e9be3f9951
Moved file linking rules into the registry_hive file enrichment module
...
- Moved file linking rules into the `registry_hive file` enrichment module, eliminated the static rules (so existing paths can be linked)
2025-10-02 22:25:43 +09:00
d764b4f660
"Login Data" and "Cookies" files now don't need hard paths
...
- "Login Data" and "Cookies" files now don't need hard paths
- If username/browser aren't supplied, _all_ decrypted state keys for the SOURCE are tried
2025-10-02 21:57:14 +09:00
0748f5abbc
Added "Text Translator" agent
...
-Added "Text Translator" agent
2025-10-02 21:05:07 +09:00
b28d043795
Start of Tika OCR multi-language support
...
-Start of Tika OCR multi-language support
2025-10-02 16:39:15 +09:00
d0b91a39a6
Update analyzer.py
2025-10-02 16:03:57 +09:00
8a3fd2e1b7
Update CHANGELOG.md
2025-10-02 14:38:58 +09:00
085593e1aa
Fix to keep strings.txt from sqlite dbs from processing
...
-Fix to keep strings.txt from sqlite dbs from processing
2025-10-02 12:27:49 +09:00
86a8af65f9
missing files
2025-10-01 16:19:02 -07:00
ea0147d0d8
Merge branch 'nemesis-2.1.3' of github.com:SpecterOps/Nemesis into nemesis-2.1.3
2025-10-01 16:17:06 -07:00
7ae30cc002
update prometheus endpoints
2025-10-01 16:13:34 -07:00
d0d7f5aefa
update prometheus endpoints
2025-10-01 15:30:42 -07:00
ccc812f997
simplify deletes, keep task alive
2025-09-30 22:54:50 -07:00
a661a32425
changeup decryption
2025-09-30 22:09:29 -07:00
499e4a4bfa
fix dpapi dapr integration
2025-09-30 21:24:30 -07:00
8a7d7dc22f
initial dpapi DAPR integration
2025-09-30 15:52:44 -07:00
be80f6f8db
remove old null manager
2025-09-30 10:49:33 -07:00
3a144b1426
update cli shorthands
2025-09-30 10:00:58 -07:00
dc82ac9b1b
update comment
2025-09-30 09:45:50 -07:00
007419ca74
add missing test, update err msg
2025-09-29 22:03:01 -07:00
0eb5504bdc
dpapi fixes/refactorings, enrichment logging
2025-09-29 16:33:27 -07:00
ff1c5e9540
debug logging
2025-09-29 15:12:16 -07:00
002b8ba910
fixup old local state parsing
2025-09-29 14:55:09 -07:00
2af2c68c6f
initial temp async enrichment fixes
2025-09-29 11:36:09 -07:00
50d457f8a3
Merge branch 'nemesis-2.1.3' of github.com:SpecterOps/Nemesis into nemesis-2.1.3
2025-09-26 16:57:09 -07:00
59674cc238
fix async in lsass module
2025-09-26 16:57:02 -07:00
ecdbd2c377
fix asyncio error in lsass dump, blob scanner only returns unique blobs
2025-09-26 13:46:45 -07:00
4c828ffc09
Collapsed inbound/outbound labels for linked files in dashboard
...
- Collapsed inbound/outbound labels for linked files in dashboard
2025-09-26 11:39:44 -07:00
d9739c70ea
Changed linked files hypterlinking
...
- Changed linked files hypterlinking
2025-09-26 11:05:22 -07:00
8ff2da9640
make enrichment use postgres for DPAPI, fix mk check
2025-09-26 10:42:30 -07:00
6951f3a386
update workspace, add files
2025-09-26 08:51:51 -07:00
eeb6e198c7
more strict masterkey validation
2025-09-25 23:19:48 -07:00
cfaec14791
rename dpapi analyzer
2025-09-25 21:45:45 -07:00
017674b312
add dpapi system data
2025-09-25 21:14:30 -07:00
168c009d3d
Merge branch 'nemesis-2.1.3' of github.com:SpecterOps/Nemesis into nemesis-2.1.3
2025-09-25 21:11:42 -07:00
e3d6367a4d
Collapsed "Project Name" + "Expiration Time" to same line
...
- Collapsed "Project Name" + "Expiration Time" to same line in upload interface
2025-09-25 20:16:30 -07:00
d46bff63f3
Updated chromium docs
...
-Updated `chromium` docs
2025-09-25 20:16:03 -07:00
73f8afc41b
update FileList search
2025-09-25 18:14:18 -07:00
be726d1ad0
change default FileList view to All, add viewed indicator
2025-09-25 17:17:09 -07:00
d67e5aa3a7
ellipsis+tooltip for finding name/category/origin
2025-09-25 16:55:10 -07:00
df076e943c
minor file upload page changes
2025-09-25 16:49:02 -07:00
c4e6cc0ed1
fix tag search
2025-09-25 16:19:12 -07:00
e23c44fd7d
reorder search boxes to match table
2025-09-25 15:43:15 -07:00
4edd6ff70f
fix mk:guid pair API response
2025-09-25 15:41:47 -07:00
78b8e708d3
broaden search on findings page
2025-09-25 13:56:56 -07:00
95ef8e3d8a
update categories filter
2025-09-25 13:45:48 -07:00
c8d6ed18f2
categories dropdown
2025-09-25 13:29:12 -07:00
4493eb6207
Merge branch 'nemesis-2.1.3' of github.com:SpecterOps/Nemesis into nemesis-2.1.3
2025-09-25 13:11:47 -07:00
c86b8dfdc9
severity filter checkboxes
2025-09-25 13:11:17 -07:00
5f1704ac03
Frontend support for viewing decrypted cookie/login values
...
- Frontend support for viewing decrypted cookie/login values
2025-09-25 12:03:30 -07:00
a7126cdd9d
Chromium DPAPI work
...
- Fixed various bugs in testing the ABE dec
- Added `dpapi_masterkey` file enrichment module
- DPAPI_SYSTEM key pulled from registry parsing is now registered with the backend
- "local_state" enrichment module now returns basic parsed data
2025-09-25 12:02:33 -07:00
harmj0y