran Nadler
6779d4c758
fix
2018-03-04 04:11:15 -08:00
Oran Nadler
dd0b73519c
use the collected sam info
2018-03-04 03:54:41 -08:00
Itay Mizeretz
72fd930499
unlock singleton before upgrade
2018-02-28 19:54:10 +02:00
Itay Mizeretz
784e383959
Check if should upgrade only once
...
Don't send state-done telemetry if upgrading
2018-02-28 19:38:05 +02:00
Itay Mizeretz
abd738acbc
Change config value name
...
Add logs
2018-02-28 19:01:42 +02:00
Oran Nadler
2013e706e5
add intial draft for analyses script for pth map
2018-02-28 08:48:21 -08:00
Itay Mizeretz
260607b685
Use dedicated api to determine server is running
2018-02-28 18:26:31 +02:00
Itay Mizeretz
15b9ef1565
Remove destination path if it exists (mostly for windows upgrade)
...
Fix minor bug in dropper
2018-02-28 16:26:14 +02:00
Itay Mizeretz
bbdebb1268
Fix various bugs
2018-02-28 16:24:40 +02:00
Itay Mizeretz
e30e9c8b83
Upgrade after finding server
2018-02-28 16:23:54 +02:00
Itay Mizeretz
355a75feef
seperate the wakeup and server lookup processes
2018-02-28 16:21:44 +02:00
Oran Nadler
f3b013b8b1
Merge branch 'nadler/pth' of github.com:guardicore/monkey into nadler/pth
2018-02-28 04:53:18 -08:00
Oran Nadler
833df8d6d4
fix wmi table names
2018-02-28 04:53:02 -08:00
Itay Mizeretz
8509eef48e
Add basic logic to windows upgrade
2018-02-28 14:10:01 +02:00