Skip to content

release-4.7

Compare
Choose a tag to compare
@B0fH B0fH released this 04 May 18:45
· 58 commits to master since this release
c852788
  • [IMPORTANT] HXTool now requires the Python keyring module
  • [FIXED] Missing json import when adding a new profile - resolves #49
  • [FIXED] Schedule widget now displays properly on small screens
  • [FIXED] Booleans and integers are properly cast when parsing audit data for task modules
  • [FIXED] Multi-file file acquisitions silently failing when using TinyDB
  • [FIXED] An intermittent issue with the Task Scheduler where tasks would run outside their scheduled time
  • [ADDED] Indicator creation support for Endpoint Security IOC Streaming module - thanks @z3k3z
  • [ADDED] MongoDB backed Audit Explorer
  • [ADDED] OpenIOC 1.1 support for real-time and streaming rule import - thanks @matthewdunwoody
  • [ADDED] MD5 hash filtering for file listings in the multi-file acquisition feature
  • [ADDED] Mandiant Advantage query button (MA) for observables when viewing alerts
  • [ADDED] OpenIOC jobfilter support to the script builder
  • [ADDED] Retry for bulk acquisition task modules when intermittent connection issues occur
  • [CHANGED] iSIGHT query button has been renamed FTI
  • [CHANGED] Markdown formatted readme - thanks @milesflo
  • [CHANGED] Task scheduler credentials are now stored using the keyring module
  • [CHANGED] Default log size to 5MB before rolling the log
  • [CHANGED] Docker build file now uses the 'python-slim' image instead of Alpine Linux. This is due to the lack of glibc on Alpine, which caused several build issues. Image build times are much faster, but the resulting image will be a bit larger.
  • [CHANGED] Docker run command, see README.DOCKER