Commit Graph

71 Commits

Author SHA1 Message Date
Lee Christensen c581f678cf formatting 2023-09-27 11:06:05 -04:00
Lee Christensen d3ce20b73c update formatting 2023-09-27 11:05:17 -04:00
Lee Christensen 32b8f0711b update docs, minor CLI mods, added dev profile to infra_start.sh 2023-09-27 11:02:28 -04:00
Lee Christensen c63ece24bc add example config 2023-09-26 19:30:21 -04:00
Lee Christensen 56f4503890 Merge pull request #10 from SpecterOps/ingress_fixes
Ingress fixes
2023-09-26 10:46:04 -07:00
Lee Christensen e0e0928762 Workaround for ingress changes, fix ingress Prefix warnings, dev skaffold profile for elastic/postgres 2023-09-26 13:33:23 -04:00
Lee Christensen fe48499197 minor doc updates + formatting 2023-09-25 15:44:30 -04:00
Lee Christensen 8784c19829 Merge pull request #8 from SpecterOps/lee_fixes
Lots of bug fixes + UI changes
2023-09-25 09:40:01 -07:00
Lee Christensen 1df94ff9d6 Many bug fixes and dashboard changes
Dashboard:
 - Moved Nemesis logo to sidebar
 - Edited CSS to remove blank space at top
File Viewer:
 - Removed PDF rendering due to Chrome iframe sandbox blocking embeds
 - All files now display as text in the Monaco viewer, irregardless of the type
 - Changed Monaco to dark theme
 - Add ".config" file type
Chromium page:
 - Made all filters case insensitive
 - Refactored into smaller functions
 - Results ordered by timestamp
File Triage page:
 - Refactored into smaller functions
 - Changed icons for for opening as plaintext and viewing file info
 - Do not hide files triaged as "unknown"
 - Fixed multiple bugs in search filters not applying
 - Refactored into smaller functions
 - Added a link to File Viewer when uploading files
Credentials page:
 - "View File Details" link now goes to File Viewer
 - Fixed bug in triage not working for null values
Nosey Parker page: "View File Details" link now goes to File Viewer
Hashes page:
 - Fixed bug preventing anything from being displayed
 - "View Originating File" link now goes to the file viewer instead of Kibana
 - Increased number of rows
 - Added filtering by object_id using the URL parameters
 - Added a clear filters button
Search page:
 - Link to File Viewer instead of Kibana
Refactored a few of the frontend pages
Centralized auth/display templates for frontend
Fixed looping exception in Chrome history parsing (still an outstanding issue for long URLs and slow processing)
Fixed path parsing for several file parsers to not require a "\" at the beginning so they can be processed via manual upload w/o a path
Changed Chromium file parsing to account support additional Chromium profiles
Added favicon
Updated skaffold debugging settings to allow stepping into python libraries
Updated recommended VS code extensions
Add action=view_raw to the download API to render the file as text in the browser
Fixed bug in extracted text processing when submitting text with BOM to elastic
Fixed links pointing to internal API endpoints instead of public ones
Changed hash alerts to point to Hashes/File Viewer page
Allow the same credentials parsed from 2 different files to be added to the DB
2023-09-23 01:55:58 -04:00
Lee Christensen 3a696d3e07 fix monaco scrollbars 2023-09-19 23:35:32 -04:00
Lee Christensen d8ce1bd057 Update minikube settings to use resources 2023-09-19 23:25:58 -04:00
Lee Christensen 44e7dc2824 disable scrollbar on file(viewer) page 2023-09-14 09:00:22 -04:00
HarmJ0y 13c55e4528 Added triage icon color changes for selected option
- The chosen triage value for a file now makes the associated icon change color on Files and File View pages in the Dashboard
2023-09-13 15:21:25 -07:00
HarmJ0y cc2aba0f2b Processing of Chromium JSON cookie dumps
-Processing of Chromium JSON cookie dumps
2023-09-12 16:14:38 -07:00
harmj0y 6dd4e1a16c Added the ability to set starting Redis IDs for mythic-connector
-Added the ability to set starting Redis IDs for mythic-connector
2023-09-12 11:48:50 -07:00
HarmJ0y 38efa66e87 Update 3_File_Viewer.py 2023-09-12 09:26:44 -07:00
HarmJ0y fcedfc0740 Added file display limit for File Viewer
-Added file display limit for File Viewer
2023-09-12 09:14:03 -07:00
HarmJ0y b842b6415a Small File Viewer tweaks
-Small File Viewer tweaks
2023-09-12 09:06:05 -07:00
HarmJ0y f88c393418 mythic-connector updates
-Fixed batching for file processing
-Completed all tags for file tagging
-Switched to new function for tag creation
2023-09-11 16:23:00 -07:00
HarmJ0y 572c80208e Fix for preserving file sorting between dashboard pages
-Fix for preserving file sorting between dashboard pages
2023-09-07 16:24:33 -07:00
HarmJ0y ac40e467de Updated Cobalt and Mythic connectors with new dashboard link
-Updated Cobalt and Mythic connectors with new dashboard link
2023-09-07 16:05:12 -07:00
Will b47f75df65 Merge pull request #7 from SpecterOps/dashboard_file_viewer
Dashboard file viewer
2023-09-06 14:47:55 -07:00
HarmJ0y 264bc4acd9 Moved PDF/Monaco display to the Basic File View tab
-Moved PDF/Monaco display to the Basic File View tab
2023-09-06 13:34:21 -07:00
HarmJ0y f1f0ea985f Small wording tweak
-Small wording tweak
2023-09-06 11:08:01 -07:00
HarmJ0y e1562f96b6 Start of File Viewer page for the Dashboard
-Start of File Viewer page for the Dashboard
-Alerting currently not working correctly
2023-09-05 21:39:02 -07:00
Will 6ae1c22097 Merge pull request #6 from SpecterOps/bof_reg_collect_fixes
Bof reg collect fixes
2023-08-31 13:32:04 -07:00
HarmJ0y cdf71f9f8a Merge branch 'main' into bof_reg_collect_fixes 2023-08-30 16:49:18 -07:00
HarmJ0y c761ec919a Fix for files processed by Tika
-Fix for files processed by Tika
2023-08-30 16:48:15 -07:00
HarmJ0y 7b3d79f98f Fix for bof reg parser usage
-Fix for bof reg parser usage
2023-08-30 16:16:40 -07:00
HarmJ0y 5f765fa9ca Added helper method to bof_reg_collect_parser
-Added helper method to bof_reg_collect_parser
2023-08-30 16:14:13 -07:00
HarmJ0y 53d1fce05b Typo fix
-Typo fix
2023-08-30 15:51:28 -07:00
HarmJ0y 97f94badb4 Expanded files processed by Apache Tika
-Expanded files processed by Apache Tika
2023-08-30 13:13:01 -07:00
Will fd21611f0f Merge pull request #5 from SpecterOps/8_29_23_dashboard_tweaks
8 29 23 dashboard tweaks
2023-08-30 12:44:29 -07:00
HarmJ0y 6b8157e374 Adjustment for the "NoseyParker" page of dashboard
-Adjustment for the "NoseyParker" page of `dashboard`
2023-08-30 12:42:17 -07:00
Max Harley 2cd98a9d55 Merge pull request #4 from SpecterOps/reg_bof_collect_update
Update bof_reg_collect
2023-08-30 11:50:40 -07:00
mharley b8a811a54f Update bof_reg_collect 2023-08-30 08:34:20 -07:00
mharley c0fd4e5eaf Update bof_reg_collect 2023-08-30 08:23:49 -07:00
harmj0y 0d3a6f3368 Fixed monitoring for the enrichment container
-Fixed monitoring for the `enrichment` container by exposing the proper port
2023-08-29 22:42:14 -07:00
harmj0y 912cab2d03 Re-enabled Alertmanager alerting 2023-08-29 22:04:55 -07:00
harmj0y 75fdde8136 Prometheus service fixes
-Prometheus service fixes
2023-08-29 22:03:39 -07:00
harmj0y 13ab0f75b5 NoseyParker page error handling
-NoseyParker page error handling
2023-08-29 14:34:38 -07:00
harmj0y cdfb20dd5b Swapped out some file display properties
-Swapped out some file display properties
2023-08-29 14:30:20 -07:00
Will 65f5705e75 Merge pull request #3 from SpecterOps/fixes_aug_22_23
Fixes aug 22 23
2023-08-25 18:54:29 -07:00
HarmJ0y 0a08cd9497 Don't alert on files that have already been processed
-Don't alert on files that have already been processed
2023-08-25 13:41:05 -07:00
HarmJ0y b3487912e9 Fixed path processing for file listings in the postgres connector
-Fixed path processing for file listings in the postgres connector
2023-08-24 18:28:15 -07:00
HarmJ0y e114b8fa42 Various fixes for mythic-connector
-Additional error handling
-Fixes for file browser handling
-Re-enabled file process/process handling
-Owner pulled from Linux file permissions
-Lots of misc fixes
-Implemented CLEAR_REDIS in an env variable to reprocess data
2023-08-24 18:26:02 -07:00
HarmJ0y dd831f2c8c Updated README.md with relevant blog posts
-Updated README.md with relevant blog posts
2023-08-22 22:04:48 -07:00
HarmJ0y 7a20dbd51e Update README.md's main skaffold launch command
-Update README.md's main skaffold launch command
2023-08-22 19:49:55 -07:00
HarmJ0y 35e6407280 Update README.md 2023-08-22 19:05:35 -07:00
HarmJ0y 714922f8a2 Update setup.md 2023-08-22 19:03:09 -07:00