Commit Graph

1173 Commits

Author SHA1 Message Date
Shay Nehmad 4dca735265 Changed `check_output` to `Popen` to make user deletion async
we don't care about its result
2019-09-10 14:43:48 +03:00
Shay Nehmad 53f31ddcc9 Refactored notification logic to method 2019-09-09 17:36:00 +03:00
Shay Nehmad a51a6065b8 Now looking at the exit codes of ping 2019-09-09 17:27:53 +03:00
Shay Nehmad a32012ce52 Added communicate as new user to default PBA actions 2019-09-09 13:35:46 +03:00
Shay Nehmad 63d76f19f8 Updated notification to only show if the island is not on the report page already 2019-09-09 11:47:16 +03:00
Shay Nehmad 313911fd77 Deleted console log + fixed link in notification 2019-09-09 11:38:37 +03:00
Daniel Goldberg e010ea5b39 Fully explict path all the things 2019-09-09 10:23:10 +03:00
Shay Nehmad dc2686301c Fixed notification link and updated legend texts 2019-09-09 10:20:23 +03:00
Daniel Goldberg bf3ad35124 Move try catch to better handle multiple exporters 2019-09-09 09:25:46 +03:00
Daniel Goldberg 004cfa17f3 Bugfix, add AWS exporter only when running with AWS config. 2019-09-09 09:25:46 +03:00
Daniel Goldberg 72cae8624c Move AWS exporting to proper subfolder 2019-09-09 09:25:45 +03:00
VakarisZ 547103508f
Merge pull request #423 from gaochua/fix_shellshock
Enter lock in Shellshock exploit
2019-09-09 09:05:16 +03:00
Shay Nehmad f78e76bdee Renamed process_handle to process_info and removed bad comment 2019-09-07 18:49:59 +03:00
Anh T Nguyen 7b0bf71279 update 2019-09-07 07:14:11 +07:00
Anh T Nguyen ee10ca9050 move try_lock to HostExploiter 2019-09-06 11:11:19 +07:00
Shay Nehmad e520df4c34 Fixed events length check 2019-09-05 21:40:36 +03:00
Shay Nehmad 51117edbea Add deletion of users 2019-09-05 21:32:04 +03:00
Shay Nehmad e618378c95 Vastly improved communicate as new user PBA code structure, also not leaking any more process or thread handles. 2019-09-05 20:56:48 +03:00
Shay Nehmad e9cd20a345 If one PBA fails it shouldn't stop all the rest. 2019-09-05 20:56:17 +03:00
Shay Nehmad 731e3acb90 Added exception info to monkey main function. 2019-09-05 20:56:00 +03:00
VakarisZ 3a290b46ac Fixed T1078 attack technique not implemented, empty PBA message and other bugs 2019-09-05 16:40:02 +03:00
VakarisZ 772880f952 Added resources explicitly for testing, improved analyzer, added config parser class 2019-09-05 15:03:30 +03:00
Shay Nehmad 3403d26d70 Merge branch '400/aggregate-findings' into 400/more-tests 2019-09-05 12:53:05 +03:00
Shay Nehmad 5a29e047ab Extracted events amount badge to function 2019-09-04 17:00:28 +03:00
Shay Nehmad 86cf09419c Moved imports to top of try 2019-09-04 16:24:46 +03:00
Shay Nehmad ae414bcd13 Remove unnecessary apostrophes from commandline 2019-09-04 12:42:46 +03:00
Shay Nehmad 097d8831c8 Joining commands using ,,.join() for linux 2019-09-04 12:40:53 +03:00
Shay Nehmad 4f912d9d1e Fixed sudo usage + added debug logs 2019-09-04 12:30:55 +03:00
VakarisZ 02c7d6c30e Added docs about order of method calls 2019-09-04 12:11:47 +03:00
Shay Nehmad 37fac9c613 Merge branch '400/zero-trust-mvp' into 400/more-tests 2019-09-04 12:11:05 +03:00
Shay Nehmad 8484925a64 Added aws_instance_id field to monkey model 2019-09-04 12:05:46 +03:00
VakarisZ 005618072d Removed unused mssqlexec objects property 2019-09-04 11:46:28 +03:00
Shay Nehmad 2a78b62d00 Moved imports to local imports 2019-09-04 11:35:18 +03:00
Shay Nehmad 3469ec6996 Still need to test linux 2019-09-03 22:35:18 +03:00
Shay Nehmad c371bf8ac5 Added 1314 error TODO 2019-09-03 21:52:30 +03:00
Shay Nehmad 1befe35d34 Added some logs, and more error handling for winapis. Still not working 2019-09-03 21:42:48 +03:00
Shay Nehmad 52a95935c8 Added new user communication PBA and ZT test, not working yet WIP! 2019-09-03 21:17:13 +03:00
VakarisZ ac702ffc27 Removed useless import in mssqlexec 2019-09-03 16:29:08 +03:00
VakarisZ 6c49cabbc2 Changed string formatting to latest syntax 2019-09-03 16:27:11 +03:00
VakarisZ 63d07f9c4b Added unit tests, improved mssql readability 2019-09-03 15:51:13 +03:00
Shay Nehmad a7c18437cd Merge branch 'develop' into 400/zero-trust-mvp 2019-09-02 19:06:21 +03:00
Shay Nehmad 6e0c974215 Final CR comments, improved doc and extracted a saveJsonToFIle function 2019-09-02 18:19:49 +03:00
Shay Nehmad 871e7b11d7 Updated SVGs 2019-09-02 18:12:08 +03:00
Shay Nehmad 68d185f5fd Added new icons for timeline events types (and deleted the Island event type) 2019-09-02 16:00:04 +03:00
Shay Nehmad d7543e1117 Extracted magic numbers to consts and deleted unused css file 2019-09-02 15:38:57 +03:00
Shay Nehmad 4d50f0d8de Map status to finding instead of calling function 3 times 2019-09-02 15:05:34 +03:00
Shay Nehmad cdc72eace7 Renamed overview to section 2019-09-02 14:52:14 +03:00
Shay Nehmad f05178baeb Fixed proptypes 2019-09-02 14:47:49 +03:00
Shay Nehmad 8f8f273859 Seperated main sections to components 2019-09-02 14:43:54 +03:00
Shay Nehmad 02cd1ad684 Extracted event text and creation to function 2019-09-02 14:43:39 +03:00
Shay Nehmad 5487395797 Moved JSON parsing to state.py 2019-09-02 12:32:00 +03:00
Shay Nehmad a330dc1bb7 Extracted json parsing to scan.py 2019-09-02 11:46:42 +03:00
Shay Nehmad fec0791c7b Moved JSON parsing to exploit.py 2019-09-02 11:40:22 +03:00
vakaris_zilius b733cf3389 Changed tmp dir path on mssql exploiter 2019-09-02 08:37:52 +00:00
Shay Nehmad 2269e78888 Added docs for is_segmentation_violation 2019-09-02 11:37:26 +03:00
Shay Nehmad 2d7829ca4b Split test_machine_exploited into 2 functions 2019-09-02 11:05:57 +03:00
Shay Nehmad 107ac73366 Improved documentation of create_ir_add_to_existing_finding 2019-09-02 11:00:57 +03:00
Shay Nehmad 9fc2bf886d Extracted ES_SERVICE to const
CR
2019-09-02 11:00:10 +03:00
Shay Nehmad faf6da15bb Improved doc, refactored names and added test case for segmentation_utils
CR
2019-09-02 10:20:52 +03:00
Shay Nehmad 30b74675a5 Revert "Revert "Added post breach processing dict and extracted consts to common""
This reverts commit 36ad6fc441.
2019-09-02 10:08:52 +03:00
Shay Nehmad c60f393dbe Merge branch '400/zero-trust-mvp' into 400/more-tests 2019-09-02 10:08:43 +03:00
Shay Nehmad 36ad6fc441 Revert "Added post breach processing dict and extracted consts to common"
This reverts commit 98764f0291.
2019-09-02 10:08:04 +03:00
Shay Nehmad 98764f0291 Added post breach processing dict and extracted consts to common 2019-09-02 10:07:26 +03:00
Shay Nehmad 68c0f590ac Removing the refresh data interval when leaving report page 2019-09-01 16:17:22 +03:00
Shay Nehmad 1550742d4d Added tunneling zero trust test 2019-09-01 15:40:29 +03:00
Shay Nehmad 39437c5913 Rename existing test files in accordance to new naming scheme 2019-09-01 14:13:24 +03:00
Shay Nehmad 146c87c338 Optimize import 2019-09-01 12:18:42 +03:00
Shay Nehmad f7d66e0ebc Realize the previous idea was stupid and aggregate all exploit attempts based on status alone 2019-09-01 12:10:27 +03:00
Shay Nehmad e7953defdc Now that findings are aggregated, added events amount counter badge 2019-09-01 12:09:26 +03:00
Shay Nehmad 3f2d5b1479 Aggregate passed exploit attempts tests (which means failed exploiting) 2019-09-01 12:08:58 +03:00
Shay Nehmad 1fddd4abbf Made some findings aggregate findings to improve readability of Findings table. 2019-09-01 11:44:08 +03:00
Shay Nehmad 1d5a4d20ce Added aggregate finding 2019-09-01 11:29:04 +03:00
Shay Nehmad 5e059f78eb Various UI Improvements 2019-09-01 10:51:33 +03:00
Anh T Nguyen c0a6f1d1dd update 2019-09-01 14:04:16 +07:00
Shay Nehmad 85401e5d48 Formatting + Removed export events button from main page 2019-08-29 19:54:46 +03:00
Shay Nehmad 8136c31476 Venn diagram - new version from Vladimir 2019-08-29 19:28:03 +03:00
Anh T Nguyen 8099644cee enter lock before downloading 2019-08-29 18:18:41 +07:00
Shay Nehmad 641308c91b Update rules of diagram 2019-08-29 10:58:51 +03:00
Shay Nehmad 20976ddaaf Moved tooltip right 2019-08-28 20:11:21 +03:00
Shay Nehmad b343ccf21e New Version of the Venn Diagram 2019-08-28 19:52:30 +03:00
vakaris_zilius 8c930fae66 Mssql fixed, payload parsing class added 2019-08-28 14:34:45 +00:00
Shay Nehmad dee006449d Renamed events component 2019-08-28 14:13:33 +03:00
Shay Nehmad a4a9f0c491 Separated findings per status 2019-08-28 14:10:30 +03:00
Shay Nehmad dfebf5e841 Replaced Conclusive with Failed, and Positive with Passed 2019-08-28 11:59:33 +03:00
Shay Nehmad 04005b14d7 Fixed style name errors 2019-08-28 11:04:50 +03:00
Shay Nehmad 9538c3f0e6 Updated the VennDiagram 2019-08-28 10:51:52 +03:00
Shay Nehmad bb1ee6ff14 Refactored directives to recommendations 2019-08-28 10:35:47 +03:00
Shay Nehmad 32bc318c69 Refactored directives to recommendations (still WIP) 2019-08-27 14:33:29 +03:00
Shay Nehmad 07eb9ec32f A lot of small UI changes, trying to make the report look more polished. 2019-08-27 11:58:15 +03:00
Shay Nehmad 6cd5cff818 Added a collapsible report legend and redid the Summary section 2019-08-27 11:25:41 +03:00
Itay Mizeretz cc5795d99c
Merge pull request #415 from VakarisZ/config_submit_bugfix
Bugfix: can't submit on import
2019-08-27 10:42:28 +03:00
VakarisZ 3ebd7ed02d MSSQL refactored to dynamically split exploitation commands into smaller chunks 2019-08-26 18:49:58 +03:00
Shay Nehmad 59581d3cc1
Merge pull request #412 from guardicore/400-zero-trust-mvp-venn-diagram
VennDiagram component first version is complete.
2019-08-26 15:26:40 +03:00
Shay Nehmad 05a1b2d235 Remove type hint as it doesn't work well with python2. 😢 2019-08-26 15:24:55 +03:00
Shay Nehmad 4601882ba2 Merge branch '400-zero-trust-mvp-venn-diagram' of https://github.com/guardicore/monkey into 400-zero-trust-mvp-venn-diagram 2019-08-26 14:23:17 +03:00
Shay Nehmad a9ba3273dd Added positive segmentation findings 2019-08-26 14:23:14 +03:00
Shay Nehmad fbb82f412b Fixed copy-pasta bug about state telemetry. 2019-08-26 14:08:45 +03:00
Shay Nehmad f865c4b4b9 Added sent telemetry logging. 2019-08-26 14:08:18 +03:00
VakarisZ 88cf67aab7 Added ability to disable telemetry briefs for certain telemetries. 2019-08-26 11:30:30 +03:00
vkuchinov e4a03ce3e0 Removing rudimentary variables from ResponsiveVennDiagram and VennDiagram
[x] childrenWidth/childrenHeight were removed, have beed used previously for non-responsive SVG
[x] this.ZOrder array was removed, since there is another way of soring z-indices
[x] translate was removed, since now it's the part of viewPortParameters string ((-this.width / 2) + ' ' + (-this.height / 2))
2019-08-26 09:59:36 +03:00
Shay Nehmad 9367b6ce8e Fixed arcnode text bug + formatting 2019-08-26 09:20:59 +03:00
VakarisZ 7e0b85a34d Improved description of T1090 connection proxy 2019-08-25 18:58:34 +03:00
Shay Nehmad 79fabb1ac1 Whitespace fixes 2019-08-25 18:49:57 +03:00
Shay Nehmad 0a044e2295 Reverted changed to ZT report page and fixed rule bug in diagram + whitespace. 2019-08-25 18:30:56 +03:00
Shay Nehmad 223adb0f33 Added state function, WIP 2019-08-25 18:14:15 +03:00
Shay Nehmad 05eab34d45 Merge branch '400-zero-trust-mvp-venn-diagram' of https://github.com/guardicore/monkey into 400-zero-trust-mvp-venn-diagram 2019-08-25 18:08:43 +03:00
Shay Nehmad 470806f3bc Added segmentation violation test 2019-08-25 18:08:21 +03:00
Shay Nehmad 9dfb250d59 Added a custom segmentation finding type 2019-08-25 18:07:49 +03:00
vkuchinov b9cb655114 Fixes
Fixes for issues posted by Shay at VennDiagram component #412

[x] ResponsiveVennDiagram.js, VennDiagram.js
[x] VennDiagram.css (rename)
[x] ArcNode, CicularNode, Tooltip as .js
and other minor issues
2019-08-25 17:32:21 +03:00
VakarisZ 51b689366a Current section not changed on import 2019-08-25 15:47:24 +03:00
vkuchinov 5c4797108e Rules update
The rules are now set at this.rules array.
While some of them have two conditions, i.e. Rule #2 shoud check if Conclusive is 0 and Inconclusive > 0, all rules has its own function (formula), which returns true or false.

Eventually, I could shorten variable naming, for example, d_['Conclusive'] to something more prompt, but keeping this helps understand formulas even without referencing to upper comments.
2019-08-25 13:05:56 +03:00
Shay Nehmad 6ec4e613cf Extracted segmentation utils function 2019-08-25 11:31:31 +03:00
Shay Nehmad fb01bface6 Extracted config utility function to new package - in future all config should move here 2019-08-25 10:30:17 +03:00
VakarisZ 97b0568c35 Added success log message in mimikatz and fixed private keys attack query 2019-08-23 16:08:53 +03:00
vkuchinov 244be146bb Update VennDiagram/index.js
[x] Scrolling issue. Since only window/document have 'scroll' event, the only option to fix tooltip issue on scrolling is just simply hide it.

That works well if after scrolling the mouse pointer doesn't stay on any venn nodes. Otherwise, you have to move mouse for the tooltip.

Theoretically, I could store hovered node coordinates and use them in _onScroll function to check if mouse is still on top one Venn nodes find window.pageYOffset difference.
2019-08-23 02:41:00 +03:00
Daniel Goldberg 489a6e8ebb
Merge pull request #409 from guardicore/feature/remove_rdp_grinder
Feature/remove rdp grinder
2019-08-22 16:11:21 +02:00
Shay Nehmad af8c7dc29f Added elasticsearch test 2019-08-22 16:18:37 +03:00
Shay Nehmad 3fef55eefa Now periodically updating the report. 2019-08-22 15:00:50 +03:00
vkuchinov 20e282f5fb Update index.js
[x] Z-Indices sorting on hover
[x] Resize (viewBox solution]
[x] Rule correction, have excluded 'Unexecuted' parameter from the sum for Rule #1

Still on my today's TODO list:

[-] Still looking for an elegant solution to scrolling glitch.
     Yes, the easiest way is to hide tooltip on scrolling, but that's not cool

[-] Need some coding refining
2019-08-22 14:50:07 +03:00
Shay Nehmad bf417ab01d Added machine exploited ZT test 2019-08-22 14:40:05 +03:00
Shay Nehmad bd97c965f1 Fixed another state bug in ZT report using deep copy 2019-08-22 14:39:40 +03:00
Itay Mizeretz d4c337dc42
Merge pull request #390 from VakarisZ/attack_scripting
T1064 Scripting
2019-08-22 14:24:33 +03:00
Itay Mizeretz 9bd4238d9c
Merge pull request #385 from VakarisZ/attack_remote_services
T1021 Remote services
2019-08-22 14:11:56 +03:00
VakarisZ b9a5ac1fe4 Refactored: scripting telemetry is send as a string, without using UsageEnum 2019-08-22 14:04:45 +03:00
Shay Nehmad 2174f43a84 Added d3 to package.json and now using the ResponsiveVennDiagram in Pillaroverview 2019-08-22 13:33:40 +03:00
Shay Nehmad 4455700c2a Merge branch '400/zero-trust-mvp' into 400-zero-trust-mvp-venn-diagram 2019-08-22 11:46:12 +03:00
Shay Nehmad 7f98f55e64 Fixed error +warning in UI
Error - didn't use deep copy and caused error
Warning - 2 events might have the same timestamp
2019-08-22 11:21:52 +03:00
Shay Nehmad 4581376d8d Added the open http endpoint test 2019-08-22 10:52:33 +03:00
vkuchinov 83ed12249e VennDiagram component 2019-08-22 10:13:10 +03:00
VakarisZ 9b23be44ed Added hash parsing to the T1021 remote services attack technique. 2019-08-22 09:28:53 +03:00
Shay Nehmad d6104bbcf9 Started implementing the open_data_endpoints test, still not creating findings 2019-08-21 21:28:15 +03:00
Shay Nehmad 6843606a4f Merge commit leftovers 2019-08-21 19:03:51 +03:00
Shay Nehmad 293a6639f2 Merge branch 'develop' into 400/zero-trust-mvp 2019-08-21 19:03:33 +03:00
Shay Nehmad bfaa05aa51 Minor CR fixes - changed downlaod filename, refactored some names 2019-08-21 18:48:02 +03:00
Shay Nehmad 3f85c336b9 Moved init of mappings to init file 2019-08-21 18:32:39 +03:00
Daniel Goldberg ef4113d31b
Merge pull request #410 from VakarisZ/default_server_bugfix
Bugfix for monkey without -s flag
2019-08-21 16:47:02 +02:00
Itay Mizeretz fc23faed3e
Merge pull request #384 from VakarisZ/attack_sys_network_config
T1016 System network configuration discovery
2019-08-21 17:41:46 +03:00
Itay Mizeretz 145488edd4
Merge pull request #383 from VakarisZ/attack_system_discovery
T1018 Remote System Discovery
2019-08-21 17:39:05 +03:00
Itay Mizeretz 3202deaf51
Merge pull request #382 from VakarisZ/attack_data_from_system
T1005 Data from local system
2019-08-21 17:37:41 +03:00
Itay Mizeretz d4c18eb07a
Merge pull request #381 from VakarisZ/attack_file_perm_mod
T1222 File permissions modification
2019-08-21 17:30:29 +03:00
Itay Mizeretz 22a5f87ebb
Merge pull request #379 from VakarisZ/attack_exfiltration_c2_channel
T1041 Exfiltration Over Command and Control Channel
2019-08-21 17:27:55 +03:00
VakarisZ 4b356c2cf4 Fixes bug where monkey crashes if default server flag is not passed 2019-08-21 11:54:38 +03:00
Daniel Goldberg 3ca2df85e2 Remove all mention of RDP grinder 2019-08-21 10:02:44 +02:00
Daniel Goldberg 2d82a18501 Add missing requirement 2019-08-21 10:02:08 +02:00
VakarisZ baccf3cc0b Merge branch 'attack_remote_services' into attack_scripting 2019-08-21 09:19:33 +03:00
VakarisZ 6a1bc4ba96 Merge branch 'attack_sys_network_config' into attack_remote_services 2019-08-21 09:19:04 +03:00
VakarisZ f014d3b035 Merge branch 'attack_system_discovery' into attack_sys_network_config 2019-08-21 09:18:32 +03:00
VakarisZ 3852bb80f3 Merge branch 'attack_data_from_system' into attack_system_discovery 2019-08-21 09:08:54 +03:00
VakarisZ b80040c547 Merge branch 'attack_file_perm_mod' into attack_data_from_system 2019-08-21 09:07:48 +03:00
VakarisZ ba40f1a5c4 Merge branch 'attack_exfiltration_c2_channel' into attack_file_perm_mod 2019-08-21 09:06:33 +03:00
VakarisZ 1dfdb9b0a1 Merge remote-tracking branch 'upstream/develop' into attack_exfiltration_c2_channel
# Conflicts:
#	monkey/monkey_island/cc/models/monkey.py
#	monkey/monkey_island/cc/ui/src/components/attack/techniques/T1090.js
2019-08-21 09:05:34 +03:00
VakarisZ 68aec8e336 Exported UsageTechnique class to separate file, improved documentation. Refactored scripting attack telemetry sending in pba 2019-08-20 18:15:25 +03:00
VakarisZ 4013652f6c Merge branch 'attack_remote_services' into attack_scripting 2019-08-20 17:09:03 +03:00
VakarisZ 54b38b04b2 Exported common T1021 and T1110 functions to 'technique_report_tools.py' file, fixed 'ScanStatus' usage on front end 2019-08-20 17:03:26 +03:00
VakarisZ 1360e1877c Merge branch 'attack_sys_network_config' into attack_remote_services 2019-08-20 16:36:26 +03:00
VakarisZ fd20d98a8f Fixed CR comments 2019-08-20 16:27:48 +03:00
VakarisZ 320bcc4c1d Merge branch 'attack_system_discovery' into attack_sys_network_config
# Conflicts:
#	monkey/monkey_island/cc/ui/src/components/attack/techniques/Helpers.js
#	monkey/monkey_island/cc/ui/src/components/attack/techniques/T1082.js
2019-08-20 16:10:06 +03:00
VakarisZ d73e846419 Fixed CR comments 2019-08-20 15:39:10 +03:00
VakarisZ 35e7be1361 Merge branch 'attack_data_from_system' into attack_system_discovery 2019-08-20 15:36:46 +03:00
VakarisZ bfa524b3ea Fixed typos in UI (renamed scanStatus to ScanStatus) 2019-08-20 15:20:38 +03:00
VakarisZ 5b074158ec Renamed '_type' to 'gathered_data_type' in data from local system attack technique. 2019-08-20 15:05:14 +03:00
VakarisZ 1da20b33c6 Merge branch 'attack_file_perm_mod' into attack_data_from_system 2019-08-20 15:04:11 +03:00
VakarisZ 62e5ee5b46 Merge branch 'attack_exfiltration_c2_channel' into attack_file_perm_mod
# Conflicts:
#	monkey/infection_monkey/exploit/sshexec.py
2019-08-20 09:03:37 +03:00
VakarisZ 1e661476a9 UI bugfixes 2019-08-20 08:52:36 +03:00
VakarisZ cae1b72d86 Added machine to t1222 telem. comment 2019-08-20 08:35:45 +03:00
Shay Nehmad db58bf9a87 Fixed all small UI comments 2019-08-19 19:00:18 +03:00
Shay Nehmad f26ab7f62d Using regular print. Doesn't look great, but better than nothing. 2019-08-19 18:13:30 +03:00
Shay Nehmad d52a6eab57 Separated sections to methods for readability 2019-08-19 18:09:05 +03:00
VakarisZ 4ae92af37d Merge remote-tracking branch 'upstream/develop' into attack_exfiltration_c2_channel
# Conflicts:
#	monkey/monkey_island/cc/models/monkey.py
2019-08-19 17:55:10 +03:00
VakarisZ 3325aea17d Fixed CR comments 2019-08-19 17:52:42 +03:00
Shay Nehmad 2fa2c04940 Extracted execution status function to reduce code duplication 2019-08-19 15:57:48 +03:00
VakarisZ f2f616f847 Merge remote-tracking branch 'upstream/develop' into attack_proxy
# Conflicts:
#	monkey/monkey_island/cc/models/monkey.py
2019-08-19 15:31:58 +03:00
Shay Nehmad c4805b70e2 Unified style and look of two reports loading location, + added print buttom component. 2019-08-19 15:21:55 +03:00
VakarisZ e9d39577ee Fixed bug in unit test for tunneling 2019-08-19 15:17:48 +03:00
Shay Nehmad e88c2baf64 renamed funtion to be clearer. 2019-08-19 15:02:27 +03:00
Shay Nehmad 92156946fe Added docs for function 2019-08-19 14:59:10 +03:00
Shay Nehmad 231de96e8c renamed test files to convention 2019-08-19 14:55:51 +03:00
Shay Nehmad 6ca4df1c26 extracted filter av logiv to seperate function 2019-08-19 14:53:15 +03:00
Shay Nehmad a6789a53b2 Extracted process telem to hooks.py 2019-08-19 14:43:23 +03:00
Shay Nehmad 757af1c6af Moved all processing code into services/telemetry/processing
Telemetry class line count: 87. 😄
2019-08-19 14:34:21 +03:00
VakarisZ c6da2cce07 Fixed bugs and typos 2019-08-19 14:16:25 +03:00
Shay Nehmad c1ac45470c Added doc to test_event 2019-08-19 13:40:35 +03:00
Shay Nehmad 524859f011 Removed unused exception 2019-08-19 13:35:37 +03:00
Shay Nehmad 453c8f9eb4 Moved ZT models to own folder and added documentation 2019-08-19 13:34:32 +03:00
Shay Nehmad d50095b570 Changed "general" report to "security" all over 2019-08-19 12:03:42 +03:00
Shay Nehmad d693b216a7 Removed unused files 2019-08-19 11:57:39 +03:00
Shay Nehmad aaab4a479c Added doc to consts file, and moved AV list to AV file 2019-08-19 11:56:05 +03:00
Shay Nehmad ba1667372b create telemetry services directory - soon all the telemetry resources functions will be moved there. 2019-08-19 11:41:04 +03:00
Shay Nehmad 73a6cb22b6 Extracted antivirus ZTtest to different file in a new module under services. 2019-08-19 11:39:12 +03:00
VakarisZ 99fd62928d Merge remote-tracking branch 'upstream/develop' into attack_bugfixes 2019-08-19 11:05:11 +03:00
VakarisZ 7eab8687c1 Fixed bug created during merge, fixed typos in attack telemetries for usage. 2019-08-19 10:46:17 +03:00
VakarisZ e774fcaff6 Merge remote-tracking branch 'upstream/develop' into attack_file_copy
# Conflicts:
#	monkey/common/utils/attack_utils.py
#	monkey/infection_monkey/dropper.py
#	monkey/infection_monkey/system_info/mimikatz_collector.py
#	monkey/infection_monkey/system_singleton.py
#	monkey/infection_monkey/telemetry/attack/t1106_telem.py
2019-08-19 08:54:50 +03:00
Shay Nehmad 32a346fdcf Fixed missing pillar status (for label color) 2019-08-18 09:41:57 +03:00
Shay Nehmad 21c3c9bf4d Now returning full text data to the website 2019-08-15 12:27:21 +03:00
Shay Nehmad 7006a2332f All labels now show status 2019-08-15 11:39:46 +03:00
Shay Nehmad 3d96f71988 Made statuslabel look better 2019-08-15 10:54:30 +03:00
Shay Nehmad e4cf3706ec Extracted status label 2019-08-15 10:42:19 +03:00
Shay Nehmad db85dfe24a Added sec issues to ZT report as well and gridified the overview section 2019-08-15 10:23:06 +03:00
Shay Nehmad 785bc4f109 Extracted the security issues glance component 2019-08-15 10:17:38 +03:00
Shay Nehmad cd7cc4011d Added pillar summary as per Barak's idea 2019-08-15 09:17:32 +03:00