Shay Nehmad
4dca735265
Changed `check_output` to `Popen` to make user deletion async
...
we don't care about its result
2019-09-10 14:43:48 +03:00
Shay Nehmad
53f31ddcc9
Refactored notification logic to method
2019-09-09 17:36:00 +03:00
Shay Nehmad
a51a6065b8
Now looking at the exit codes of ping
2019-09-09 17:27:53 +03:00
Shay Nehmad
a32012ce52
Added communicate as new user to default PBA actions
2019-09-09 13:35:46 +03:00
Shay Nehmad
63d76f19f8
Updated notification to only show if the island is not on the report page already
2019-09-09 11:47:16 +03:00
Shay Nehmad
313911fd77
Deleted console log + fixed link in notification
2019-09-09 11:38:37 +03:00
Daniel Goldberg
e010ea5b39
Fully explict path all the things
2019-09-09 10:23:10 +03:00
Shay Nehmad
dc2686301c
Fixed notification link and updated legend texts
2019-09-09 10:20:23 +03:00
Daniel Goldberg
bf3ad35124
Move try catch to better handle multiple exporters
2019-09-09 09:25:46 +03:00
Daniel Goldberg
004cfa17f3
Bugfix, add AWS exporter only when running with AWS config.
2019-09-09 09:25:46 +03:00
Daniel Goldberg
72cae8624c
Move AWS exporting to proper subfolder
2019-09-09 09:25:45 +03:00
VakarisZ
547103508f
Merge pull request #423 from gaochua/fix_shellshock
...
Enter lock in Shellshock exploit
2019-09-09 09:05:16 +03:00
Shay Nehmad
f78e76bdee
Renamed process_handle to process_info and removed bad comment
2019-09-07 18:49:59 +03:00
Anh T Nguyen
7b0bf71279
update
2019-09-07 07:14:11 +07:00
Anh T Nguyen
ee10ca9050
move try_lock to HostExploiter
2019-09-06 11:11:19 +07:00
Shay Nehmad
e520df4c34
Fixed events length check
2019-09-05 21:40:36 +03:00
Shay Nehmad
51117edbea
Add deletion of users
2019-09-05 21:32:04 +03:00
Shay Nehmad
e618378c95
Vastly improved communicate as new user PBA code structure, also not leaking any more process or thread handles.
2019-09-05 20:56:48 +03:00
Shay Nehmad
e9cd20a345
If one PBA fails it shouldn't stop all the rest.
2019-09-05 20:56:17 +03:00
Shay Nehmad
731e3acb90
Added exception info to monkey main function.
2019-09-05 20:56:00 +03:00
VakarisZ
3a290b46ac
Fixed T1078 attack technique not implemented, empty PBA message and other bugs
2019-09-05 16:40:02 +03:00
VakarisZ
772880f952
Added resources explicitly for testing, improved analyzer, added config parser class
2019-09-05 15:03:30 +03:00
Shay Nehmad
3403d26d70
Merge branch '400/aggregate-findings' into 400/more-tests
2019-09-05 12:53:05 +03:00
Shay Nehmad
5a29e047ab
Extracted events amount badge to function
2019-09-04 17:00:28 +03:00
Shay Nehmad
86cf09419c
Moved imports to top of try
2019-09-04 16:24:46 +03:00
Shay Nehmad
ae414bcd13
Remove unnecessary apostrophes from commandline
2019-09-04 12:42:46 +03:00
Shay Nehmad
097d8831c8
Joining commands using ,,.join() for linux
2019-09-04 12:40:53 +03:00
Shay Nehmad
4f912d9d1e
Fixed sudo usage + added debug logs
2019-09-04 12:30:55 +03:00
VakarisZ
02c7d6c30e
Added docs about order of method calls
2019-09-04 12:11:47 +03:00
Shay Nehmad
37fac9c613
Merge branch '400/zero-trust-mvp' into 400/more-tests
2019-09-04 12:11:05 +03:00
Shay Nehmad
8484925a64
Added aws_instance_id field to monkey model
2019-09-04 12:05:46 +03:00
VakarisZ
005618072d
Removed unused mssqlexec objects property
2019-09-04 11:46:28 +03:00
Shay Nehmad
2a78b62d00
Moved imports to local imports
2019-09-04 11:35:18 +03:00
Shay Nehmad
3469ec6996
Still need to test linux
2019-09-03 22:35:18 +03:00
Shay Nehmad
c371bf8ac5
Added 1314 error TODO
2019-09-03 21:52:30 +03:00
Shay Nehmad
1befe35d34
Added some logs, and more error handling for winapis. Still not working
2019-09-03 21:42:48 +03:00
Shay Nehmad
52a95935c8
Added new user communication PBA and ZT test, not working yet WIP!
2019-09-03 21:17:13 +03:00
VakarisZ
ac702ffc27
Removed useless import in mssqlexec
2019-09-03 16:29:08 +03:00
VakarisZ
6c49cabbc2
Changed string formatting to latest syntax
2019-09-03 16:27:11 +03:00
VakarisZ
63d07f9c4b
Added unit tests, improved mssql readability
2019-09-03 15:51:13 +03:00
Shay Nehmad
a7c18437cd
Merge branch 'develop' into 400/zero-trust-mvp
2019-09-02 19:06:21 +03:00
Shay Nehmad
6e0c974215
Final CR comments, improved doc and extracted a saveJsonToFIle function
2019-09-02 18:19:49 +03:00
Shay Nehmad
871e7b11d7
Updated SVGs
2019-09-02 18:12:08 +03:00
Shay Nehmad
68d185f5fd
Added new icons for timeline events types (and deleted the Island event type)
2019-09-02 16:00:04 +03:00
Shay Nehmad
d7543e1117
Extracted magic numbers to consts and deleted unused css file
2019-09-02 15:38:57 +03:00
Shay Nehmad
4d50f0d8de
Map status to finding instead of calling function 3 times
2019-09-02 15:05:34 +03:00
Shay Nehmad
cdc72eace7
Renamed overview to section
2019-09-02 14:52:14 +03:00
Shay Nehmad
f05178baeb
Fixed proptypes
2019-09-02 14:47:49 +03:00
Shay Nehmad
8f8f273859
Seperated main sections to components
2019-09-02 14:43:54 +03:00
Shay Nehmad
02cd1ad684
Extracted event text and creation to function
2019-09-02 14:43:39 +03:00
Shay Nehmad
5487395797
Moved JSON parsing to state.py
2019-09-02 12:32:00 +03:00
Shay Nehmad
a330dc1bb7
Extracted json parsing to scan.py
2019-09-02 11:46:42 +03:00
Shay Nehmad
fec0791c7b
Moved JSON parsing to exploit.py
2019-09-02 11:40:22 +03:00
vakaris_zilius
b733cf3389
Changed tmp dir path on mssql exploiter
2019-09-02 08:37:52 +00:00
Shay Nehmad
2269e78888
Added docs for is_segmentation_violation
2019-09-02 11:37:26 +03:00
Shay Nehmad
2d7829ca4b
Split test_machine_exploited into 2 functions
2019-09-02 11:05:57 +03:00
Shay Nehmad
107ac73366
Improved documentation of create_ir_add_to_existing_finding
2019-09-02 11:00:57 +03:00
Shay Nehmad
9fc2bf886d
Extracted ES_SERVICE to const
...
CR
2019-09-02 11:00:10 +03:00
Shay Nehmad
faf6da15bb
Improved doc, refactored names and added test case for segmentation_utils
...
CR
2019-09-02 10:20:52 +03:00
Shay Nehmad
30b74675a5
Revert "Revert "Added post breach processing dict and extracted consts to common""
...
This reverts commit 36ad6fc441
.
2019-09-02 10:08:52 +03:00
Shay Nehmad
c60f393dbe
Merge branch '400/zero-trust-mvp' into 400/more-tests
2019-09-02 10:08:43 +03:00
Shay Nehmad
36ad6fc441
Revert "Added post breach processing dict and extracted consts to common"
...
This reverts commit 98764f0291
.
2019-09-02 10:08:04 +03:00
Shay Nehmad
98764f0291
Added post breach processing dict and extracted consts to common
2019-09-02 10:07:26 +03:00
Shay Nehmad
68c0f590ac
Removing the refresh data interval when leaving report page
2019-09-01 16:17:22 +03:00
Shay Nehmad
1550742d4d
Added tunneling zero trust test
2019-09-01 15:40:29 +03:00
Shay Nehmad
39437c5913
Rename existing test files in accordance to new naming scheme
2019-09-01 14:13:24 +03:00
Shay Nehmad
146c87c338
Optimize import
2019-09-01 12:18:42 +03:00
Shay Nehmad
f7d66e0ebc
Realize the previous idea was stupid and aggregate all exploit attempts based on status alone
2019-09-01 12:10:27 +03:00
Shay Nehmad
e7953defdc
Now that findings are aggregated, added events amount counter badge
2019-09-01 12:09:26 +03:00
Shay Nehmad
3f2d5b1479
Aggregate passed exploit attempts tests (which means failed exploiting)
2019-09-01 12:08:58 +03:00
Shay Nehmad
1fddd4abbf
Made some findings aggregate findings to improve readability of Findings table.
2019-09-01 11:44:08 +03:00
Shay Nehmad
1d5a4d20ce
Added aggregate finding
2019-09-01 11:29:04 +03:00
Shay Nehmad
5e059f78eb
Various UI Improvements
2019-09-01 10:51:33 +03:00
Anh T Nguyen
c0a6f1d1dd
update
2019-09-01 14:04:16 +07:00
Shay Nehmad
85401e5d48
Formatting + Removed export events button from main page
2019-08-29 19:54:46 +03:00
Shay Nehmad
8136c31476
Venn diagram - new version from Vladimir
2019-08-29 19:28:03 +03:00
Anh T Nguyen
8099644cee
enter lock before downloading
2019-08-29 18:18:41 +07:00
Shay Nehmad
641308c91b
Update rules of diagram
2019-08-29 10:58:51 +03:00
Shay Nehmad
20976ddaaf
Moved tooltip right
2019-08-28 20:11:21 +03:00
Shay Nehmad
b343ccf21e
New Version of the Venn Diagram
2019-08-28 19:52:30 +03:00
vakaris_zilius
8c930fae66
Mssql fixed, payload parsing class added
2019-08-28 14:34:45 +00:00
Shay Nehmad
dee006449d
Renamed events component
2019-08-28 14:13:33 +03:00
Shay Nehmad
a4a9f0c491
Separated findings per status
2019-08-28 14:10:30 +03:00
Shay Nehmad
dfebf5e841
Replaced Conclusive with Failed, and Positive with Passed
2019-08-28 11:59:33 +03:00
Shay Nehmad
04005b14d7
Fixed style name errors
2019-08-28 11:04:50 +03:00
Shay Nehmad
9538c3f0e6
Updated the VennDiagram
2019-08-28 10:51:52 +03:00
Shay Nehmad
bb1ee6ff14
Refactored directives to recommendations
2019-08-28 10:35:47 +03:00
Shay Nehmad
32bc318c69
Refactored directives to recommendations (still WIP)
2019-08-27 14:33:29 +03:00
Shay Nehmad
07eb9ec32f
A lot of small UI changes, trying to make the report look more polished.
2019-08-27 11:58:15 +03:00
Shay Nehmad
6cd5cff818
Added a collapsible report legend and redid the Summary section
2019-08-27 11:25:41 +03:00
Itay Mizeretz
cc5795d99c
Merge pull request #415 from VakarisZ/config_submit_bugfix
...
Bugfix: can't submit on import
2019-08-27 10:42:28 +03:00
VakarisZ
3ebd7ed02d
MSSQL refactored to dynamically split exploitation commands into smaller chunks
2019-08-26 18:49:58 +03:00
Shay Nehmad
59581d3cc1
Merge pull request #412 from guardicore/400-zero-trust-mvp-venn-diagram
...
VennDiagram component first version is complete.
2019-08-26 15:26:40 +03:00
Shay Nehmad
05a1b2d235
Remove type hint as it doesn't work well with python2. 😢
2019-08-26 15:24:55 +03:00
Shay Nehmad
4601882ba2
Merge branch '400-zero-trust-mvp-venn-diagram' of https://github.com/guardicore/monkey into 400-zero-trust-mvp-venn-diagram
2019-08-26 14:23:17 +03:00
Shay Nehmad
a9ba3273dd
Added positive segmentation findings
2019-08-26 14:23:14 +03:00
Shay Nehmad
fbb82f412b
Fixed copy-pasta bug about state telemetry.
2019-08-26 14:08:45 +03:00
Shay Nehmad
f865c4b4b9
Added sent telemetry logging.
2019-08-26 14:08:18 +03:00
VakarisZ
88cf67aab7
Added ability to disable telemetry briefs for certain telemetries.
2019-08-26 11:30:30 +03:00
vkuchinov
e4a03ce3e0
Removing rudimentary variables from ResponsiveVennDiagram and VennDiagram
...
[x] childrenWidth/childrenHeight were removed, have beed used previously for non-responsive SVG
[x] this.ZOrder array was removed, since there is another way of soring z-indices
[x] translate was removed, since now it's the part of viewPortParameters string ((-this.width / 2) + ' ' + (-this.height / 2))
2019-08-26 09:59:36 +03:00
Shay Nehmad
9367b6ce8e
Fixed arcnode text bug + formatting
2019-08-26 09:20:59 +03:00
VakarisZ
7e0b85a34d
Improved description of T1090 connection proxy
2019-08-25 18:58:34 +03:00
Shay Nehmad
79fabb1ac1
Whitespace fixes
2019-08-25 18:49:57 +03:00
Shay Nehmad
0a044e2295
Reverted changed to ZT report page and fixed rule bug in diagram + whitespace.
2019-08-25 18:30:56 +03:00
Shay Nehmad
223adb0f33
Added state function, WIP
2019-08-25 18:14:15 +03:00
Shay Nehmad
05eab34d45
Merge branch '400-zero-trust-mvp-venn-diagram' of https://github.com/guardicore/monkey into 400-zero-trust-mvp-venn-diagram
2019-08-25 18:08:43 +03:00
Shay Nehmad
470806f3bc
Added segmentation violation test
2019-08-25 18:08:21 +03:00
Shay Nehmad
9dfb250d59
Added a custom segmentation finding type
2019-08-25 18:07:49 +03:00
vkuchinov
b9cb655114
Fixes
...
Fixes for issues posted by Shay at VennDiagram component #412
[x] ResponsiveVennDiagram.js, VennDiagram.js
[x] VennDiagram.css (rename)
[x] ArcNode, CicularNode, Tooltip as .js
and other minor issues
2019-08-25 17:32:21 +03:00
VakarisZ
51b689366a
Current section not changed on import
2019-08-25 15:47:24 +03:00
vkuchinov
5c4797108e
Rules update
...
The rules are now set at this.rules array.
While some of them have two conditions, i.e. Rule #2 shoud check if Conclusive is 0 and Inconclusive > 0, all rules has its own function (formula), which returns true or false.
Eventually, I could shorten variable naming, for example, d_['Conclusive'] to something more prompt, but keeping this helps understand formulas even without referencing to upper comments.
2019-08-25 13:05:56 +03:00
Shay Nehmad
6ec4e613cf
Extracted segmentation utils function
2019-08-25 11:31:31 +03:00
Shay Nehmad
fb01bface6
Extracted config utility function to new package - in future all config should move here
2019-08-25 10:30:17 +03:00
VakarisZ
97b0568c35
Added success log message in mimikatz and fixed private keys attack query
2019-08-23 16:08:53 +03:00
vkuchinov
244be146bb
Update VennDiagram/index.js
...
[x] Scrolling issue. Since only window/document have 'scroll' event, the only option to fix tooltip issue on scrolling is just simply hide it.
That works well if after scrolling the mouse pointer doesn't stay on any venn nodes. Otherwise, you have to move mouse for the tooltip.
Theoretically, I could store hovered node coordinates and use them in _onScroll function to check if mouse is still on top one Venn nodes find window.pageYOffset difference.
2019-08-23 02:41:00 +03:00
Daniel Goldberg
489a6e8ebb
Merge pull request #409 from guardicore/feature/remove_rdp_grinder
...
Feature/remove rdp grinder
2019-08-22 16:11:21 +02:00
Shay Nehmad
af8c7dc29f
Added elasticsearch test
2019-08-22 16:18:37 +03:00
Shay Nehmad
3fef55eefa
Now periodically updating the report.
2019-08-22 15:00:50 +03:00
vkuchinov
20e282f5fb
Update index.js
...
[x] Z-Indices sorting on hover
[x] Resize (viewBox solution]
[x] Rule correction, have excluded 'Unexecuted' parameter from the sum for Rule #1
Still on my today's TODO list:
[-] Still looking for an elegant solution to scrolling glitch.
Yes, the easiest way is to hide tooltip on scrolling, but that's not cool
[-] Need some coding refining
2019-08-22 14:50:07 +03:00
Shay Nehmad
bf417ab01d
Added machine exploited ZT test
2019-08-22 14:40:05 +03:00
Shay Nehmad
bd97c965f1
Fixed another state bug in ZT report using deep copy
2019-08-22 14:39:40 +03:00
Itay Mizeretz
d4c337dc42
Merge pull request #390 from VakarisZ/attack_scripting
...
T1064 Scripting
2019-08-22 14:24:33 +03:00
Itay Mizeretz
9bd4238d9c
Merge pull request #385 from VakarisZ/attack_remote_services
...
T1021 Remote services
2019-08-22 14:11:56 +03:00
VakarisZ
b9a5ac1fe4
Refactored: scripting telemetry is send as a string, without using UsageEnum
2019-08-22 14:04:45 +03:00
Shay Nehmad
2174f43a84
Added d3 to package.json and now using the ResponsiveVennDiagram in Pillaroverview
2019-08-22 13:33:40 +03:00
Shay Nehmad
4455700c2a
Merge branch '400/zero-trust-mvp' into 400-zero-trust-mvp-venn-diagram
2019-08-22 11:46:12 +03:00
Shay Nehmad
7f98f55e64
Fixed error +warning in UI
...
Error - didn't use deep copy and caused error
Warning - 2 events might have the same timestamp
2019-08-22 11:21:52 +03:00
Shay Nehmad
4581376d8d
Added the open http endpoint test
2019-08-22 10:52:33 +03:00
vkuchinov
83ed12249e
VennDiagram component
2019-08-22 10:13:10 +03:00
VakarisZ
9b23be44ed
Added hash parsing to the T1021 remote services attack technique.
2019-08-22 09:28:53 +03:00
Shay Nehmad
d6104bbcf9
Started implementing the open_data_endpoints test, still not creating findings
2019-08-21 21:28:15 +03:00
Shay Nehmad
6843606a4f
Merge commit leftovers
2019-08-21 19:03:51 +03:00
Shay Nehmad
293a6639f2
Merge branch 'develop' into 400/zero-trust-mvp
2019-08-21 19:03:33 +03:00
Shay Nehmad
bfaa05aa51
Minor CR fixes - changed downlaod filename, refactored some names
2019-08-21 18:48:02 +03:00
Shay Nehmad
3f85c336b9
Moved init of mappings to init file
2019-08-21 18:32:39 +03:00
Daniel Goldberg
ef4113d31b
Merge pull request #410 from VakarisZ/default_server_bugfix
...
Bugfix for monkey without -s flag
2019-08-21 16:47:02 +02:00
Itay Mizeretz
fc23faed3e
Merge pull request #384 from VakarisZ/attack_sys_network_config
...
T1016 System network configuration discovery
2019-08-21 17:41:46 +03:00
Itay Mizeretz
145488edd4
Merge pull request #383 from VakarisZ/attack_system_discovery
...
T1018 Remote System Discovery
2019-08-21 17:39:05 +03:00
Itay Mizeretz
3202deaf51
Merge pull request #382 from VakarisZ/attack_data_from_system
...
T1005 Data from local system
2019-08-21 17:37:41 +03:00
Itay Mizeretz
d4c18eb07a
Merge pull request #381 from VakarisZ/attack_file_perm_mod
...
T1222 File permissions modification
2019-08-21 17:30:29 +03:00
Itay Mizeretz
22a5f87ebb
Merge pull request #379 from VakarisZ/attack_exfiltration_c2_channel
...
T1041 Exfiltration Over Command and Control Channel
2019-08-21 17:27:55 +03:00
VakarisZ
4b356c2cf4
Fixes bug where monkey crashes if default server flag is not passed
2019-08-21 11:54:38 +03:00
Daniel Goldberg
3ca2df85e2
Remove all mention of RDP grinder
2019-08-21 10:02:44 +02:00
Daniel Goldberg
2d82a18501
Add missing requirement
2019-08-21 10:02:08 +02:00
VakarisZ
baccf3cc0b
Merge branch 'attack_remote_services' into attack_scripting
2019-08-21 09:19:33 +03:00
VakarisZ
6a1bc4ba96
Merge branch 'attack_sys_network_config' into attack_remote_services
2019-08-21 09:19:04 +03:00
VakarisZ
f014d3b035
Merge branch 'attack_system_discovery' into attack_sys_network_config
2019-08-21 09:18:32 +03:00
VakarisZ
3852bb80f3
Merge branch 'attack_data_from_system' into attack_system_discovery
2019-08-21 09:08:54 +03:00
VakarisZ
b80040c547
Merge branch 'attack_file_perm_mod' into attack_data_from_system
2019-08-21 09:07:48 +03:00
VakarisZ
ba40f1a5c4
Merge branch 'attack_exfiltration_c2_channel' into attack_file_perm_mod
2019-08-21 09:06:33 +03:00
VakarisZ
1dfdb9b0a1
Merge remote-tracking branch 'upstream/develop' into attack_exfiltration_c2_channel
...
# Conflicts:
# monkey/monkey_island/cc/models/monkey.py
# monkey/monkey_island/cc/ui/src/components/attack/techniques/T1090.js
2019-08-21 09:05:34 +03:00
VakarisZ
68aec8e336
Exported UsageTechnique class to separate file, improved documentation. Refactored scripting attack telemetry sending in pba
2019-08-20 18:15:25 +03:00
VakarisZ
4013652f6c
Merge branch 'attack_remote_services' into attack_scripting
2019-08-20 17:09:03 +03:00
VakarisZ
54b38b04b2
Exported common T1021 and T1110 functions to 'technique_report_tools.py' file, fixed 'ScanStatus' usage on front end
2019-08-20 17:03:26 +03:00
VakarisZ
1360e1877c
Merge branch 'attack_sys_network_config' into attack_remote_services
2019-08-20 16:36:26 +03:00
VakarisZ
fd20d98a8f
Fixed CR comments
2019-08-20 16:27:48 +03:00
VakarisZ
320bcc4c1d
Merge branch 'attack_system_discovery' into attack_sys_network_config
...
# Conflicts:
# monkey/monkey_island/cc/ui/src/components/attack/techniques/Helpers.js
# monkey/monkey_island/cc/ui/src/components/attack/techniques/T1082.js
2019-08-20 16:10:06 +03:00
VakarisZ
d73e846419
Fixed CR comments
2019-08-20 15:39:10 +03:00
VakarisZ
35e7be1361
Merge branch 'attack_data_from_system' into attack_system_discovery
2019-08-20 15:36:46 +03:00
VakarisZ
bfa524b3ea
Fixed typos in UI (renamed scanStatus to ScanStatus)
2019-08-20 15:20:38 +03:00
VakarisZ
5b074158ec
Renamed '_type' to 'gathered_data_type' in data from local system attack technique.
2019-08-20 15:05:14 +03:00
VakarisZ
1da20b33c6
Merge branch 'attack_file_perm_mod' into attack_data_from_system
2019-08-20 15:04:11 +03:00
VakarisZ
62e5ee5b46
Merge branch 'attack_exfiltration_c2_channel' into attack_file_perm_mod
...
# Conflicts:
# monkey/infection_monkey/exploit/sshexec.py
2019-08-20 09:03:37 +03:00
VakarisZ
1e661476a9
UI bugfixes
2019-08-20 08:52:36 +03:00
VakarisZ
cae1b72d86
Added machine to t1222 telem. comment
2019-08-20 08:35:45 +03:00
Shay Nehmad
db58bf9a87
Fixed all small UI comments
2019-08-19 19:00:18 +03:00
Shay Nehmad
f26ab7f62d
Using regular print. Doesn't look great, but better than nothing.
2019-08-19 18:13:30 +03:00
Shay Nehmad
d52a6eab57
Separated sections to methods for readability
2019-08-19 18:09:05 +03:00
VakarisZ
4ae92af37d
Merge remote-tracking branch 'upstream/develop' into attack_exfiltration_c2_channel
...
# Conflicts:
# monkey/monkey_island/cc/models/monkey.py
2019-08-19 17:55:10 +03:00
VakarisZ
3325aea17d
Fixed CR comments
2019-08-19 17:52:42 +03:00
Shay Nehmad
2fa2c04940
Extracted execution status function to reduce code duplication
2019-08-19 15:57:48 +03:00
VakarisZ
f2f616f847
Merge remote-tracking branch 'upstream/develop' into attack_proxy
...
# Conflicts:
# monkey/monkey_island/cc/models/monkey.py
2019-08-19 15:31:58 +03:00
Shay Nehmad
c4805b70e2
Unified style and look of two reports loading location, + added print buttom component.
2019-08-19 15:21:55 +03:00
VakarisZ
e9d39577ee
Fixed bug in unit test for tunneling
2019-08-19 15:17:48 +03:00
Shay Nehmad
e88c2baf64
renamed funtion to be clearer.
2019-08-19 15:02:27 +03:00
Shay Nehmad
92156946fe
Added docs for function
2019-08-19 14:59:10 +03:00
Shay Nehmad
231de96e8c
renamed test files to convention
2019-08-19 14:55:51 +03:00
Shay Nehmad
6ca4df1c26
extracted filter av logiv to seperate function
2019-08-19 14:53:15 +03:00
Shay Nehmad
a6789a53b2
Extracted process telem to hooks.py
2019-08-19 14:43:23 +03:00
Shay Nehmad
757af1c6af
Moved all processing code into services/telemetry/processing
...
Telemetry class line count: 87. 😄
2019-08-19 14:34:21 +03:00
VakarisZ
c6da2cce07
Fixed bugs and typos
2019-08-19 14:16:25 +03:00
Shay Nehmad
c1ac45470c
Added doc to test_event
2019-08-19 13:40:35 +03:00
Shay Nehmad
524859f011
Removed unused exception
2019-08-19 13:35:37 +03:00
Shay Nehmad
453c8f9eb4
Moved ZT models to own folder and added documentation
2019-08-19 13:34:32 +03:00
Shay Nehmad
d50095b570
Changed "general" report to "security" all over
2019-08-19 12:03:42 +03:00
Shay Nehmad
d693b216a7
Removed unused files
2019-08-19 11:57:39 +03:00
Shay Nehmad
aaab4a479c
Added doc to consts file, and moved AV list to AV file
2019-08-19 11:56:05 +03:00
Shay Nehmad
ba1667372b
create telemetry services directory - soon all the telemetry resources functions will be moved there.
2019-08-19 11:41:04 +03:00
Shay Nehmad
73a6cb22b6
Extracted antivirus ZTtest to different file in a new module under services.
2019-08-19 11:39:12 +03:00
VakarisZ
99fd62928d
Merge remote-tracking branch 'upstream/develop' into attack_bugfixes
2019-08-19 11:05:11 +03:00
VakarisZ
7eab8687c1
Fixed bug created during merge, fixed typos in attack telemetries for usage.
2019-08-19 10:46:17 +03:00
VakarisZ
e774fcaff6
Merge remote-tracking branch 'upstream/develop' into attack_file_copy
...
# Conflicts:
# monkey/common/utils/attack_utils.py
# monkey/infection_monkey/dropper.py
# monkey/infection_monkey/system_info/mimikatz_collector.py
# monkey/infection_monkey/system_singleton.py
# monkey/infection_monkey/telemetry/attack/t1106_telem.py
2019-08-19 08:54:50 +03:00
Shay Nehmad
32a346fdcf
Fixed missing pillar status (for label color)
2019-08-18 09:41:57 +03:00
Shay Nehmad
21c3c9bf4d
Now returning full text data to the website
2019-08-15 12:27:21 +03:00
Shay Nehmad
7006a2332f
All labels now show status
2019-08-15 11:39:46 +03:00
Shay Nehmad
3d96f71988
Made statuslabel look better
2019-08-15 10:54:30 +03:00
Shay Nehmad
e4cf3706ec
Extracted status label
2019-08-15 10:42:19 +03:00
Shay Nehmad
db85dfe24a
Added sec issues to ZT report as well and gridified the overview section
2019-08-15 10:23:06 +03:00
Shay Nehmad
785bc4f109
Extracted the security issues glance component
2019-08-15 10:17:38 +03:00
Shay Nehmad
cd7cc4011d
Added pillar summary as per Barak's idea
2019-08-15 09:17:32 +03:00