Jump to content

Saferwall v0.4.0


MBot

Recommended Posts

[0.4.0] - 06/03/2023

Added

  • Upload sandbox memdumps and screenshots thumbnails to obj storage #398.
  • Upload sandbox desktop screenshots to obj storage #397.
  • Sandbox agent health check + basic sysinfo and env data collection #395.
  • Push sandbox payload results to the aggregator #391.
  • MultiAV McAfee enable scan for potentially unwanted program #387.
  • Numerous updates to support different types of messages for the aggregator #383.
    • Add methods for the storage internal pkg to support bucket creation.
    • Generate thumbnails for the sandbox screenshots and add health checks for VMs.
    • Remove cluster-autoscaler form helm chart.
    • Add documentation with the communication format used between services.
  • Agent: collect screenshots and memdumps #380.
  • Guess file extension and include PE signature #379.
  • Curate PE scan results #378.
  • Add inlets-operator and metallb charts #376. inlets-operator has been deleted later, and metallb is installed separately from the chart dependencies.
  • Add kube-prometheus-stack CRDs and experiment with k3s for local dev.
  • Add workflow_dispatch for helm-release and release services job.

Changed

  • [helm] Remove elastic stack that was used for logging #404.
  • [helm] Do not include kube-prometheus-stack in main chart & remove elastic stack for logging #403.
  • Hosting documentation/blog website in cloudflare #402.
  • Set k8s version to the same as prod k8s version and update default user/password values in minio helm chart #392.
  • Change protobuf message scheme to support uploading object to s3 #383.
  • Bind k8s port forwarding services to 0.0.0.0.
  • Bump wait-for and golang docker images.
  • Bump yara, helm, kuberneters, exiftool, kind, kubens/kubectx and kube-capacity.
  • Bump aws-efs-csi-driver, ingress-nginx, couchbase-operator and minio helm chart dependencies.

Fixed

  • Use wine + loadlibrary to make windows defender works again thanks to prsyahmi #386.
  • MultiAV McAfee doesn't report other kind of malware besides trojan thanks to prsyahmi #387.
  • Do not set the file extension/format when it is now known #381.
  • MultiAV upgrade Avast to a newer major release.

Download

Link to comment
Share on other sites

Guest
This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...