Commit Graph

7389 Commits

Author SHA1 Message Date
vakarisz f5740b2a6e Agent: add mimikatz collector unit tests 2022-02-15 10:09:53 +01:00
vakarisz a6c2762823 Agent: change mimikatz collector to return a list of credentials 2022-02-15 10:09:53 +01:00
vakarisz 2f1b57a526 Agent: fix pypykatz import in mimikatz_cred_collector.py 2022-02-15 10:09:53 +01:00
vakarisz 2ba793e0cf Agent: move mimikatz collector to credential collectors 2022-02-15 10:09:53 +01:00
VakarisZ 144afc0fd3
Merge pull request #1712 from guardicore/1696-refactor-aws-collector
Agent: Refactor AWS collector
2022-02-14 17:12:28 +02:00
Ilija Lazoroski ae13953f52 Agent: Run AWS Environment check in a thread
* Use Telemetry Messenger to send AWS telemetry
* Send only instance_id to AWS Instance Telemetry
* Rename AwsInstanceTelemetry to AWSInstanceTelemetry
2022-02-14 16:00:38 +01:00
vakarisz 6aa2160f31 Agent: refactor mimikatz_cred_collector to credential collector 2022-02-14 15:25:06 +02:00
Ilija Lazoroski 7f6496b330 Island, UT: Remove system info AWS Collector 2022-02-14 12:00:08 +01:00
Ilija Lazoroski 412a06fa9b Island: Handle AWS info telemetry 2022-02-14 12:00:08 +01:00
Ilija Lazoroski 1f76a42279 Agent: Refactor AWS collector 2022-02-14 11:59:48 +01:00
vakarisz c21cf681a4 Agent: define credential collector, credentials interfaces 2022-02-14 12:12:13 +02:00
VakarisZ b0bd3f9c51
Merge pull request #1713 from guardicore/1690-investigate-pyinstaller-versions
1690 investigate pyinstaller versions
2022-02-14 11:47:47 +02:00
Mike Salvatore 414b1cb815 Agent: Add return type annotation to create_daemon_thread() 2022-02-12 09:44:04 -05:00
vakarisz 216a245329 Island: bumped pyinstaller to 4.9 2022-02-11 17:25:04 +02:00
vakarisz a3ba7fb830 Agent: bumped pyinstaller to 4.9 and locked pywin32 to windows 2022-02-11 17:24:33 +02:00
vakarisz 40548e85c1 Agent: bump agent pyinstaller to 4.8 2022-02-11 15:37:31 +02:00
vakarisz 31abc065f6 Agent: add explicit requirements for for pywin32-ctypes and pefile
These are pyinstaller dependencies that don't get auto-resolved and installed for some reason
2022-02-11 12:40:59 +02:00
Mike Salvatore 5a8c072d6a
Merge pull request #1709 from guardicore/1601-fix-check-tcp-ports-bugs
Minor changes to TCP scanning
2022-02-10 12:23:29 -05:00
Ilija Lazoroski 543ff24ac3 UT: Add tests for tcp scanning 2022-02-10 18:14:36 +01:00
Mike Salvatore 36a2b3ff6b Agent: Add sleep back into _check_tcp_ports() 2022-02-10 18:14:36 +01:00
Mike Salvatore 21ede3e341 Agent: Improve readability of _check_tcp_ports() 2022-02-10 18:14:36 +01:00
Mike Salvatore 2ae77ce897 Agent: Fix error when shutting down sockets in _check_tcp_ports()
An error is raised if shutdown() is called on a socket that has not
successfully connected. This commit modifies the cleanup logic so that
shutdown() is only called on sockets that are known to be connected and
close() is called on all sockets.
2022-02-10 18:14:36 +01:00
Mike Salvatore a53b611759 Agent: Change _check_tcp_ports() to return Mapping[int, str] 2022-02-10 18:14:36 +01:00
Mike Salvatore d3dd6ffeb0 Agent: Simplify logic in Timer.time_remaining 2022-02-10 18:14:36 +01:00
Shreya Malviya eb1a322ff8 Agent: Rework return value in _check_tcp_ports in tcp_scanner.py 2022-02-10 18:14:36 +01:00
Mike Salvatore 0e7f171c4a Agent: Use a Timer in _check_tcp_ports() to simplify logic 2022-02-10 18:14:36 +01:00
Mike Salvatore e981ead150 Agent: Add new time_remaining() method to Timer 2022-02-10 18:14:36 +01:00
Shreya Malviya 31fd24f077 Agent: Address CR comments + minor changes in tcp_scanner.py 2022-02-10 18:14:36 +01:00
Ilija Lazoroski 48dcd939e5 Agent, Island: Bump pyinstaller to latest version 2022-02-10 16:02:34 +01:00
Mike Salvatore 98a2f0b887 Agent: Use consistent DISPLAY_NAME constant in fingerprinters 2022-02-10 07:15:03 -05:00
Mike Salvatore aadc055f74
Merge pull request #1708 from guardicore/1603-refactor-ssh-fingerprinter
Agent: refactor ssh fingerprinter to fit the new model
2022-02-10 07:11:41 -05:00
Mike Salvatore f9b803b1ae Agent: Minor code quality improvements to SSHFingerprinter 2022-02-10 07:10:47 -05:00
vakarisz 1c7ec9c41f Agent: refactor ssh fingerprinter to fit the new model 2022-02-10 07:10:45 -05:00
Mike Salvatore 1dc08e2087
Merge pull request #1706 from guardicore/1603-refactor-smb-fingerprinter
1603 refactor smb fingerprinter
2022-02-10 06:47:32 -05:00
Mike Salvatore 37eab76044 Agent: Load SMBFingerprinter into the puppet 2022-02-09 13:41:00 -05:00
Mike Salvatore f85bb389cc Agent: Add some debug logging to SMBFingerprinter 2022-02-09 13:40:23 -05:00
Mike Salvatore fec7d987d8 Agent: Skip SMBFingerprinter if SMB_PORT is not open 2022-02-09 13:40:23 -05:00
Mike Salvatore ab3daeb2e8 Agent: Refactor the SMB fingerprinter to implement IFingerprinter 2022-02-09 13:40:23 -05:00
Mike Salvatore a7022011d9 Agent: Rename smb_finger.py -> smb_fingerprinter.py 2022-02-09 13:40:23 -05:00
Mike Salvatore b63d739578 Agent: Replace *Finger* names with *Fingerprinter* in SMBFinger 2022-02-09 13:40:23 -05:00
Mike Salvatore 26681abc86
Merge pull request #1707 from guardicore/1603-refactor-mssql-fingerprinter
1603 refactor mssql fingerprinter
2022-02-09 13:39:57 -05:00
Ilija Lazoroski 5d818154b9 Agent: Load MSSQL fingerprinter into the Puppet 2022-02-09 19:35:59 +01:00
Ilija Lazoroski e6f5b6113f Agent: Refactor MSSQL fingerprinter
* Refactor code to conform to the IFingerprinter interface
* Non-structured server response will return empty Fingerprint data
* Rename mssql_fingerprint to mssql_fingerprinter
* Unit tests
2022-02-09 19:35:51 +01:00
Ilija Lazoroski fb8847b5c5 Agent: Remove sambacry binaries from monkey spec
PR #1698
2022-02-09 08:25:20 -05:00
Mike Salvatore f0602edffb
Merge pull request #1703 from guardicore/1603-refactor-elastic-fingerprinter
Refactor elastic fingerprinter
2022-02-09 07:33:07 -05:00
Mike Salvatore 6de05df665 Agent: Load ElasticSearchFingerprinter into the Puppet 2022-02-09 07:28:12 -05:00
Mike Salvatore cc3be599d7 Agent: Refactor ElasticSearchFingerprinter
* Rename ElasticFinger -> ElasticSearchFingerprinter
* Don't scan port if port is closed or not configured
* Refactor code to conform to the IFingerprinter interface
* Add unit tests
2022-02-09 07:28:10 -05:00
Shreya Malviya 5a64db4ce9
Merge pull request #1699 from guardicore/1669-remove-scoutsuite-integration
Remove scoutsuite
2022-02-09 01:15:30 -08:00
Shreya Malviya 30bbfec182 Docs: Remove trailing whitespace in operating systems support page 2022-02-09 14:35:13 +05:30
Shreya Malviya f8ad233729 Island: Remove ScoutSuite from dependencies 2022-02-09 14:32:19 +05:30