Commit Graph

974 Commits

Author SHA1 Message Date
Lee Chagolla-Christensen a6cf77ca8e Merge branch 'nemesis-2.1.3' of github.com:SpecterOps/Nemesis into nemesis-2.1.3 2025-10-27 10:41:08 -07:00
harmj0y 1e8e4f52e1 Merge branch 'nemesis-2.1.3' of https://github.com/SpecterOps/Nemesis into nemesis-2.1.3 2025-10-27 10:17:33 -07:00
harmj0y baa341be2b Update file_enrichment_modules.md 2025-10-27 10:17:31 -07:00
Lee Chagolla-Christensen 83bbe84c04 tracing of enrichment modules 2025-10-26 23:23:40 -07:00
Lee Chagolla-Christensen b6ad5d951b move activities to folder 2025-10-26 21:49:34 -07:00
Lee Chagolla-Christensen 14785ca8ca adjust uvicorn workers to 1 2025-10-26 20:43:03 -07:00
Lee Chagolla-Christensen 4fdc3f6b50 add db pool support to file_linking 2025-10-26 17:51:26 -07:00
Lee Chagolla-Christensen 7fe30fca00 Pass asyncpg pool to db queries and clean up logging
- Update get_file_enriched_async to accept Pool or connection string
- Pass asyncpg_pool through workflow activities
- Rename subscription imports (remove '_handler' suffix)
- Remove pid from WorkflowManager logs
2025-10-26 17:11:36 -07:00
Lee Chagolla-Christensen 1c5b561803 combine subscription logic 2025-10-26 16:26:38 -07:00
Lee Chagolla-Christensen 0f1722963e Refactor global state in file enrichment
- Move global variables to dedicated global_vars module
- Update all references to use global_vars for asyncpg_pool, storage, etc.
- Consolidate dotnet_handler logic: merge store_dotnet_results into module
- Simplify function signatures by removing pool parameters
2025-10-26 16:17:51 -07:00
Lee Chagolla-Christensen aa7bc4dc01 refactor/simplify run_enrichment_modules 2025-10-26 10:06:51 -07:00
Lee Chagolla-Christensen d5db5ec6c1 remove debug code 2025-10-26 09:58:20 -07:00
Lee Chagolla-Christensen 17e89f202f move run_enrichment_modules into activity region 2025-10-26 09:55:46 -07:00
Lee Chagolla-Christensen c7577cff61 remove pid from logs 2025-10-26 00:55:44 -07:00
Lee Chagolla-Christensen d217e66767 update postgres listener to asyncpg 2025-10-26 00:49:18 -07:00
Lee Chagolla-Christensen 4b4db885db update dotnet model 2025-10-26 00:34:19 -07:00
Lee Chagolla-Christensen 06b02149e8 strongly typed subscriptions 2025-10-26 00:21:48 -07:00
Lee Chagolla-Christensen 242ecfb62d remove /debug route 2025-10-25 22:58:29 -07:00
Lee Chagolla-Christensen c93db419ce remove redundant DB check 2025-10-25 19:47:36 -07:00
Lee Chagolla-Christensen f6992a77eb rename global modules variable 2025-10-25 19:43:04 -07:00
Lee Chagolla-Christensen 49041bc1d8 extra status context 2025-10-25 19:33:16 -07:00
Lee Chagolla-Christensen a16d132be5 fix misuse of wf_runtime (mixed types) 2025-10-25 19:30:55 -07:00
Lee Chagolla-Christensen b88377ba0f fix office2john file handle leaks 2025-10-25 18:20:24 -07:00
Lee Chagolla-Christensen e598535d4e more psycopg to asyncpg pools in file enrichment
- Replace psycopg_pool.ConnectionPool with asyncpg.Pool throughout file_enrichment service
- Store asyncpg pool in FastAPI app.state instead of global variable
- Update type hints
- Fix enrichment success tracking query typo in noseyparker
- Improve formatting in dotnet finding summaries (use code formatting for method names)
2025-10-25 17:54:19 -07:00
Lee Chagolla-Christensen cde995ce55 fix deprecated pydantic json_encoders, too high of log levels 2025-10-25 16:58:39 -07:00
Lee Chagolla-Christensen ffecccf83d use asyncpg pools not psychopg 2025-10-25 16:43:49 -07:00
Lee Chagolla-Christensen b0799541c3 DpapiManager: use pg conn pool 2025-10-25 16:29:45 -07:00
Lee Chagolla-Christensen eba3e6fdd9 fix spacing 2025-10-25 16:18:24 -07:00
Lee Chagolla-Christensen a56eb844dd fix View Raw triggering download 2025-10-25 10:41:20 -07:00
Lee Chagolla-Christensen 65afd12672 use pg conn pool 2025-10-25 10:34:32 -07:00
Lee Chagolla-Christensen e2cc6508e3 update workflow.py to use asyncpg 2025-10-25 10:20:47 -07:00
harmj0y 1eb281d417 Additional dpapi blob parsing transforms
-Additional dpapi blob parsing transforms
2025-10-24 18:19:58 -07:00
Lee Chagolla-Christensen 70e97e35d1 add scheduler/placement metrics 2025-10-24 17:36:08 -07:00
Lee Chagolla-Christensen bab59497dd add count to Findings list page 2025-10-24 16:31:01 -07:00
Lee Chagolla-Christensen 03eace4f78 fix tracing 2025-10-24 16:11:03 -07:00
Lee Chagolla-Christensen 91a3ce12d2 improve submit pooling/stats, remove bucket checks 2025-10-24 15:47:58 -07:00
Lee Chagolla-Christensen 191216286f Improve storage, tracing, and placeholder concurrency limits
- Remove bucket auto-creation from storage upload methods
- Add Minio files bucket creation to compose init
- Re-raise bucket/file upload exceptions to propagate error
- Fix variable shadowing in DPAPI backup key route
- Fix OpenTelemetry tracing in file_enrichment
- Update to use opentelemetry.semconv._incubating.attributes (not
  deprecated)
- Document Dapr workflow concurrency limits in config comments
2025-10-24 14:46:35 -07:00
Lee Chagolla-Christensen 6d60266ca8 deal with sync workflow functions 2025-10-24 02:33:18 -07:00
Lee Chagolla-Christensen 003883c1cb remove max parallel workflows, extract DB from WorkflowManager 2025-10-24 01:57:38 -07:00
Lee Chagolla-Christensen f57b4fbe7b formatting 2025-10-24 01:22:19 -07:00
Lee Chagolla-Christensen b9e0edacb8 fix workers 2025-10-24 01:15:23 -07:00
harmj0y 815138ce32 Host reporting tweaks
- Changed reporting prompt
- changed up some of the displayed reporting stats
2025-10-23 14:00:41 -07:00
harmj0y 08448e12fc Update reporting_agent.py 2025-10-23 12:36:52 -07:00
harmj0y 757d653a70 Changed findings layout table
-Changed findings layout table
2025-10-23 12:18:59 -07:00
harmj0y 2169c07724 Update main.py 2025-10-23 11:51:18 -07:00
harmj0y 056308ab99 Fixes for the reporting agent and report generation
-Fixes for the reporting agent and report generation
2025-10-22 16:59:58 -07:00
harmj0y a4ac8bba7b Finding triage workflow doesn't block now
-Finding triage workflow doesn't block now
2025-10-22 16:57:55 -07:00
harmj0y 3502829ee5 Merge branch 'nemesis-2.1.3' of https://github.com/SpecterOps/Nemesis into nemesis-2.1.3 2025-10-22 14:28:33 -07:00
harmj0y 15fad59b70 Fix for some agent blocking
- Fix for agent API blocking until agent execution completes (except for finding triage)
2025-10-22 14:28:31 -07:00
Lee Chagolla-Christensen d39fa2950f Merge branch 'nemesis-2.1.3' of github.com:SpecterOps/Nemesis into nemesis-2.1.3 2025-10-22 12:48:50 -07:00