Commit Graph

  • e4b7369b10 Update generate-api-docs.yml harmj0y 2025-10-27 16:39:23 -07:00
  • 2f1a5fb880 Update docker-build.yml harmj0y 2025-10-27 16:36:22 -07:00
  • 0cf32048b4 Update docker-build.yml harmj0y 2025-10-27 16:30:36 -07:00
  • 04e2cdf573 temp disable agents container build harmj0y 2025-10-27 16:14:52 -07:00
  • d3f343a4cc Update docker-build.yml harmj0y 2025-10-27 15:47:52 -07:00
  • c7e80d66ca Update generate_api_docs.py harmj0y 2025-10-27 15:43:36 -07:00
  • 14e9e410ea Update generate-api-docs.yml harmj0y 2025-10-27 15:26:42 -07:00
  • 214a98dbd9 Update generate-api-docs.yml harmj0y 2025-10-27 15:22:17 -07:00
  • f7cf71ae2a Merge pull request #82 from SpecterOps/nemesis-2.1.3 Will Schroeder 2025-10-27 15:16:06 -07:00
  • d55076fd8e doc update harmj0y 2025-10-27 13:58:01 -07:00
  • 790541fe8e disable bulk re-run for now Lee Chagolla-Christensen 2025-10-27 12:58:31 -07:00
  • b9d0b818b6 strong types Lee Chagolla-Christensen 2025-10-27 12:43:59 -07:00
  • c5a71aca6a check type/initialized before using Lee Chagolla-Christensen 2025-10-27 12:08:27 -07:00
  • 60c3361097 remove old logger Lee Chagolla-Christensen 2025-10-27 12:05:00 -07:00
  • cdea9d0292 typing Lee Chagolla-Christensen 2025-10-27 12:00:20 -07:00
  • 8ecf41b82c fix API endpoint, fix global vars bug, use API model Lee Chagolla-Christensen 2025-10-27 11:23:27 -07:00
  • e24bc64dda remove unused API endpoints Lee Chagolla-Christensen 2025-10-27 11:06:29 -07:00
  • 8c486d7536 fix db pool bug Lee Chagolla-Christensen 2025-10-27 11:06:02 -07:00
  • a8f634d0a6 fix .NET analysis silently failing Lee Chagolla-Christensen 2025-10-27 11:03:03 -07:00
  • a6cf77ca8e Merge branch 'nemesis-2.1.3' of github.com:SpecterOps/Nemesis into nemesis-2.1.3 Lee Chagolla-Christensen 2025-10-27 10:41:08 -07:00
  • 1e8e4f52e1 Merge branch 'nemesis-2.1.3' of https://github.com/SpecterOps/Nemesis into nemesis-2.1.3 harmj0y 2025-10-27 10:17:33 -07:00
  • baa341be2b Update file_enrichment_modules.md harmj0y 2025-10-27 10:17:31 -07:00
  • 83bbe84c04 tracing of enrichment modules Lee Chagolla-Christensen 2025-10-26 23:23:40 -07:00
  • b6ad5d951b move activities to folder Lee Chagolla-Christensen 2025-10-26 21:33:35 -07:00
  • 14785ca8ca adjust uvicorn workers to 1 Lee Chagolla-Christensen 2025-10-26 20:43:03 -07:00
  • 4fdc3f6b50 add db pool support to file_linking Lee Chagolla-Christensen 2025-10-26 17:51:26 -07:00
  • 7fe30fca00 Pass asyncpg pool to db queries and clean up logging Lee Chagolla-Christensen 2025-10-26 17:11:36 -07:00
  • 1c5b561803 combine subscription logic Lee Chagolla-Christensen 2025-10-26 16:26:38 -07:00
  • 0f1722963e Refactor global state in file enrichment Lee Chagolla-Christensen 2025-10-26 16:17:51 -07:00
  • aa7bc4dc01 refactor/simplify run_enrichment_modules Lee Chagolla-Christensen 2025-10-26 10:06:51 -07:00
  • d5db5ec6c1 remove debug code Lee Chagolla-Christensen 2025-10-26 09:58:20 -07:00
  • 17e89f202f move run_enrichment_modules into activity region Lee Chagolla-Christensen 2025-10-26 09:55:46 -07:00
  • c7577cff61 remove pid from logs Lee Chagolla-Christensen 2025-10-26 00:55:44 -07:00
  • d217e66767 update postgres listener to asyncpg Lee Chagolla-Christensen 2025-10-26 00:49:18 -07:00
  • 4b4db885db update dotnet model Lee Chagolla-Christensen 2025-10-26 00:34:19 -07:00
  • 06b02149e8 strongly typed subscriptions Lee Chagolla-Christensen 2025-10-26 00:21:48 -07:00
  • 242ecfb62d remove /debug route Lee Chagolla-Christensen 2025-10-25 22:58:29 -07:00
  • c93db419ce remove redundant DB check Lee Chagolla-Christensen 2025-10-25 19:47:36 -07:00
  • f6992a77eb rename global modules variable Lee Chagolla-Christensen 2025-10-25 19:43:04 -07:00
  • 49041bc1d8 extra status context Lee Chagolla-Christensen 2025-10-25 19:33:16 -07:00
  • a16d132be5 fix misuse of wf_runtime (mixed types) Lee Chagolla-Christensen 2025-10-25 19:30:55 -07:00
  • b88377ba0f fix office2john file handle leaks Lee Chagolla-Christensen 2025-10-25 18:20:24 -07:00
  • e598535d4e more psycopg to asyncpg pools in file enrichment Lee Chagolla-Christensen 2025-10-25 17:54:19 -07:00
  • cde995ce55 fix deprecated pydantic json_encoders, too high of log levels Lee Chagolla-Christensen 2025-10-25 16:58:39 -07:00
  • ffecccf83d use asyncpg pools not psychopg Lee Chagolla-Christensen 2025-10-25 16:43:49 -07:00
  • b0799541c3 DpapiManager: use pg conn pool Lee Chagolla-Christensen 2025-10-25 16:26:21 -07:00
  • eba3e6fdd9 fix spacing Lee Chagolla-Christensen 2025-10-25 16:18:24 -07:00
  • a56eb844dd fix View Raw triggering download Lee Chagolla-Christensen 2025-10-25 10:41:20 -07:00
  • 65afd12672 use pg conn pool Lee Chagolla-Christensen 2025-10-25 10:34:32 -07:00
  • e2cc6508e3 update workflow.py to use asyncpg Lee Chagolla-Christensen 2025-10-25 10:20:47 -07:00
  • 1eb281d417 Additional dpapi blob parsing transforms harmj0y 2025-10-24 18:19:58 -07:00
  • 70e97e35d1 add scheduler/placement metrics Lee Chagolla-Christensen 2025-10-24 17:36:08 -07:00
  • bab59497dd add count to Findings list page Lee Chagolla-Christensen 2025-10-24 16:31:01 -07:00
  • 03eace4f78 fix tracing Lee Chagolla-Christensen 2025-10-24 16:11:03 -07:00
  • 91a3ce12d2 improve submit pooling/stats, remove bucket checks Lee Chagolla-Christensen 2025-10-24 15:47:58 -07:00
  • 191216286f Improve storage, tracing, and placeholder concurrency limits Lee Chagolla-Christensen 2025-10-24 14:46:35 -07:00
  • 6d60266ca8 deal with sync workflow functions Lee Chagolla-Christensen 2025-10-24 02:33:09 -07:00
  • 003883c1cb remove max parallel workflows, extract DB from WorkflowManager Lee Chagolla-Christensen 2025-10-24 01:57:38 -07:00
  • f57b4fbe7b formatting Lee Chagolla-Christensen 2025-10-24 01:22:19 -07:00
  • b9e0edacb8 fix workers Lee Chagolla-Christensen 2025-10-24 01:15:23 -07:00
  • 815138ce32 Host reporting tweaks harmj0y 2025-10-23 14:00:41 -07:00
  • 08448e12fc Update reporting_agent.py harmj0y 2025-10-23 12:36:52 -07:00
  • 757d653a70 Changed findings layout table harmj0y 2025-10-23 12:18:59 -07:00
  • 2169c07724 Update main.py harmj0y 2025-10-23 11:51:18 -07:00
  • 056308ab99 Fixes for the reporting agent and report generation harmj0y 2025-10-22 16:59:58 -07:00
  • a4ac8bba7b Finding triage workflow doesn't block now harmj0y 2025-10-22 16:57:55 -07:00
  • 3502829ee5 Merge branch 'nemesis-2.1.3' of https://github.com/SpecterOps/Nemesis into nemesis-2.1.3 harmj0y 2025-10-22 14:28:33 -07:00
  • 15fad59b70 Fix for some agent blocking harmj0y 2025-10-22 14:28:31 -07:00
  • d39fa2950f Merge branch 'nemesis-2.1.3' of github.com:SpecterOps/Nemesis into nemesis-2.1.3 Lee Chagolla-Christensen 2025-10-22 12:48:50 -07:00
  • b2193ee5ab fix example password Lee Chagolla-Christensen 2025-10-22 12:48:39 -07:00
  • aa8a745ecd Initial pass on system/host reporting harmj0y 2025-10-21 16:02:52 -07:00
  • f74d23bc43 tweaks for retro chromium decryption harmj0y 2025-10-20 21:23:41 -07:00
  • e0312a4e6c Update local_state.py harmj0y 2025-10-20 11:50:56 -07:00
  • c29d245968 Retro decryption working for statekeys harmj0y 2025-10-20 11:49:29 -07:00
  • 48915c5e82 continue standardizing SQL secrets Lee Chagolla-Christensen 2025-10-18 22:59:13 -07:00
  • d4f06b0e90 fix prometheus, construct postgres URL in grafana Lee Chagolla-Christensen 2025-10-18 22:22:26 -07:00
  • c2dac2e8a7 Change DB access and update alerting Lee Chagolla-Christensen 2025-10-18 21:36:27 -07:00
  • 5a6ab3f6cd Merge branch 'nemesis-2.1.3' of github.com:SpecterOps/Nemesis into nemesis-2.1.3 Lee Chagolla-Christensen 2025-10-18 20:33:00 -07:00
  • e544d617af Added DPAPI documentation harmj0y 2025-10-18 18:32:22 -07:00
  • 3c22897518 standardize postgres access Lee Chagolla-Christensen 2025-10-18 17:48:54 -07:00
  • abe8c15ea0 Add link to x33fcon presentation in README (#80) Adam Crosser 2025-10-19 06:19:43 +07:00
  • 8c57bf96b1 fix JWT parsing of History files Lee Chagolla-Christensen 2025-10-17 17:48:59 -07:00
  • 5c2e12fdf4 fix JWT agent for History files Lee Chagolla-Christensen 2025-10-17 17:29:28 -07:00
  • 01384800a0 fix broken jwt scanning, ruff linting errors Lee Chagolla-Christensen 2025-10-17 15:00:10 -07:00
  • 42105b630d remove office2john from ruff checks Lee Chagolla-Christensen 2025-10-17 14:33:42 -07:00
  • 2e48a0d3a5 ruff - auto fixes Lee Chagolla-Christensen 2025-10-17 14:29:45 -07:00
  • dfef46ce53 fix pydantic deprecations Lee Chagolla-Christensen 2025-10-17 14:25:59 -07:00
  • fa918973ba make SQL strings private, lint warnings, dead code Lee Chagolla-Christensen 2025-10-17 14:20:55 -07:00
  • d7ac3f368d Merge branch 'nemesis-2.1.3' of github.com:SpecterOps/Nemesis into nemesis-2.1.3 Lee Chagolla-Christensen 2025-10-17 11:55:20 -07:00
  • 0800ce6bde fix async locking things up, asyncify basic enrichment Lee Chagolla-Christensen 2025-10-17 11:53:57 -07:00
  • a6bc09752f Added retroactive chromekey decryption harmj0y 2025-10-17 11:40:59 -07:00
  • be931be374 async activities,update models,dev mode settings Lee Chagolla-Christensen 2025-10-17 01:09:42 -07:00
  • c9358a9a2e make file links merge case insensitive, info --> debug logging Lee Chagolla-Christensen 2025-10-16 23:03:42 -07:00
  • 4c70844fdd linting Lee Chagolla-Christensen 2025-10-16 18:17:10 -07:00
  • 4cc62007cc type warnings Lee Chagolla-Christensen 2025-10-16 18:15:08 -07:00
  • 5bdf80b2aa update CLI to support explicitly empty --folder Lee Chagolla-Christensen 2025-10-16 18:13:49 -07:00
  • 1a638757a4 update changelog, CNG description Lee Chagolla-Christensen 2025-10-16 17:54:27 -07:00
  • e358678b24 Merge branch 'nemesis-2.1.3' of github.com:SpecterOps/Nemesis into nemesis-2.1.3 Lee Chagolla-Christensen 2025-10-16 16:54:21 -07:00
  • e233af29bb change placeholder from UUID to machine GUID Lee Chagolla-Christensen 2025-10-16 16:54:13 -07:00
  • 160a5a0077 add UUID link placehold, add Local State link to CNG private key Lee Chagolla-Christensen 2025-10-16 16:30:05 -07:00