Commit Graph

  • 81fae70fc6 Fix for retroactive masterkey decryption harmj0y 2025-10-16 15:50:17 -07:00
  • b129422e8f ABE v3 fixes and state key retroactive decryption harmj0y 2025-10-16 12:01:34 -07:00
  • 3527df6f6a windows path normalization, get_drive docs Lee Chagolla-Christensen 2025-10-16 02:38:47 -07:00
  • 1bd3e0de2a path placeholder replacement Lee Chagolla-Christensen 2025-10-16 02:25:18 -07:00
  • 998c8c5ee7 get_drive fixes, housekeeping fixes Lee Chagolla-Christensen 2025-10-15 23:09:25 -07:00
  • e3a23b6f0a fix file browser, add reason Lee Chagolla-Christensen 2025-10-15 18:25:46 -07:00
  • 87741599a7 retries+timeout Lee Chagolla-Christensen 2025-10-15 17:25:26 -07:00
  • d24cc4df32 Merge branch 'nemesis-2.1.3' of github.com:SpecterOps/Nemesis into nemesis-2.1.3 Lee Chagolla-Christensen 2025-10-15 17:25:10 -07:00
  • 14e8147d76 chromium FK constraints, delete faster, retries+timeouts Lee Chagolla-Christensen 2025-10-15 17:11:33 -07:00
  • 1d8d3ff416 chromium FK constraints, delete faster, retries+timeouts Lee Chagolla-Christensen 2025-10-15 17:11:33 -07:00
  • fc3388251c make housekeeping DB calls async and parallelized, delete DPAPI data Lee Chagolla-Christensen 2025-10-15 16:24:10 -07:00
  • f235d37300 update VS code exclusions Lee Chagolla-Christensen 2025-10-15 15:19:38 -07:00
  • af8edfc447 update VS code exclusions Lee Chagolla-Christensen 2025-10-15 15:18:10 -07:00
  • 121aba3797 exclude node_modules/dist folders in VS code Lee Chagolla-Christensen 2025-10-15 15:14:13 -07:00
  • 2a53afcf7a remove old commented code Lee Chagolla-Christensen 2025-10-15 14:32:58 -07:00
  • 1072eadf8f fix web API warnings Lee Chagolla-Christensen 2025-10-15 14:27:05 -07:00
  • acc788c425 fix lint errors Lee Chagolla-Christensen 2025-10-15 14:21:30 -07:00
  • d40cdcb655 use UTC in web API timestamps Lee Chagolla-Christensen 2025-10-15 14:20:00 -07:00
  • be115d1808 update to use common.logger Lee Chagolla-Christensen 2025-10-15 14:09:29 -07:00
  • b63813e300 Standardize path handling and centralize database connection management Lee Chagolla-Christensen 2025-10-15 13:48:50 -07:00
  • d1511044a2 fix mime type matching Lee Chagolla-Christensen 2025-10-15 00:20:24 -07:00
  • cc99cafc28 remove example test Lee Chagolla-Christensen 2025-10-15 00:11:38 -07:00
  • 7969d77480 remove redundant file normalization(file_enriched.path should be normalize), add initial linking tests Lee Chagolla-Christensen 2025-10-15 00:10:53 -07:00
  • 7d9dce431c update comment Lee Chagolla-Christensen 2025-10-14 23:26:24 -07:00
  • 6890c160bb let exceptions actually fail Lee Chagolla-Christensen 2025-10-14 23:21:13 -07:00
  • 9554724470 remove normalizaiton (enriched file path should be normalized), remove unused code, fix unhandled error conditions Lee Chagolla-Christensen 2025-10-14 23:18:05 -07:00
  • 38ed2e26f6 strong types in linking code Lee Chagolla-Christensen 2025-10-14 22:54:29 -07:00
  • e8352b9924 init file linking globally Lee Chagolla-Christensen 2025-10-14 21:22:34 -07:00
  • b082376679 linting Lee Chagolla-Christensen 2025-10-14 21:14:15 -07:00
  • 4cd93a703f remove unused linking code Lee Chagolla-Christensen 2025-10-14 21:09:29 -07:00
  • 45f3fb2c4b Merge branch 'nemesis-2.1.3' of github.com:SpecterOps/Nemesis into nemesis-2.1.3 Lee Chagolla-Christensen 2025-10-14 20:28:45 -07:00
  • a6a7891626 revert to just using dpapick3, added chrome test files Lee Chagolla-Christensen 2025-10-14 20:28:23 -07:00
  • 257465ca0e First pass at v3 ABE dec harmj0y 2025-10-14 18:25:39 -07:00
  • 87dacba761 Start of CNG Google Chromekey1/AES key ABE harmj0y 2025-10-14 16:28:58 -07:00
  • 614b08af1e fix stupid null byte Lee Chagolla-Christensen 2025-10-14 15:18:59 -07:00
  • d0163b5a9e add CNG decrypt test (currently failing) Lee Chagolla-Christensen 2025-10-14 14:24:44 -07:00
  • 42d0a32d6b validate or auto-calc mk sha1 Lee Chagolla-Christensen 2025-10-14 13:48:55 -07:00
  • 7670f9b536 correct MasterKey.is_encrypted Lee Chagolla-Christensen 2025-10-14 13:07:53 -07:00
  • 87c8ae6849 Merge branch 'nemesis-2.1.3' of github.com:SpecterOps/Nemesis into nemesis-2.1.3 Lee Chagolla-Christensen 2025-10-14 12:54:22 -07:00
  • 95f158225d update guids to be text so they're seachable Lee Chagolla-Christensen 2025-10-14 12:54:17 -07:00
  • 4689dd85f6 Added exif_metadata enrichment module harmj0y 2025-10-14 10:11:47 -07:00
  • acc5e9f2b3 add domain backup key ID Lee Chagolla-Christensen 2025-10-11 23:43:43 -07:00
  • 2a8b653491 fix auto decrypt for unknown MK types Lee Chagolla-Christensen 2025-10-11 02:47:14 -07:00
  • 9dc4fa22cc added write-once tests Lee Chagolla-Christensen 2025-10-11 02:29:36 -07:00
  • 51f05a3acd add write-once constraints to DPAPI columns Lee Chagolla-Christensen 2025-10-11 02:11:14 -07:00
  • e6ff7f9d41 rename MasterKeyFilter to EncryptionFilter Lee Chagolla-Christensen 2025-10-11 01:14:30 -07:00
  • f613a4b921 reorganize DpapiManager functions, remove close() method Lee Chagolla-Christensen 2025-10-11 01:06:17 -07:00
  • 17473aa9bd combine get_system_credential /get_system_credentials Lee Chagolla-Christensen 2025-10-11 01:01:22 -07:00
  • 37ef37e92c fix typing/linting warnings Lee Chagolla-Christensen 2025-10-11 00:45:04 -07:00
  • 7a1c4edeb5 encapsulate repository access with public methods Lee Chagolla-Christensen 2025-10-11 00:35:01 -07:00
  • 190964c7a2 combine the get_masterkey/get_all_masterkeys Lee Chagolla-Christensen 2025-10-11 00:19:31 -07:00
  • a7d11c83d7 minor change to example Lee Chagolla-Christensen 2025-10-11 00:00:26 -07:00
  • b35cef16a4 update example.py Lee Chagolla-Christensen 2025-10-10 23:58:19 -07:00
  • 3b969b2d01 rename UserAccountType to MasterKeyType Lee Chagolla-Christensen 2025-10-10 23:49:26 -07:00
  • 21b35ad169 get_all_masterkeys takes a list of types now Lee Chagolla-Christensen 2025-10-10 23:33:21 -07:00
  • 2b2ac94c23 add created/update timestamps to DPAPI Lee Chagolla-Christensen 2025-10-10 23:23:50 -07:00
  • 83929fa1f0 agents linting Lee Chagolla-Christensen 2025-10-10 19:39:12 -07:00
  • 3d3e76418a fix agents container Lee Chagolla-Christensen 2025-10-10 19:33:11 -07:00
  • a0fa19236b fix missing MasterKey arg Lee Chagolla-Christensen 2025-10-10 19:05:48 -07:00
  • bbbdc5b4d8 update to dapr 1.16 Lee Chagolla-Christensen 2025-10-10 18:50:37 -07:00
  • 6099a6515b update dapr to 1.16.1 Lee Chagolla-Christensen 2025-10-10 17:31:50 -07:00
  • 0b6282a277 update log message Lee Chagolla-Christensen 2025-10-10 17:25:10 -07:00
  • 03bca120c9 switch warning to debug log Lee Chagolla-Christensen 2025-10-10 17:03:50 -07:00
  • 152b094cbd indent Lee Chagolla-Christensen 2025-10-10 16:01:21 -07:00
  • 25b69b6a7a DC not added to DB, fix DPAPI examples Lee Chagolla-Christensen 2025-10-10 16:00:16 -07:00
  • 155e88d364 fix backup key DC not being saved Lee Chagolla-Christensen 2025-10-10 15:27:42 -07:00
  • 2361714790 do not decrypt user MKs with DPAPI system creds Lee Chagolla-Christensen 2025-10-10 15:20:10 -07:00
  • 1e87757c46 update class comment Lee Chagolla-Christensen 2025-10-10 15:11:21 -07:00
  • 95934ad7cb add agents to workspace, fixup type change in auto-decrypt Lee Chagolla-Christensen 2025-10-10 15:08:22 -07:00
  • a22218fcef fix ruff/tests in project, install venv script, local state link to user masterkey, masterkey type from path Lee Chagolla-Christensen 2025-10-10 14:16:52 -07:00
  • 747c38771e normalize upload file paths, UI file caching, partial user masterkey file link, simplify hive report Lee Chagolla-Christensen 2025-10-10 00:13:09 -07:00
  • 5afb864fca update masterkey parsing Lee Chagolla-Christensen 2025-10-09 08:55:20 -07:00
  • 6fd51f4bf1 fix examples Lee Chagolla-Christensen 2025-10-08 20:35:13 -07:00
  • 7fa01905fe Merge branch 'nemesis-2.1.3' of github.com:SpecterOps/Nemesis into nemesis-2.1.3 Lee Chagolla-Christensen 2025-10-08 19:40:34 -07:00
  • de507dcdb5 improved backup key parsing, enhanced backup key auto decryption, backup key parsing of masterkeys Lee Chagolla-Christensen 2025-10-08 19:40:28 -07:00
  • 5e7cb1b2b0 Added DPAPI masterkey and domain backupkey display pages harmj0y 2025-10-04 16:43:29 +09:00
  • 62d303c0ca parse domain back GUID from masterkeys Lee Chagolla-Christensen 2025-10-03 18:07:47 -07:00
  • 786f7c214a add kaitai for masterkeys Lee Chagolla-Christensen 2025-10-03 16:05:18 -07:00
  • 0dcd5e8e02 decrypt enc mk's with system cred Lee Chagolla-Christensen 2025-10-03 16:05:08 -07:00
  • 7d16798b49 update async dpapi in modules Lee Chagolla-Christensen 2025-10-03 11:55:33 -07:00
  • 874e57284c fixup dapr subscriptions Lee Chagolla-Christensen 2025-10-03 01:29:03 -07:00
  • 4b012bb30f Merge branch 'nemesis-2.1.3' of https://github.com/SpecterOps/Nemesis into nemesis-2.1.3 harmj0y 2025-10-03 16:18:11 +09:00
  • 0d5325f84d Added ability to delete linkings for non-present files harmj0y 2025-10-03 16:17:53 +09:00
  • 059cea7711 Merge branch 'nemesis-2.1.3' of github.com:SpecterOps/Nemesis into nemesis-2.1.3 Lee Chagolla-Christensen 2025-10-02 23:02:40 -07:00
  • 2baa7d5d6a add CLI --folder option, linkings foreign key, linkage UI bug, plaintext checks in analyzers Lee Chagolla-Christensen 2025-10-02 23:02:36 -07:00
  • 5eb4f63324 Changed SYSTEM masterkey linkings to not use rules harmj0y 2025-10-03 14:55:31 +09:00
  • dca656ea3b move workflow recoverly out of controller Lee Chagolla-Christensen 2025-10-02 15:13:09 -07:00
  • d1e9b279d9 cleanup controller more Lee Chagolla-Christensen 2025-10-02 14:53:30 -07:00
  • 6e44601f47 move subscription handlers to their own files Lee Chagolla-Christensen 2025-10-02 14:40:35 -07:00
  • e4b940879d Merge branch 'nemesis-2.1.3' of github.com:SpecterOps/Nemesis into nemesis-2.1.3 Lee Chagolla-Christensen 2025-10-02 14:16:24 -07:00
  • 47ba702a10 fixup asyncio/dapr problems Lee Chagolla-Christensen 2025-10-02 14:16:18 -07:00
  • e9be3f9951 Moved file linking rules into the registry_hive file enrichment module harmj0y 2025-10-02 22:25:43 +09:00
  • d764b4f660 "Login Data" and "Cookies" files now don't need hard paths harmj0y 2025-10-02 21:57:14 +09:00
  • 0748f5abbc Added "Text Translator" agent harmj0y 2025-10-02 21:05:07 +09:00
  • b28d043795 Start of Tika OCR multi-language support harmj0y 2025-10-02 16:39:15 +09:00
  • d0b91a39a6 Update analyzer.py harmj0y 2025-10-02 16:03:57 +09:00
  • 8a3fd2e1b7 Update CHANGELOG.md harmj0y 2025-10-02 14:38:58 +09:00
  • 085593e1aa Fix to keep strings.txt from sqlite dbs from processing harmj0y 2025-10-02 12:27:49 +09:00
  • 86a8af65f9 missing files Lee Chagolla-Christensen 2025-10-01 16:19:02 -07:00
  • ea0147d0d8 Merge branch 'nemesis-2.1.3' of github.com:SpecterOps/Nemesis into nemesis-2.1.3 Lee Chagolla-Christensen 2025-10-01 16:17:06 -07:00