fd793c49aa
WIP queries
2025-05-15 16:41:52 -04:00
c73d97b34f
WIP extra table
2025-05-15 16:39:49 -04:00
7d81340b78
Support RedHat/RHEL as a valid target ( #47 )
...
* Update sshprep
Co-Authored-By: William Stearns <3538265+william-stearns@users.noreply.github.com >
* Supporrt RedHat/RHEL as a valid target
---------
Co-authored-by: Naomi Kramer <naomi@activecountermeasures.com >
Co-authored-by: William Stearns <3538265+william-stearns@users.noreply.github.com >
Co-authored-by: moth <moth@blackhillsinfosec.com >
2025-05-14 11:17:50 -06:00
b23387c2e2
Add ability to perform zone transfers ( #48 )
...
* Store zone transfer records
Co-Authored-By: moth <25512187+0x6d6f7468@users.noreply.github.com >
* Update config
* Add tests
* Tests, connectivity test
* Update tests
---------
Co-authored-by: moth <25512187+0x6d6f7468@users.noreply.github.com >
2025-05-13 16:31:40 -06:00
3555d9b095
Installer Behavior Tweaks ( #41 )
...
* Add --yes flag to add-apt-repository command
* Add missing sudo flags, make sure we're using the SUDO variable instead
2025-05-05 17:18:57 -06:00
c67effa0d1
Update sshprep ( #45 )
...
* Update sshprep
Co-Authored-By: William Stearns <3538265+william-stearns@users.noreply.github.com >
* Update sshprep
Add Bradley's suggestion of using head -1 to limit to a single address.
---------
Co-authored-by: Naomi Kramer <naomi@activecountermeasures.com >
Co-authored-by: William Stearns <3538265+william-stearns@users.noreply.github.com >
2025-05-05 16:54:12 -06:00
67271c94c7
Merge branch 'http-fixes' into config_update
2025-04-23 15:15:44 -04:00
8b173da9a5
Add online feeds to default config
2025-04-18 11:11:45 -04:00
93b9dfd471
Fix http_proto for missing host, update tests for missing host fixes
2025-04-17 16:38:24 -04:00
8d726b909b
Add network size column
2025-03-13 11:10:28 -04:00
d7f2e4d150
Merge pull request #40 from activecm/selinux-tamper-removal
...
Remove SELinux Tampering for QA
2025-03-10 21:58:01 -06:00
e5bbcf3f54
Remove SELinux neutering for QA
2025-03-10 21:46:48 -06:00
73e53b622a
Set max for threat intel datasize
2025-03-10 15:19:12 -06:00
8e994f4d15
Omit parts of env from output
2025-03-10 16:34:05 -04:00
c6019168ba
Merge branch 'raresig-fix' into config_update
2025-03-10 15:57:26 -04:00
565b3752eb
Merge branch 'config_update' into raresig-fix
2025-03-10 13:29:54 -04:00
8e8c040dd5
Rolling files updates ( #39 )
...
* Limit number of days to import for rolling datasets
* Fix breaking imports when import was interrupted
* Remove debug output
---------
Co-authored-by: Naomi Kramer <naomi@activecountermeasures.com >
2025-03-07 12:47:35 -07:00
24d86252bd
Cleanup output
2025-03-06 16:24:50 -05:00
50169bd4b7
Update subnet_test.go
2025-03-04 09:51:05 -07:00
786c6353b4
Fix duplicated SNI/IP long connections
2025-03-03 15:56:18 -05:00
3a362cdf9a
Store import version in imports table
2025-02-27 15:01:23 -05:00
07297954f7
Update subnet.go
2025-02-16 18:43:20 -07:00
70c8cb7f3f
updated impact category score functions to use float64
...
Co-Authored-By: Naomi Kramer <naomiagoddard@gmail.com >
2025-02-05 11:10:57 -07:00
ec8aae3f24
Update config.hjson
2025-02-04 17:34:49 -07:00
3e109090c0
Update config.hjson
2025-02-04 16:58:20 -07:00
ae9451e9a0
Remove unused columns
2025-02-04 14:52:18 -05:00
3039bfb90f
Remove storing dns conns in arrays, Fix historical first seen dns lag
2025-02-04 14:12:12 -05:00
b361c679f7
Fix zeek count parsing from TSV files
2025-02-03 15:19:54 -05:00
17b37106a2
Fix datasets exiting import if hour is empty
2025-01-29 14:03:36 -05:00
0d117e4701
fix column name
2025-01-23 14:50:52 -05:00
f7ac2cec3d
Add ability to mark datasets as sample datasets
2025-01-23 14:14:12 -05:00
dbf3447df4
Update pointer
2025-01-20 16:20:59 -05:00
ea8e10a744
Misc fixes
2025-01-17 12:19:55 -05:00
b4140df23e
Add clickhouse credentials
2025-01-13 15:35:20 -05:00
6ea362adfd
Update zeek count types and fix tests
2025-01-08 17:04:29 -05:00
38ab19bdb7
WIP update some field types
2025-01-08 14:53:13 -05:00
8e9b3d1403
Updating some fields to uint64
2025-01-07 23:59:32 -07:00
46cabd4e77
Write missing host entries to http to populate http_proto
2024-12-05 17:04:54 -05:00
eb131e0189
Update subnet.go
2024-12-01 23:57:15 -07:00
5ab4f1d5e6
changes to config subnet validation and testing
2024-11-21 00:01:19 -07:00
9836c56308
updates to score thresholds validation tags
2024-11-18 02:40:47 -07:00
98fd5a9b9e
Updated beacon weights validation for config
2024-11-13 19:41:18 -07:00
74ab9d2f77
added json tags to database struct
2024-10-01 09:22:41 -06:00
65d233525c
Remove error return from GetDefaultConfig
...
Co-Authored-By: Liza Tsibur <liza@activecountermeasures.com >
2024-09-13 17:23:18 -04:00
ebd5186d7e
fixed config and util tests, updated subnet related functions
...
Co-Authored-By: Naomi Kramer <naomiagoddard@gmail.com >
2024-09-12 21:03:22 -06:00
d45bd06a0f
updated read file config test and subnet tests
2024-09-12 00:39:19 -06:00
3167dbce54
Extend subnet type to read/write from db, update tests
...
Co-Authored-By: Liza Tsibur <liza@activecountermeasures.com >
2024-09-11 17:26:10 -04:00
392fd1679b
Update on config structure, functionality, and tests
...
Co-Authored-By: Naomi Kramer <naomiagoddard@gmail.com >
2024-09-10 23:09:23 -06:00
e5fbb07068
Update sshprep to use rsa-sha2-512
...
Co-Authored-By: William Stearns <3538265+william-stearns@users.noreply.github.com >
2024-08-19 12:15:50 -04:00
e4a03e6797
Update permanent URL for downloading the installer script. ( #23 )
2024-08-19 10:54:05 -04:00
Naomi Kramer