Commit Graph

39 Commits

Author SHA1 Message Date
Lee Christensen e0e0928762 Workaround for ingress changes, fix ingress Prefix warnings, dev skaffold profile for elastic/postgres 2023-09-26 13:33:23 -04:00
Lee Christensen fe48499197 minor doc updates + formatting 2023-09-25 15:44:30 -04:00
Lee Christensen 1df94ff9d6 Many bug fixes and dashboard changes
Dashboard:
 - Moved Nemesis logo to sidebar
 - Edited CSS to remove blank space at top
File Viewer:
 - Removed PDF rendering due to Chrome iframe sandbox blocking embeds
 - All files now display as text in the Monaco viewer, irregardless of the type
 - Changed Monaco to dark theme
 - Add ".config" file type
Chromium page:
 - Made all filters case insensitive
 - Refactored into smaller functions
 - Results ordered by timestamp
File Triage page:
 - Refactored into smaller functions
 - Changed icons for for opening as plaintext and viewing file info
 - Do not hide files triaged as "unknown"
 - Fixed multiple bugs in search filters not applying
 - Refactored into smaller functions
 - Added a link to File Viewer when uploading files
Credentials page:
 - "View File Details" link now goes to File Viewer
 - Fixed bug in triage not working for null values
Nosey Parker page: "View File Details" link now goes to File Viewer
Hashes page:
 - Fixed bug preventing anything from being displayed
 - "View Originating File" link now goes to the file viewer instead of Kibana
 - Increased number of rows
 - Added filtering by object_id using the URL parameters
 - Added a clear filters button
Search page:
 - Link to File Viewer instead of Kibana
Refactored a few of the frontend pages
Centralized auth/display templates for frontend
Fixed looping exception in Chrome history parsing (still an outstanding issue for long URLs and slow processing)
Fixed path parsing for several file parsers to not require a "\" at the beginning so they can be processed via manual upload w/o a path
Changed Chromium file parsing to account support additional Chromium profiles
Added favicon
Updated skaffold debugging settings to allow stepping into python libraries
Updated recommended VS code extensions
Add action=view_raw to the download API to render the file as text in the browser
Fixed bug in extracted text processing when submitting text with BOM to elastic
Fixed links pointing to internal API endpoints instead of public ones
Changed hash alerts to point to Hashes/File Viewer page
Allow the same credentials parsed from 2 different files to be added to the DB
2023-09-23 01:55:58 -04:00
Lee Christensen 3a696d3e07 fix monaco scrollbars 2023-09-19 23:35:32 -04:00
Lee Christensen 44e7dc2824 disable scrollbar on file(viewer) page 2023-09-14 09:00:22 -04:00
HarmJ0y 13c55e4528 Added triage icon color changes for selected option
- The chosen triage value for a file now makes the associated icon change color on Files and File View pages in the Dashboard
2023-09-13 15:21:25 -07:00
HarmJ0y cc2aba0f2b Processing of Chromium JSON cookie dumps
-Processing of Chromium JSON cookie dumps
2023-09-12 16:14:38 -07:00
harmj0y 6dd4e1a16c Added the ability to set starting Redis IDs for mythic-connector
-Added the ability to set starting Redis IDs for mythic-connector
2023-09-12 11:48:50 -07:00
HarmJ0y 38efa66e87 Update 3_File_Viewer.py 2023-09-12 09:26:44 -07:00
HarmJ0y fcedfc0740 Added file display limit for File Viewer
-Added file display limit for File Viewer
2023-09-12 09:14:03 -07:00
HarmJ0y b842b6415a Small File Viewer tweaks
-Small File Viewer tweaks
2023-09-12 09:06:05 -07:00
HarmJ0y f88c393418 mythic-connector updates
-Fixed batching for file processing
-Completed all tags for file tagging
-Switched to new function for tag creation
2023-09-11 16:23:00 -07:00
HarmJ0y 572c80208e Fix for preserving file sorting between dashboard pages
-Fix for preserving file sorting between dashboard pages
2023-09-07 16:24:33 -07:00
HarmJ0y ac40e467de Updated Cobalt and Mythic connectors with new dashboard link
-Updated Cobalt and Mythic connectors with new dashboard link
2023-09-07 16:05:12 -07:00
HarmJ0y 264bc4acd9 Moved PDF/Monaco display to the Basic File View tab
-Moved PDF/Monaco display to the Basic File View tab
2023-09-06 13:34:21 -07:00
HarmJ0y e1562f96b6 Start of File Viewer page for the Dashboard
-Start of File Viewer page for the Dashboard
-Alerting currently not working correctly
2023-09-05 21:39:02 -07:00
HarmJ0y cdf71f9f8a Merge branch 'main' into bof_reg_collect_fixes 2023-08-30 16:49:18 -07:00
HarmJ0y c761ec919a Fix for files processed by Tika
-Fix for files processed by Tika
2023-08-30 16:48:15 -07:00
HarmJ0y 7b3d79f98f Fix for bof reg parser usage
-Fix for bof reg parser usage
2023-08-30 16:16:40 -07:00
HarmJ0y 5f765fa9ca Added helper method to bof_reg_collect_parser
-Added helper method to bof_reg_collect_parser
2023-08-30 16:14:13 -07:00
HarmJ0y 53d1fce05b Typo fix
-Typo fix
2023-08-30 15:51:28 -07:00
HarmJ0y 97f94badb4 Expanded files processed by Apache Tika
-Expanded files processed by Apache Tika
2023-08-30 13:13:01 -07:00
Will fd21611f0f Merge pull request #5 from SpecterOps/8_29_23_dashboard_tweaks
8 29 23 dashboard tweaks
2023-08-30 12:44:29 -07:00
HarmJ0y 6b8157e374 Adjustment for the "NoseyParker" page of dashboard
-Adjustment for the "NoseyParker" page of `dashboard`
2023-08-30 12:42:17 -07:00
mharley b8a811a54f Update bof_reg_collect 2023-08-30 08:34:20 -07:00
mharley c0fd4e5eaf Update bof_reg_collect 2023-08-30 08:23:49 -07:00
harmj0y 13ab0f75b5 NoseyParker page error handling
-NoseyParker page error handling
2023-08-29 14:34:38 -07:00
harmj0y cdfb20dd5b Swapped out some file display properties
-Swapped out some file display properties
2023-08-29 14:30:20 -07:00
HarmJ0y 0a08cd9497 Don't alert on files that have already been processed
-Don't alert on files that have already been processed
2023-08-25 13:41:05 -07:00
HarmJ0y b3487912e9 Fixed path processing for file listings in the postgres connector
-Fixed path processing for file listings in the postgres connector
2023-08-24 18:28:15 -07:00
HarmJ0y e114b8fa42 Various fixes for mythic-connector
-Additional error handling
-Fixes for file browser handling
-Re-enabled file process/process handling
-Owner pulled from Linux file permissions
-Lots of misc fixes
-Implemented CLEAR_REDIS in an env variable to reprocess data
2023-08-24 18:26:02 -07:00
HarmJ0y 35e6407280 Update README.md 2023-08-22 19:05:35 -07:00
HarmJ0y 5dbfd797e5 mythic-sync fixes
-Fixed README.md and example settings.env file to contain all of the required settings
-Bumped the mythic pypi package to the most recent version
-More auth/connection error handling in the min sync code
2023-08-22 18:50:47 -07:00
Lee Christensen 46e902f50d disable_slack_alerting option validation 2023-08-17 17:33:05 -07:00
Lee Christensen 2a04bc8a6b add/fix slack alerting settings+docs 2023-08-17 17:09:43 -07:00
Lee Christensen 65b565c297 Merge branch 'main' of https://github.com/SpecterOps/Nemesis 2023-08-17 14:20:10 -07:00
HarmJ0y c9a85dde52 Added data_expunge task
-Added `data_expunge` task that expunges Elasticsearch/PostgreSQL data that's passed its expiration date. Runs every 6 hours.
2023-08-16 14:55:38 -07:00
Lee Christensen a144c161c5 do not require slack 2023-08-11 18:03:32 -07:00
Lee Christensen fe4e0d70a4 commited for life 2023-08-09 13:14:44 -07:00