Commit Graph

2145 Commits

Author SHA1 Message Date
Shay Nehmad 40ba116a04 Improved the event API and added UTs for validation 2019-08-12 11:49:16 +03:00
Shay Nehmad cabf235343 WIP added AV hook to sysinfo telem 2019-08-11 18:10:20 +03:00
Shay Nehmad 1a38a8ca93 Added basic finding and event data models 2019-08-11 17:57:11 +03:00
Shay Nehmad 14b5d5f658 Added consts file for zero trust 2019-08-11 17:56:37 +03:00
Shay Nehmad 547067c4da made power set return lists for ease of usage 2019-08-11 17:49:24 +03:00
Shay Nehmad e500068e45 Added utility function for calculating power set 2019-08-11 11:43:12 +03:00
Shay Nehmad 1a2d61e3a1 Made the test cell of the recommendation table a list instead of raw JSON 2019-08-08 20:57:04 +03:00
Shay Nehmad 96eb705b9c Added icons to pillar labels 2019-08-08 18:15:15 +03:00
Shay Nehmad a074d8e4a1 Divided recommendations into pillars 2019-08-08 16:50:32 +03:00
Shay Nehmad e4738d026c Added recommendation status table 2019-08-08 16:19:51 +03:00
Shay Nehmad 568257db26 Extracted common code of PagenatedTable component 2019-08-08 15:42:09 +03:00
Shay Nehmad 97c80c47af Added coloured labels 2019-08-08 14:21:22 +03:00
Shay Nehmad a337bb5800 Added table for pillar grades 2019-08-08 12:08:24 +03:00
Shay Nehmad 683e945506 Seperated report into 3 resources (DDR result) 2019-08-08 11:56:37 +03:00
Shay Nehmad bcc12657a4 Added export events button 2019-08-08 10:28:22 +03:00
Shay Nehmad 274b861adc Refactored ZeroTrust out of the names of all the things 2019-08-07 15:32:31 +03:00
Shay Nehmad 9c1abf08a9 Added event type and custom icons per type 2019-08-07 11:08:30 +03:00
Shay Nehmad 47d37dcdd0 Added title (should be event type) to report data and events timeline 2019-08-06 19:19:00 +03:00
Shay Nehmad ad5929b4e5 Added event timeline (not done yet, need to add title to data) and deleted console.logs 2019-08-06 18:19:39 +03:00
Shay Nehmad b17d0a841b Added "Show events" button and modal 2019-08-05 17:16:02 +03:00
Shay Nehmad ec15561bcb Changes JSON to say if tests are conclusive 2019-08-05 16:16:53 +03:00
Shay Nehmad 1b958ed300 Added label component for pillar and added word wrap 2019-08-05 15:23:52 +03:00
Shay Nehmad 50e020403b Added basic findings table, no access to events yet 2019-08-05 15:13:55 +03:00
Shay Nehmad eaf923a0e4 Moved all the security report components into their own folder, finished folder structure 2019-08-05 14:39:17 +03:00
Shay Nehmad 918d86c4d9 Moved report header to common components in folder 2019-08-05 14:36:16 +03:00
Shay Nehmad 197ac585e8 Created basic zero trust report page mockup
Extracted the reportHeader from the regular report
2019-08-05 14:27:47 +03:00
Itay Mizeretz 3d97324137
Merge pull request #369 from VakarisZ/attack_execution_api
T1106 Execution through API
2019-08-04 10:17:51 +03:00
VakarisZ 35c496812f Fixed CR comments and implemented test for proxy attack techniques 2019-08-02 13:11:16 +03:00
VakarisZ 281440962c Merge branch 'attack_file_copy' into attack_bugfixes
# Conflicts:
#	monkey/infection_monkey/exploit/sshexec.py
2019-08-02 09:54:44 +03:00
VakarisZ cefe9a7d9c Merge remote-tracking branch 'upstream/develop' into attack_execution_api
# Conflicts:
#	monkey/infection_monkey/system_info/mimikatz_collector.py
2019-08-02 09:49:27 +03:00
Shay Nehmad 3dd7b9a15e Added a temporary Zero Trust report page. 2019-08-01 19:39:09 +03:00
VakarisZ ee1d6507b0 Refactored T1106 to use Usage enum and fixed SMB bugs 2019-08-01 17:39:53 +03:00
VakarisZ 4ccf06e454 Merge remote-tracking branch 'upstream/develop' into attack_file_copy
# Conflicts:
#	monkey/infection_monkey/exploit/rdpgrinder.py
#	monkey/infection_monkey/exploit/sshexec.py
#	monkey/infection_monkey/system_info/mimikatz_collector.py
2019-08-01 15:02:40 +03:00
Shay Nehmad 444144aecc Added report types: zero_trust and general
Also moved the report resources to their own folder
2019-08-01 14:58:55 +03:00
VakarisZ 022361e090 Merge branch 'develop' into attack_file_copy 2019-08-01 14:52:50 +03:00
VakarisZ f01febfb5d Fixed code duplication in T1105 sending and typo in report header 2019-08-01 14:52:27 +03:00
Itay Mizeretz 3c8432e8dd
Merge pull request #368 from VakarisZ/attack_module_load
T1129 Execution through module load
2019-08-01 14:48:17 +03:00
VakarisZ 7470427feb Changed UsageTelemetry calls to no longer require .name when specifying usage enum 2019-08-01 14:26:01 +03:00
VakarisZ 92f66ba907 Merge remote-tracking branch 'upstream/develop' into attack_module_load 2019-08-01 14:21:46 +03:00
Itay Mizeretz 0872e02740
Merge pull request #367 from VakarisZ/attack_service_execution
T1035 Service Execution
2019-08-01 14:12:04 +03:00
Shay Nehmad 287115dded Moved services which are related to the report to a dedicated directory 2019-08-01 14:07:05 +03:00
Shay Nehmad 812e844f74
Merge pull request #396 from guardicore/improvment/395-log-hashes-not-creds
Filtering sensitive info when logging running config
2019-08-01 11:57:36 +03:00
Itay Mizeretz d86f4abb15
Merge pull request #398 from guardicore/bugfix/remove-travis-python-3
remove python 3 build from travis
2019-08-01 10:58:16 +03:00
itay 111080d5cd remove python 3 build from travis 2019-08-01 10:52:38 +03:00
VakarisZ 850448ab0c Merge remote-tracking branch 'upstream/develop' into attack_service_execution 2019-08-01 10:29:08 +03:00
VakarisZ 32e930559d Improved docs of "parse_usages" method 2019-08-01 10:09:40 +03:00
VakarisZ a1bc097164 Merge remote-tracking branch 'upstream/develop' into attack_module_load
# Conflicts:
#	monkey/monkey_island/cc/ui/src/components/attack/techniques/Helpers.js
2019-08-01 09:57:26 +03:00
Itay Mizeretz bbff9b95e3
Merge pull request #366 from VakarisZ/attack_file_deletion
T1107 File Deletion
2019-07-31 11:43:07 +03:00
Shay Nehmad 209aacd96d Hashing all places in the log that log passwords
Now passwords are no longer plaintext
2019-07-29 17:11:01 +03:00
Shay Nehmad bb8e9f5192 Fixed CR Comment - exported sensitive fields 2019-07-29 10:15:27 +03:00