Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

verify capa signature hits are still being parsed/inserted correctly #120

Closed
mmguero opened this issue Oct 4, 2022 · 1 comment
Closed

verify capa signature hits are still being parsed/inserted correctly #120

mmguero opened this issue Oct 4, 2022 · 1 comment
Assignees
@mmguero
Labels
bug Something isn't working carving Relating to carving (extraction) of files from traffic and the scanning of those files regression It worked at one point...

Comments

@mmguero
Copy link
Collaborator

mmguero commented Oct 4, 2022

I need to verify that capa signature hits are still being parsed/inserted correctly. Recently in a v6.2.0 instance I wasn't seeing any results.
@mmguero mmguero added bug Something isn't working carving Relating to carving (extraction) of files from traffic and the scanning of those files regression It worked at one point... labels Oct 4, 2022
@mmguero mmguero self-assigned this Oct 4, 2022
@mmguero mmguero added this to Malcolm Oct 4, 2022
@mmguero
Copy link
Collaborator Author

mmguero commented Oct 11, 2022

it appears the key in capa's JSON output for mitre attack framework hits has changed from att&ck to attack, hence we weren't parsing them like we should have been. testing a fix now.

@mmguero mmguero moved this to In Progress in Malcolm Oct 11, 2022
mmguero added a commit to mmguero-dev/Malcolm that referenced this issue Oct 11, 2022
@mmguero
fix idaholab#120, capa hits parsing (replaced att&ck with attack in p…
6edeff3 
…arsing)
@mmguero mmguero closed this as completed Oct 11, 2022
Repository owner moved this from In Progress to Done in Malcolm Oct 11, 2022
@mmguero mmguero removed the status in Malcolm Oct 11, 2022
@mmguero mmguero moved this to Done in Malcolm Oct 11, 2022
mmguero added a commit that referenced this issue Oct 17, 2022
@mmguero
v6.4.0 development
b43a617 
Squashed commit of the following:

commit 9f03bda
Author: Seth Grover <[email protected]>
Date:   Mon Oct 17 10:56:57 2022 -0600

    Fixes for creating Views in Arkime v4.0

commit 3ce9918
Author: Seth Grover <[email protected]>
Date:   Thu Oct 13 13:12:28 2022 -0600

    fixes to ISO build

commit b40df91
Merge: 6edeff3 2e5f653
Author: Seth Grover <[email protected]>
Date:   Thu Oct 13 10:16:41 2022 -0600

    now that arkime v4.0.0 is out, bump internal arkime version

commit 6edeff3
Author: Seth Grover <[email protected]>
Date:   Tue Oct 11 16:10:15 2022 -0600

    fix #120, capa hits parsing (replaced att&ck with attack in parsing)

commit 594cb2f
Author: Seth Grover <[email protected]>
Date:   Tue Oct 11 14:30:35 2022 -0600

    set bacnet instance_number to long instead of integer

commit 106bf61
Author: SG <[email protected]>
Date:   Mon Oct 10 13:38:20 2022 -0600

    add s7comm upload/download log support

commit 515c170
Author: SG <[email protected]>
Date:   Mon Oct 10 13:32:24 2022 -0600

    add s7comm upload/download log support

commit 143bfcb
Author: SG <[email protected]>
Date:   Mon Oct 10 10:27:13 2022 -0600

    i don't think we need to actually run auth_setup prior to packaging

commit 4da36a9
Author: SG <[email protected]>
Date:   Mon Oct 10 08:14:39 2022 -0600

    exclusions for documentation

commit dfcccc9
Author: SG <[email protected]>
Date:   Mon Oct 10 08:03:39 2022 -0600

    minor documentation tweaks

commit da6fad5
Author: Seth Grover <[email protected]>
Date:   Thu Oct 6 15:23:39 2022 -0600

    fix missing link of license.txt

commit dccf3f4
Author: Seth Grover <[email protected]>
Date:   Thu Oct 6 14:51:50 2022 -0600

    workflow changes for nginx for docs

commit 02fd8a2
Author: Seth Grover <[email protected]>
Date:   Thu Oct 6 14:49:41 2022 -0600

    tweak tgz download

commit a093739
Author: Seth Grover <[email protected]>
Date:   Thu Oct 6 14:39:16 2022 -0600

    fix nginx docs

commit f55a592
Author: Seth Grover <[email protected]>
Date:   Thu Oct 6 14:37:00 2022 -0600

    fix nginx docs

commit 86582a2
Author: Seth Grover <[email protected]>
Date:   Thu Oct 6 14:30:52 2022 -0600

    fix nginx docs

commit 5b4ada7
Author: Seth Grover <[email protected]>
Date:   Thu Oct 6 11:17:17 2022 -0600

    add seo tags

commit 0dcec0e
Author: SG <[email protected]>
Date:   Thu Oct 6 10:31:51 2022 -0600

    fix sensor build workflow

commit 99daec2
Author: SG <[email protected]>
Date:   Thu Oct 6 10:28:10 2022 -0600

    fix sensor build workflow

commit bcaa9a9
Author: SG <[email protected]>
Date:   Thu Oct 6 10:10:40 2022 -0600

    tweak ignore paths for documenation build

commit e273d76
Author: SG <[email protected]>
Date:   Thu Oct 6 10:08:04 2022 -0600

    Tweaks to building documentation

commit 19b7ff9
Author: SG <[email protected]>
Date:   Thu Oct 6 07:09:57 2022 -0600

    Tweaks to building documentation

commit 9a0661c
Author: SG <[email protected]>
Date:   Thu Oct 6 06:57:29 2022 -0600

    don't include the kitchen sink when building documentation

commit 964669b
Author: SG <[email protected]>
Date:   Wed Oct 5 15:46:47 2022 -0600

    more work on development of documentation to split out into github pages

commit d661336
Author: SG <[email protected]>
Date:   Wed Oct 5 15:27:24 2022 -0600

    more work on development of documentation to split out into github pages

commit 48ac4f4
Author: SG <[email protected]>
Date:   Wed Oct 5 15:23:19 2022 -0600

    more work on development of documentation to split out into github pages

commit f558cd2
Author: SG <[email protected]>
Date:   Wed Oct 5 15:06:12 2022 -0600

    more work on development of documentation to split out into github pages

commit 7203a0b
Author: SG <[email protected]>
Date:   Wed Oct 5 13:46:48 2022 -0600

    more work on development of documentation to split out into github pages

commit 0cc0c38
Author: SG <[email protected]>
Date:   Wed Oct 5 13:45:22 2022 -0600

    more work on development of documentation to split out into github pages

commit ac2d3f0
Author: SG <[email protected]>
Date:   Wed Oct 5 13:36:06 2022 -0600

    more work on development of documentation to split out into github pages

commit 6573c6d
Author: SG <[email protected]>
Date:   Wed Oct 5 12:37:56 2022 -0600

    more work on development of documentation to split out into github pages

commit 554e605
Author: SG <[email protected]>
Date:   Wed Oct 5 12:33:38 2022 -0600

    more work on development of documentation to split out into github pages

commit 8b4b2c9
Author: SG <[email protected]>
Date:   Wed Oct 5 12:07:11 2022 -0600

    more work on development of documentation to split out into github pages

commit ba203f1
Author: Seth Grover <[email protected]>
Date:   Wed Oct 5 07:36:12 2022 -0600

    Add package java-1.8.0-openjdk

    Seems to be a change in the base Docker image and the current version of logstash fails to build with a reference to missing javac. Add java-1.8.0-openjdk according to error message.

commit f73b663
Author: Seth Grover <[email protected]>
Date:   Mon Oct 3 12:28:32 2022 -0600

    bump fluent-bit version in ps1

commit 7bc9ad2
Author: Seth Grover <[email protected]>
Date:   Fri Sep 23 17:45:59 2022 -0600

    for web development

commit 6cae2e6
Author: Seth Grover <[email protected]>
Date:   Fri Sep 23 17:33:41 2022 -0600

    minor tweaks for documentation

commit 568da6c
Author: Seth Grover <[email protected]>
Date:   Fri Sep 23 17:29:29 2022 -0600

    Reworked development for using GitHub pages instead of one monolithic README file

    Squashed commit of the following:

    commit 76f4508
    Author: Seth Grover <[email protected]>
    Date:   Thu Sep 22 22:56:54 2022 -0600

        fix hedgehog images

    commit 5758e6f
    Author: Seth Grover <[email protected]>
    Date:   Thu Sep 22 22:54:28 2022 -0600

        fix hedgehog images

    commit c576497
    Author: Seth Grover <[email protected]>
    Date:   Thu Sep 22 22:45:13 2022 -0600

        experimenting with github pages

    commit 5029669
    Author: Seth Grover <[email protected]>
    Date:   Thu Sep 22 22:40:07 2022 -0600

        experimenting with github pages

    commit b85fec2
    Author: Seth Grover <[email protected]>
    Date:   Thu Sep 22 22:33:07 2022 -0600

        experimenting with github pages

    commit 061d2ac
    Author: Seth Grover <[email protected]>
    Date:   Thu Sep 22 22:29:05 2022 -0600

        experimenting with github pages

    commit 3b5e26a
    Author: Seth Grover <[email protected]>
    Date:   Thu Sep 22 22:18:37 2022 -0600

        experimenting with github pages

    commit 3f20469
    Author: Seth Grover <[email protected]>
    Date:   Thu Sep 22 22:07:39 2022 -0600

        experimenting with github pages

    commit ce521e7
    Author: Seth Grover <[email protected]>
    Date:   Thu Sep 22 21:52:45 2022 -0600

        experimenting with github pages

    commit 811a35d
    Author: Seth Grover <[email protected]>
    Date:   Thu Sep 22 21:37:30 2022 -0600

        experimenting with github pages

    commit e6f4471
    Author: Seth Grover <[email protected]>
    Date:   Thu Sep 22 21:32:15 2022 -0600

        experimenting with github pages

    commit f70fd95
    Author: Seth Grover <[email protected]>
    Date:   Thu Sep 22 21:23:37 2022 -0600

        experimenting with github pages

    commit 48752eb
    Author: Seth Grover <[email protected]>
    Date:   Thu Sep 22 16:01:51 2022 -0600

        experimenting with github pages

    commit 6230783
    Author: Seth Grover <[email protected]>
    Date:   Thu Sep 22 16:00:35 2022 -0600

        experimenting with github pages

    commit 6321f68
    Author: Seth Grover <[email protected]>
    Date:   Thu Sep 22 15:55:58 2022 -0600

        experimenting with github pages

    commit 74a8e8e
    Author: Seth Grover <[email protected]>
    Date:   Thu Sep 22 15:51:52 2022 -0600

        experimenting with github pages

    commit 216aed2
    Author: Seth Grover <[email protected]>
    Date:   Thu Sep 22 15:50:52 2022 -0600

        experimenting with github pages

    commit 7fa1e76
    Author: Seth Grover <[email protected]>
    Date:   Thu Sep 22 15:49:01 2022 -0600

        experimenting with github pages

    commit 1c72362
    Author: Seth Grover <[email protected]>
    Date:   Thu Sep 22 15:47:31 2022 -0600

        experimenting with github pages

    commit 6ccf841
    Author: Seth Grover <[email protected]>
    Date:   Thu Sep 22 15:45:06 2022 -0600

        experimenting with github pages

    commit adc6360
    Author: Seth Grover <[email protected]>
    Date:   Thu Sep 22 15:42:42 2022 -0600

        experimenting with github pages

    commit 25964a8
    Author: Seth Grover <[email protected]>
    Date:   Thu Sep 22 15:35:02 2022 -0600

        experimenting with github pages

    commit c43e2ac
    Author: Seth Grover <[email protected]>
    Date:   Thu Sep 22 15:21:01 2022 -0600

        experimenting with github pages

    commit 9871deb
    Author: Seth Grover <[email protected]>
    Date:   Thu Sep 22 15:19:24 2022 -0600

        experimenting with github pages

    commit 760a1f9
    Author: Seth Grover <[email protected]>
    Date:   Thu Sep 22 15:16:40 2022 -0600

        experimenting with github pages

    commit 6ae5032
    Author: Seth Grover <[email protected]>
    Date:   Thu Sep 22 15:11:46 2022 -0600

        experimenting with github pages

    commit 0ea9c94
    Author: Seth Grover <[email protected]>
    Date:   Thu Sep 22 15:08:57 2022 -0600

        experimenting with github pages

    commit b95b060
    Author: Seth Grover <[email protected]>
    Date:   Thu Sep 22 15:05:54 2022 -0600

        experimenting with github pages

    commit 3195c4e
    Author: Seth Grover <[email protected]>
    Date:   Thu Sep 22 15:04:48 2022 -0600

        experimenting with github pages

    commit a07bc5e
    Author: Seth Grover <[email protected]>
    Date:   Thu Sep 22 15:02:25 2022 -0600

        experimenting with github pages

    commit d77099f
    Author: Seth Grover <[email protected]>
    Date:   Thu Sep 22 14:59:06 2022 -0600

        experimenting with github pages

    commit 18f4647
    Author: Seth Grover <[email protected]>
    Date:   Thu Sep 22 14:57:31 2022 -0600

        experimenting with github pages

    commit 7a08476
    Author: Seth Grover <[email protected]>
    Date:   Thu Sep 22 14:52:19 2022 -0600

        experimenting with github pages

    commit acf2a6d
    Author: Seth Grover <[email protected]>
    Date:   Thu Sep 22 14:47:56 2022 -0600

        experimenting with github pages

    commit 26029bc
    Author: Seth Grover <[email protected]>
    Date:   Thu Sep 22 14:46:35 2022 -0600

        experimenting with github pages

    commit 60cdab0
    Author: Seth Grover <[email protected]>
    Date:   Thu Sep 22 14:42:13 2022 -0600

        experimenting with github pages

    commit 39e88b6
    Author: Seth Grover <[email protected]>
    Date:   Thu Sep 22 14:41:13 2022 -0600

        experimenting with github pages

    commit 651acd3
    Author: Seth Grover <[email protected]>
    Date:   Thu Sep 22 14:39:38 2022 -0600

        experimenting with github pages

    commit df96e0e
    Author: Seth Grover <[email protected]>
    Date:   Thu Sep 22 14:36:26 2022 -0600

        experimenting with github pages

    commit 5016081
    Author: Seth Grover <[email protected]>
    Date:   Thu Sep 22 14:22:46 2022 -0600

        experimenting with github pages

    commit f1bff36
    Author: Seth Grover <[email protected]>
    Date:   Thu Sep 22 14:21:24 2022 -0600

        experimenting with github pages

    commit 0e0d9f0
    Author: Seth Grover <[email protected]>
    Date:   Thu Sep 22 14:18:34 2022 -0600

        experimenting with github pages

    commit e170422
    Author: Seth Grover <[email protected]>
    Date:   Thu Sep 22 14:03:54 2022 -0600

        experimenting with github pages

    commit 63de7bb
    Author: Seth Grover <[email protected]>
    Date:   Thu Sep 22 14:00:54 2022 -0600

        Revert "experimenting with github pages"

        This reverts commit f43a4aa.

    commit f43a4aa
    Author: Seth Grover <[email protected]>
    Date:   Thu Sep 22 13:59:10 2022 -0600

        experimenting with github pages

    commit b9925dc
    Author: Seth Grover <[email protected]>
    Date:   Thu Sep 22 13:38:46 2022 -0600

        experimenting with github pages

    commit 41528fb
    Author: Seth Grover <[email protected]>
    Date:   Thu Sep 22 13:34:51 2022 -0600

        experimenting with github pages

    commit efd3c88
    Author: Seth Grover <[email protected]>
    Date:   Thu Sep 22 13:32:01 2022 -0600

        experimenting with github pages

    commit e0f4466
    Author: Seth Grover <[email protected]>
    Date:   Thu Sep 22 13:30:37 2022 -0600

        experimenting with github pages

    commit 8b8d469
    Author: Seth Grover <[email protected]>
    Date:   Thu Sep 22 13:28:06 2022 -0600

        experimenting with github pages

    commit 9c00ea2
    Author: Seth Grover <[email protected]>
    Date:   Thu Sep 22 13:21:43 2022 -0600

        experimenting with github pages

    commit 1a0df24
    Author: Seth Grover <[email protected]>
    Date:   Thu Sep 22 13:16:25 2022 -0600

        experimenting with github pages

    commit b7ae1d2
    Author: Seth Grover <[email protected]>
    Date:   Thu Sep 22 12:54:49 2022 -0600

        basic config

    commit 208ef01
    Author: Seth Grover <[email protected]>
    Date:   Thu Sep 22 12:53:30 2022 -0600

        experimenting with jekyll

    commit 8aea3e2
    Author: Seth Grover <[email protected]>
    Date:   Thu Sep 22 12:43:41 2022 -0600

        links work in progress

    commit 1605844
    Author: Seth Grover <[email protected]>
    Date:   Thu Sep 22 12:37:25 2022 -0600

        Added github pages config

    commit 599eb83
    Author: Seth Grover <[email protected]>
    Date:   Thu Sep 22 12:25:14 2022 -0600

        Added github pages config

    commit 73754a4
    Author: Seth Grover <[email protected]>
    Date:   Thu Sep 22 12:18:58 2022 -0600

        documentation links work in progress

    commit 03012af
    Author: Seth Grover <[email protected]>
    Date:   Thu Sep 22 12:18:19 2022 -0600

        documentation links work in progress

    commit 3b8cd74
    Author: Seth Grover <[email protected]>
    Date:   Thu Sep 22 12:00:57 2022 -0600

        documentation links work in progress

    commit 7b13fa7
    Author: Seth Grover <[email protected]>
    Date:   Thu Sep 22 11:59:20 2022 -0600

        documentation links work in progress

    commit 52df01b
    Author: Seth Grover <[email protected]>
    Date:   Thu Sep 22 11:54:45 2022 -0600

        documentation links work in progress

    commit b7ac174
    Author: Seth Grover <[email protected]>
    Date:   Thu Sep 22 11:02:37 2022 -0600

        testing relative links

    commit 952936d
    Author: Seth Grover <[email protected]>
    Date:   Thu Sep 22 10:47:47 2022 -0600

        split all the .md documentation into different files

commit 6a7003a
Author: Seth Grover <[email protected]>
Date:   Wed Sep 21 13:54:31 2022 -0600

    simplify adjustment of netbox unit file

commit 1896e24
Author: Seth Grover <[email protected]>
Date:   Wed Sep 21 13:29:05 2022 -0600

    Using /assets/ for netbox conflicts with Arkime's /assets/, so use /netbox/ for the NetBox path

commit 5ca383d
Author: Seth Grover <[email protected]>
Date:   Wed Sep 21 13:26:09 2022 -0600

    Using /assets/ for netbox conflicts with Arkime's /assets/, so use /netbox/ for the NetBox path

commit 2cf383b
Author: Seth Grover <[email protected]>
Date:   Wed Sep 21 12:03:26 2022 -0600

    Fix depends

commit 06a1369
Author: Seth Grover <[email protected]>
Date:   Tue Sep 20 19:15:28 2022 -0600

    tweaks for ISO

commit 32caf88
Author: Seth Grover <[email protected]>
Date:   Tue Sep 20 15:10:50 2022 -0600

    fix packaging

commit 28969ea
Author: Seth Grover <[email protected]>
Date:   Tue Sep 20 14:36:40 2022 -0600

    readme update

commit bc6c9ea
Author: Seth Grover <[email protected]>
Date:   Tue Sep 20 14:32:38 2022 -0600

    update poster

commit ff402b3
Author: Seth Grover <[email protected]>
Date:   Tue Sep 20 14:10:41 2022 -0600

    slide update

commit 8cd74d7
Author: Seth Grover <[email protected]>
Date:   Tue Sep 20 13:30:52 2022 -0600

    build fixes

commit 87d8b0d
Merge: 90f40dc 85c764e
Author: Seth Grover <[email protected]>
Date:   Tue Sep 20 13:14:36 2022 -0600

    Merge branch 'netbox' of https://github.com/mmguero-dev/Malcolm into development

commit 85c764e
Author: Seth Grover <[email protected]>
Date:   Tue Sep 20 13:13:56 2022 -0600

    readme

commit 12d99f7
Author: Seth Grover <[email protected]>
Date:   Tue Sep 20 13:12:21 2022 -0600

    readme

commit 94948fb
Author: Seth Grover <[email protected]>
Date:   Tue Sep 20 12:26:30 2022 -0600

    readme

commit 357fde6
Author: Seth Grover <[email protected]>
Date:   Tue Sep 20 12:16:21 2022 -0600

    netbox wip

commit f6ecce5
Author: Seth Grover <[email protected]>
Date:   Tue Sep 20 11:58:15 2022 -0600

    netbox wip

commit bcd0ee9
Author: Seth Grover <[email protected]>
Date:   Tue Sep 20 11:20:52 2022 -0600

    netbox wip

commit 41a1706
Author: Seth Grover <[email protected]>
Date:   Tue Sep 20 11:08:21 2022 -0600

    initialize netbox on startup

commit 7c0d37a
Author: Seth Grover <[email protected]>
Date:   Tue Sep 20 10:21:21 2022 -0600

    cleaner disabling of netbox by default

commit 58c21aa
Author: Seth Grover <[email protected]>
Date:   Tue Sep 20 09:27:51 2022 -0600

    use tini for init on docker containers; allow netbox to be toggled

commit d048835
Author: Seth Grover <[email protected]>
Date:   Tue Sep 20 06:56:09 2022 -0600

    Bump zeek to v5.0.2

commit 90f40dc
Author: Seth Grover <[email protected]>
Date:   Tue Sep 20 06:56:09 2022 -0600

    Bump zeek to v5.0.2

commit 9e6fbee
Author: Seth Grover <[email protected]>
Date:   Mon Sep 19 21:52:31 2022 -0600

    netbox wip

commit b2a043f
Author: Seth Grover <[email protected]>
Date:   Mon Sep 19 21:44:29 2022 -0600

    netbox wip

commit 481e01f
Author: Seth Grover <[email protected]>
Date:   Mon Sep 19 21:34:19 2022 -0600

    netbox WIP

commit d348641
Author: Seth Grover <[email protected]>
Date:   Mon Sep 19 20:35:56 2022 -0600

    build docker images specifically for malcolm

commit cc907c2
Author: SG <[email protected]>
Date:   Mon Sep 19 15:40:30 2022 -0600

    Fix envs for netbox

commit 382d8ea
Author: SG <[email protected]>
Date:   Mon Sep 19 15:17:21 2022 -0600

    initial swag at netbox integration

commit 639d251
Author: SG <[email protected]>
Date:   Mon Sep 19 14:27:26 2022 -0600

    bump to version 6.4.0 for #17

commit 29ed8dd
Author: Seth Grover <[email protected]>
Date:   Thu Sep 15 07:10:15 2022 -0600

    fix broken visualization

commit ccd1e25
Author: Seth Grover <[email protected]>
Date:   Wed Sep 14 15:08:16 2022 -0600

    bump opensearch and dashboards to v2.3.0

commit 18f9cbf
Author: SG <[email protected]>
Date:   Tue Sep 13 08:55:47 2022 -0600

    update audit rules

commit 60b3ff0
Author: SG <[email protected]>
Date:   Tue Sep 13 08:44:15 2022 -0600

    set boot grub permission at the end of preseed

commit 7c1a011
Author: Seth Grover <[email protected]>
Date:   Mon Sep 12 16:17:30 2022 -0600

    documentation tweaks for hardening (see #111)

commit 332e7d1
Author: Seth Grover <[email protected]>
Date:   Mon Sep 12 16:16:57 2022 -0600

    documentation tweaks for hardening (see #111)

commit 2a26bba
Author: Seth Grover <[email protected]>
Date:   Mon Sep 12 16:16:32 2022 -0600

    documentation tweaks for hardening (see #111)

commit a48b12e
Author: Seth Grover <[email protected]>
Date:   Mon Sep 12 16:13:19 2022 -0600

    documentation tweaks for hardening (see #111)

commit f3cb433
Author: Seth Grover <[email protected]>
Date:   Mon Sep 12 15:35:14 2022 -0600

    work in progress for updates to documentation for hardening, see #111

commit 6ac88e0
Author: Seth Grover <[email protected]>
Date:   Mon Sep 12 14:35:20 2022 -0600

    documentation and script changes for switching to just using hte harbian-audit project

commit 5eee892
Author: Seth Grover <[email protected]>
Date:   Thu Sep 8 13:10:36 2022 -0600

    bump version to v6.3.1 for development

commit 59e24b1
Author: Seth Grover <[email protected]>
Date:   Thu Sep 8 08:21:25 2022 -0600

    Added template slide

commit 2e5f653
Author: Seth Grover <[email protected]>
Date:   Mon Aug 15 09:41:34 2022 -0600

    set userAuthIps to work with docker

commit 8185a91
Author: Seth Grover <[email protected]>
Date:   Mon Aug 15 09:12:18 2022 -0600

    fix build

commit 7481a86
Author: Seth Grover <[email protected]>
Date:   Mon Aug 15 08:54:33 2022 -0600

    trying build of main branch
mmguero added a commit to cisagov/Malcolm that referenced this issue Oct 17, 2022
@mmguero
v6.4.0 development
e331d49 
Squashed commit of the following:

commit 9f03bda
Author: Seth Grover <[email protected]>
Date:   Mon Oct 17 10:56:57 2022 -0600

    Fixes for creating Views in Arkime v4.0

commit 3ce9918
Author: Seth Grover <[email protected]>
Date:   Thu Oct 13 13:12:28 2022 -0600

    fixes to ISO build

commit b40df91
Merge: 6edeff3 2e5f653
Author: Seth Grover <[email protected]>
Date:   Thu Oct 13 10:16:41 2022 -0600

    now that arkime v4.0.0 is out, bump internal arkime version

commit 6edeff3
Author: Seth Grover <[email protected]>
Date:   Tue Oct 11 16:10:15 2022 -0600

    fix idaholab#120, capa hits parsing (replaced att&ck with attack in parsing)

commit 594cb2f
Author: Seth Grover <[email protected]>
Date:   Tue Oct 11 14:30:35 2022 -0600

    set bacnet instance_number to long instead of integer

commit 106bf61
Author: SG <[email protected]>
Date:   Mon Oct 10 13:38:20 2022 -0600

    add s7comm upload/download log support

commit 515c170
Author: SG <[email protected]>
Date:   Mon Oct 10 13:32:24 2022 -0600

    add s7comm upload/download log support

commit 143bfcb
Author: SG <[email protected]>
Date:   Mon Oct 10 10:27:13 2022 -0600

    i don't think we need to actually run auth_setup prior to packaging

commit 4da36a9
Author: SG <[email protected]>
Date:   Mon Oct 10 08:14:39 2022 -0600

    exclusions for documentation

commit dfcccc9
Author: SG <[email protected]>
Date:   Mon Oct 10 08:03:39 2022 -0600

    minor documentation tweaks

commit da6fad5
Author: Seth Grover <[email protected]>
Date:   Thu Oct 6 15:23:39 2022 -0600

    fix missing link of license.txt

commit dccf3f4
Author: Seth Grover <[email protected]>
Date:   Thu Oct 6 14:51:50 2022 -0600

    workflow changes for nginx for docs

commit 02fd8a2
Author: Seth Grover <[email protected]>
Date:   Thu Oct 6 14:49:41 2022 -0600

    tweak tgz download

commit a093739
Author: Seth Grover <[email protected]>
Date:   Thu Oct 6 14:39:16 2022 -0600

    fix nginx docs

commit f55a592
Author: Seth Grover <[email protected]>
Date:   Thu Oct 6 14:37:00 2022 -0600

    fix nginx docs

commit 86582a2
Author: Seth Grover <[email protected]>
Date:   Thu Oct 6 14:30:52 2022 -0600

    fix nginx docs

commit 5b4ada7
Author: Seth Grover <[email protected]>
Date:   Thu Oct 6 11:17:17 2022 -0600

    add seo tags

commit 0dcec0e
Author: SG <[email protected]>
Date:   Thu Oct 6 10:31:51 2022 -0600

    fix sensor build workflow

commit 99daec2
Author: SG <[email protected]>
Date:   Thu Oct 6 10:28:10 2022 -0600

    fix sensor build workflow

commit bcaa9a9
Author: SG <[email protected]>
Date:   Thu Oct 6 10:10:40 2022 -0600

    tweak ignore paths for documenation build

commit e273d76
Author: SG <[email protected]>
Date:   Thu Oct 6 10:08:04 2022 -0600

    Tweaks to building documentation

commit 19b7ff9
Author: SG <[email protected]>
Date:   Thu Oct 6 07:09:57 2022 -0600

    Tweaks to building documentation

commit 9a0661c
Author: SG <[email protected]>
Date:   Thu Oct 6 06:57:29 2022 -0600

    don't include the kitchen sink when building documentation

commit 964669b
Author: SG <[email protected]>
Date:   Wed Oct 5 15:46:47 2022 -0600

    more work on development of documentation to split out into github pages

commit d661336
Author: SG <[email protected]>
Date:   Wed Oct 5 15:27:24 2022 -0600

    more work on development of documentation to split out into github pages

commit 48ac4f4
Author: SG <[email protected]>
Date:   Wed Oct 5 15:23:19 2022 -0600

    more work on development of documentation to split out into github pages

commit f558cd2
Author: SG <[email protected]>
Date:   Wed Oct 5 15:06:12 2022 -0600

    more work on development of documentation to split out into github pages

commit 7203a0b
Author: SG <[email protected]>
Date:   Wed Oct 5 13:46:48 2022 -0600

    more work on development of documentation to split out into github pages

commit 0cc0c38
Author: SG <[email protected]>
Date:   Wed Oct 5 13:45:22 2022 -0600

    more work on development of documentation to split out into github pages

commit ac2d3f0
Author: SG <[email protected]>
Date:   Wed Oct 5 13:36:06 2022 -0600

    more work on development of documentation to split out into github pages

commit 6573c6d
Author: SG <[email protected]>
Date:   Wed Oct 5 12:37:56 2022 -0600

    more work on development of documentation to split out into github pages

commit 554e605
Author: SG <[email protected]>
Date:   Wed Oct 5 12:33:38 2022 -0600

    more work on development of documentation to split out into github pages

commit 8b4b2c9
Author: SG <[email protected]>
Date:   Wed Oct 5 12:07:11 2022 -0600

    more work on development of documentation to split out into github pages

commit ba203f1
Author: Seth Grover <[email protected]>
Date:   Wed Oct 5 07:36:12 2022 -0600

    Add package java-1.8.0-openjdk

    Seems to be a change in the base Docker image and the current version of logstash fails to build with a reference to missing javac. Add java-1.8.0-openjdk according to error message.

commit f73b663
Author: Seth Grover <[email protected]>
Date:   Mon Oct 3 12:28:32 2022 -0600

    bump fluent-bit version in ps1

commit 7bc9ad2
Author: Seth Grover <[email protected]>
Date:   Fri Sep 23 17:45:59 2022 -0600

    for web development

commit 6cae2e6
Author: Seth Grover <[email protected]>
Date:   Fri Sep 23 17:33:41 2022 -0600

    minor tweaks for documentation

commit 568da6c
Author: Seth Grover <[email protected]>
Date:   Fri Sep 23 17:29:29 2022 -0600

    Reworked development for using GitHub pages instead of one monolithic README file

    Squashed commit of the following:

    commit 76f4508
    Author: Seth Grover <[email protected]>
    Date:   Thu Sep 22 22:56:54 2022 -0600

        fix hedgehog images

    commit 5758e6f
    Author: Seth Grover <[email protected]>
    Date:   Thu Sep 22 22:54:28 2022 -0600

        fix hedgehog images

    commit c576497
    Author: Seth Grover <[email protected]>
    Date:   Thu Sep 22 22:45:13 2022 -0600

        experimenting with github pages

    commit 5029669
    Author: Seth Grover <[email protected]>
    Date:   Thu Sep 22 22:40:07 2022 -0600

        experimenting with github pages

    commit b85fec2
    Author: Seth Grover <[email protected]>
    Date:   Thu Sep 22 22:33:07 2022 -0600

        experimenting with github pages

    commit 061d2ac
    Author: Seth Grover <[email protected]>
    Date:   Thu Sep 22 22:29:05 2022 -0600

        experimenting with github pages

    commit 3b5e26a
    Author: Seth Grover <[email protected]>
    Date:   Thu Sep 22 22:18:37 2022 -0600

        experimenting with github pages

    commit 3f20469
    Author: Seth Grover <[email protected]>
    Date:   Thu Sep 22 22:07:39 2022 -0600

        experimenting with github pages

    commit ce521e7
    Author: Seth Grover <[email protected]>
    Date:   Thu Sep 22 21:52:45 2022 -0600

        experimenting with github pages

    commit 811a35d
    Author: Seth Grover <[email protected]>
    Date:   Thu Sep 22 21:37:30 2022 -0600

        experimenting with github pages

    commit e6f4471
    Author: Seth Grover <[email protected]>
    Date:   Thu Sep 22 21:32:15 2022 -0600

        experimenting with github pages

    commit f70fd95
    Author: Seth Grover <[email protected]>
    Date:   Thu Sep 22 21:23:37 2022 -0600

        experimenting with github pages

    commit 48752eb
    Author: Seth Grover <[email protected]>
    Date:   Thu Sep 22 16:01:51 2022 -0600

        experimenting with github pages

    commit 6230783
    Author: Seth Grover <[email protected]>
    Date:   Thu Sep 22 16:00:35 2022 -0600

        experimenting with github pages

    commit 6321f68
    Author: Seth Grover <[email protected]>
    Date:   Thu Sep 22 15:55:58 2022 -0600

        experimenting with github pages

    commit 74a8e8e
    Author: Seth Grover <[email protected]>
    Date:   Thu Sep 22 15:51:52 2022 -0600

        experimenting with github pages

    commit 216aed2
    Author: Seth Grover <[email protected]>
    Date:   Thu Sep 22 15:50:52 2022 -0600

        experimenting with github pages

    commit 7fa1e76
    Author: Seth Grover <[email protected]>
    Date:   Thu Sep 22 15:49:01 2022 -0600

        experimenting with github pages

    commit 1c72362
    Author: Seth Grover <[email protected]>
    Date:   Thu Sep 22 15:47:31 2022 -0600

        experimenting with github pages

    commit 6ccf841
    Author: Seth Grover <[email protected]>
    Date:   Thu Sep 22 15:45:06 2022 -0600

        experimenting with github pages

    commit adc6360
    Author: Seth Grover <[email protected]>
    Date:   Thu Sep 22 15:42:42 2022 -0600

        experimenting with github pages

    commit 25964a8
    Author: Seth Grover <[email protected]>
    Date:   Thu Sep 22 15:35:02 2022 -0600

        experimenting with github pages

    commit c43e2ac
    Author: Seth Grover <[email protected]>
    Date:   Thu Sep 22 15:21:01 2022 -0600

        experimenting with github pages

    commit 9871deb
    Author: Seth Grover <[email protected]>
    Date:   Thu Sep 22 15:19:24 2022 -0600

        experimenting with github pages

    commit 760a1f9
    Author: Seth Grover <[email protected]>
    Date:   Thu Sep 22 15:16:40 2022 -0600

        experimenting with github pages

    commit 6ae5032
    Author: Seth Grover <[email protected]>
    Date:   Thu Sep 22 15:11:46 2022 -0600

        experimenting with github pages

    commit 0ea9c94
    Author: Seth Grover <[email protected]>
    Date:   Thu Sep 22 15:08:57 2022 -0600

        experimenting with github pages

    commit b95b060
    Author: Seth Grover <[email protected]>
    Date:   Thu Sep 22 15:05:54 2022 -0600

        experimenting with github pages

    commit 3195c4e
    Author: Seth Grover <[email protected]>
    Date:   Thu Sep 22 15:04:48 2022 -0600

        experimenting with github pages

    commit a07bc5e
    Author: Seth Grover <[email protected]>
    Date:   Thu Sep 22 15:02:25 2022 -0600

        experimenting with github pages

    commit d77099f
    Author: Seth Grover <[email protected]>
    Date:   Thu Sep 22 14:59:06 2022 -0600

        experimenting with github pages

    commit 18f4647
    Author: Seth Grover <[email protected]>
    Date:   Thu Sep 22 14:57:31 2022 -0600

        experimenting with github pages

    commit 7a08476
    Author: Seth Grover <[email protected]>
    Date:   Thu Sep 22 14:52:19 2022 -0600

        experimenting with github pages

    commit acf2a6d
    Author: Seth Grover <[email protected]>
    Date:   Thu Sep 22 14:47:56 2022 -0600

        experimenting with github pages

    commit 26029bc
    Author: Seth Grover <[email protected]>
    Date:   Thu Sep 22 14:46:35 2022 -0600

        experimenting with github pages

    commit 60cdab0
    Author: Seth Grover <[email protected]>
    Date:   Thu Sep 22 14:42:13 2022 -0600

        experimenting with github pages

    commit 39e88b6
    Author: Seth Grover <[email protected]>
    Date:   Thu Sep 22 14:41:13 2022 -0600

        experimenting with github pages

    commit 651acd3
    Author: Seth Grover <[email protected]>
    Date:   Thu Sep 22 14:39:38 2022 -0600

        experimenting with github pages

    commit df96e0e
    Author: Seth Grover <[email protected]>
    Date:   Thu Sep 22 14:36:26 2022 -0600

        experimenting with github pages

    commit 5016081
    Author: Seth Grover <[email protected]>
    Date:   Thu Sep 22 14:22:46 2022 -0600

        experimenting with github pages

    commit f1bff36
    Author: Seth Grover <[email protected]>
    Date:   Thu Sep 22 14:21:24 2022 -0600

        experimenting with github pages

    commit 0e0d9f0
    Author: Seth Grover <[email protected]>
    Date:   Thu Sep 22 14:18:34 2022 -0600

        experimenting with github pages

    commit e170422
    Author: Seth Grover <[email protected]>
    Date:   Thu Sep 22 14:03:54 2022 -0600

        experimenting with github pages

    commit 63de7bb
    Author: Seth Grover <[email protected]>
    Date:   Thu Sep 22 14:00:54 2022 -0600

        Revert "experimenting with github pages"

        This reverts commit f43a4aa.

    commit f43a4aa
    Author: Seth Grover <[email protected]>
    Date:   Thu Sep 22 13:59:10 2022 -0600

        experimenting with github pages

    commit b9925dc
    Author: Seth Grover <[email protected]>
    Date:   Thu Sep 22 13:38:46 2022 -0600

        experimenting with github pages

    commit 41528fb
    Author: Seth Grover <[email protected]>
    Date:   Thu Sep 22 13:34:51 2022 -0600

        experimenting with github pages

    commit efd3c88
    Author: Seth Grover <[email protected]>
    Date:   Thu Sep 22 13:32:01 2022 -0600

        experimenting with github pages

    commit e0f4466
    Author: Seth Grover <[email protected]>
    Date:   Thu Sep 22 13:30:37 2022 -0600

        experimenting with github pages

    commit 8b8d469
    Author: Seth Grover <[email protected]>
    Date:   Thu Sep 22 13:28:06 2022 -0600

        experimenting with github pages

    commit 9c00ea2
    Author: Seth Grover <[email protected]>
    Date:   Thu Sep 22 13:21:43 2022 -0600

        experimenting with github pages

    commit 1a0df24
    Author: Seth Grover <[email protected]>
    Date:   Thu Sep 22 13:16:25 2022 -0600

        experimenting with github pages

    commit b7ae1d2
    Author: Seth Grover <[email protected]>
    Date:   Thu Sep 22 12:54:49 2022 -0600

        basic config

    commit 208ef01
    Author: Seth Grover <[email protected]>
    Date:   Thu Sep 22 12:53:30 2022 -0600

        experimenting with jekyll

    commit 8aea3e2
    Author: Seth Grover <[email protected]>
    Date:   Thu Sep 22 12:43:41 2022 -0600

        links work in progress

    commit 1605844
    Author: Seth Grover <[email protected]>
    Date:   Thu Sep 22 12:37:25 2022 -0600

        Added github pages config

    commit 599eb83
    Author: Seth Grover <[email protected]>
    Date:   Thu Sep 22 12:25:14 2022 -0600

        Added github pages config

    commit 73754a4
    Author: Seth Grover <[email protected]>
    Date:   Thu Sep 22 12:18:58 2022 -0600

        documentation links work in progress

    commit 03012af
    Author: Seth Grover <[email protected]>
    Date:   Thu Sep 22 12:18:19 2022 -0600

        documentation links work in progress

    commit 3b8cd74
    Author: Seth Grover <[email protected]>
    Date:   Thu Sep 22 12:00:57 2022 -0600

        documentation links work in progress

    commit 7b13fa7
    Author: Seth Grover <[email protected]>
    Date:   Thu Sep 22 11:59:20 2022 -0600

        documentation links work in progress

    commit 52df01b
    Author: Seth Grover <[email protected]>
    Date:   Thu Sep 22 11:54:45 2022 -0600

        documentation links work in progress

    commit b7ac174
    Author: Seth Grover <[email protected]>
    Date:   Thu Sep 22 11:02:37 2022 -0600

        testing relative links

    commit 952936d
    Author: Seth Grover <[email protected]>
    Date:   Thu Sep 22 10:47:47 2022 -0600

        split all the .md documentation into different files

commit 6a7003a
Author: Seth Grover <[email protected]>
Date:   Wed Sep 21 13:54:31 2022 -0600

    simplify adjustment of netbox unit file

commit 1896e24
Author: Seth Grover <[email protected]>
Date:   Wed Sep 21 13:29:05 2022 -0600

    Using /assets/ for netbox conflicts with Arkime's /assets/, so use /netbox/ for the NetBox path

commit 5ca383d
Author: Seth Grover <[email protected]>
Date:   Wed Sep 21 13:26:09 2022 -0600

    Using /assets/ for netbox conflicts with Arkime's /assets/, so use /netbox/ for the NetBox path

commit 2cf383b
Author: Seth Grover <[email protected]>
Date:   Wed Sep 21 12:03:26 2022 -0600

    Fix depends

commit 06a1369
Author: Seth Grover <[email protected]>
Date:   Tue Sep 20 19:15:28 2022 -0600

    tweaks for ISO

commit 32caf88
Author: Seth Grover <[email protected]>
Date:   Tue Sep 20 15:10:50 2022 -0600

    fix packaging

commit 28969ea
Author: Seth Grover <[email protected]>
Date:   Tue Sep 20 14:36:40 2022 -0600

    readme update

commit bc6c9ea
Author: Seth Grover <[email protected]>
Date:   Tue Sep 20 14:32:38 2022 -0600

    update poster

commit ff402b3
Author: Seth Grover <[email protected]>
Date:   Tue Sep 20 14:10:41 2022 -0600

    slide update

commit 8cd74d7
Author: Seth Grover <[email protected]>
Date:   Tue Sep 20 13:30:52 2022 -0600

    build fixes

commit 87d8b0d
Merge: 90f40dc 85c764e
Author: Seth Grover <[email protected]>
Date:   Tue Sep 20 13:14:36 2022 -0600

    Merge branch 'netbox' of https://github.com/mmguero-dev/Malcolm into development

commit 85c764e
Author: Seth Grover <[email protected]>
Date:   Tue Sep 20 13:13:56 2022 -0600

    readme

commit 12d99f7
Author: Seth Grover <[email protected]>
Date:   Tue Sep 20 13:12:21 2022 -0600

    readme

commit 94948fb
Author: Seth Grover <[email protected]>
Date:   Tue Sep 20 12:26:30 2022 -0600

    readme

commit 357fde6
Author: Seth Grover <[email protected]>
Date:   Tue Sep 20 12:16:21 2022 -0600

    netbox wip

commit f6ecce5
Author: Seth Grover <[email protected]>
Date:   Tue Sep 20 11:58:15 2022 -0600

    netbox wip

commit bcd0ee9
Author: Seth Grover <[email protected]>
Date:   Tue Sep 20 11:20:52 2022 -0600

    netbox wip

commit 41a1706
Author: Seth Grover <[email protected]>
Date:   Tue Sep 20 11:08:21 2022 -0600

    initialize netbox on startup

commit 7c0d37a
Author: Seth Grover <[email protected]>
Date:   Tue Sep 20 10:21:21 2022 -0600

    cleaner disabling of netbox by default

commit 58c21aa
Author: Seth Grover <[email protected]>
Date:   Tue Sep 20 09:27:51 2022 -0600

    use tini for init on docker containers; allow netbox to be toggled

commit d048835
Author: Seth Grover <[email protected]>
Date:   Tue Sep 20 06:56:09 2022 -0600

    Bump zeek to v5.0.2

commit 90f40dc
Author: Seth Grover <[email protected]>
Date:   Tue Sep 20 06:56:09 2022 -0600

    Bump zeek to v5.0.2

commit 9e6fbee
Author: Seth Grover <[email protected]>
Date:   Mon Sep 19 21:52:31 2022 -0600

    netbox wip

commit b2a043f
Author: Seth Grover <[email protected]>
Date:   Mon Sep 19 21:44:29 2022 -0600

    netbox wip

commit 481e01f
Author: Seth Grover <[email protected]>
Date:   Mon Sep 19 21:34:19 2022 -0600

    netbox WIP

commit d348641
Author: Seth Grover <[email protected]>
Date:   Mon Sep 19 20:35:56 2022 -0600

    build docker images specifically for malcolm

commit cc907c2
Author: SG <[email protected]>
Date:   Mon Sep 19 15:40:30 2022 -0600

    Fix envs for netbox

commit 382d8ea
Author: SG <[email protected]>
Date:   Mon Sep 19 15:17:21 2022 -0600

    initial swag at netbox integration

commit 639d251
Author: SG <[email protected]>
Date:   Mon Sep 19 14:27:26 2022 -0600

    bump to version 6.4.0 for idaholab#17

commit 29ed8dd
Author: Seth Grover <[email protected]>
Date:   Thu Sep 15 07:10:15 2022 -0600

    fix broken visualization

commit ccd1e25
Author: Seth Grover <[email protected]>
Date:   Wed Sep 14 15:08:16 2022 -0600

    bump opensearch and dashboards to v2.3.0

commit 18f9cbf
Author: SG <[email protected]>
Date:   Tue Sep 13 08:55:47 2022 -0600

    update audit rules

commit 60b3ff0
Author: SG <[email protected]>
Date:   Tue Sep 13 08:44:15 2022 -0600

    set boot grub permission at the end of preseed

commit 7c1a011
Author: Seth Grover <[email protected]>
Date:   Mon Sep 12 16:17:30 2022 -0600

    documentation tweaks for hardening (see idaholab#111)

commit 332e7d1
Author: Seth Grover <[email protected]>
Date:   Mon Sep 12 16:16:57 2022 -0600

    documentation tweaks for hardening (see idaholab#111)

commit 2a26bba
Author: Seth Grover <[email protected]>
Date:   Mon Sep 12 16:16:32 2022 -0600

    documentation tweaks for hardening (see idaholab#111)

commit a48b12e
Author: Seth Grover <[email protected]>
Date:   Mon Sep 12 16:13:19 2022 -0600

    documentation tweaks for hardening (see idaholab#111)

commit f3cb433
Author: Seth Grover <[email protected]>
Date:   Mon Sep 12 15:35:14 2022 -0600

    work in progress for updates to documentation for hardening, see idaholab#111

commit 6ac88e0
Author: Seth Grover <[email protected]>
Date:   Mon Sep 12 14:35:20 2022 -0600

    documentation and script changes for switching to just using hte harbian-audit project

commit 5eee892
Author: Seth Grover <[email protected]>
Date:   Thu Sep 8 13:10:36 2022 -0600

    bump version to v6.3.1 for development

commit 59e24b1
Author: Seth Grover <[email protected]>
Date:   Thu Sep 8 08:21:25 2022 -0600

    Added template slide

commit 2e5f653
Author: Seth Grover <[email protected]>
Date:   Mon Aug 15 09:41:34 2022 -0600

    set userAuthIps to work with docker

commit 8185a91
Author: Seth Grover <[email protected]>
Date:   Mon Aug 15 09:12:18 2022 -0600

    fix build

commit 7481a86
Author: Seth Grover <[email protected]>
Date:   Mon Aug 15 08:54:33 2022 -0600

    trying build of main branch
@mmguero mmguero moved this from Done to Released in Malcolm Oct 20, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@mmguero mmguero

Labels
bug Something isn't working carving Relating to carving (extraction) of files from traffic and the scanning of those files regression It worked at one point...
Projects
Malcolm
Status: Released
Milestone
No milestone
Development

No branches or pull requests
1 participant
@mmguero