Commits

Branch selector

 master

User selector

All users

Datepicker

All time

Commit History

Commits on Jul 21, 2023

• 811 show ip dns fqdns (activecm#812)

  Show description for f253220
  

  kirkhauck

  and

  Zalgo2462

  authored
  f253220

  Copy full SHA for f253220

• Adjust show-dns-fqdn-ips to prompt user to supply database and FQDN if supplied with fewer than two arguments (activecm#814)

  kirkhauck

  authored
  231a5ce

  Copy full SHA for 231a5ce

Commits on Jul 15, 2023

• 808 show dns fqdn ips (activecm#809)

  Show description for 0572476
  kirkhauck

  authored
  0572476

  Copy full SHA for 0572476

Commits on Jun 20, 2023

• Add step to manual install instrucions to run chmod 777 (activecm#806)

  kirkhauck

  authored
  42b84a7

  Copy full SHA for 42b84a7

Commits on May 3, 2023

• Only maintain one cid's worth of max scores in the host collection (activecm#801)

  Show description for dd1acf9
  

  Zalgo2462

  and

  Logan L

  authored
  dd1acf9

  Copy full SHA for dd1acf9

Commits on Apr 26, 2023

• Bump version (activecm#799)

  Show description for 833dca8
  caffeinatedpixel

  authored
  833dca8

  Copy full SHA for 833dca8

Commits on Apr 25, 2023

• Disable SNIConns analysis if SNIBeacon analysis is disabled (activecm#798)

  Show description for b09af7f
  

  Zalgo2462

  and

  Logan L

  authored
  b09af7f

  Copy full SHA for b09af7f

• Update to bimodal portion of the histogram score (activecm#794)

  Show description for 757c913
  

  lisaSW

  and

  Zalgo2462

  authored
  757c913

  Copy full SHA for 757c913

Commits on Apr 24, 2023

• Don't filter internal -> internal DNS traffic (activecm#797)

  Show description for e0b0cae
  

  Zalgo2462

  and

  Logan L

  authored
  e0b0cae

  Copy full SHA for e0b0cae

Commits on Apr 17, 2023

• Change show-long-connections to sort by Total Duration (activecm#790)

  Show description for 9819b72
  

  Zalgo2462

  and

  Logan L

  authored
  9819b72

  Copy full SHA for 9819b72

Commits on Apr 11, 2023

• Duration Scoring Update (activecm#793)

  Show description for 5186cac
  lisaSW

  authored
  5186cac

  Copy full SHA for 5186cac

Commits on Apr 10, 2023

• Removal of connection count portion of beacon scoring and adjustment of skew (activecm#792)

  Show description for a1765c0
  lisaSW

  authored
  a1765c0

  Copy full SHA for a1765c0

Commits on Apr 3, 2023

• Parsed log field validation (activecm#791)

  Show description for 87b8ec8
  

  lisaSW

  and

  Logan L

  authored
  87b8ec8

  Copy full SHA for 87b8ec8

• Fix SSL and DNS log filtering (activecm#788)

  Show description for 1cc764c
  

  Zalgo2462

  and

  Logan L

  authored
  1cc764c

  Copy full SHA for 1cc764c

Commits on Mar 14, 2023

• Improve useragent aggregation runtime for datasets with many useragents (activecm#785)

  Show description for 974db68
  

  Zalgo2462

  and

  Logan L

  authored
  974db68

  Copy full SHA for 974db68

Commits on Jan 17, 2023

• Ensure that the dbStats item always comes before the scale item using bson.D instead of bson.M (activecm#780)

  Show description for 5cec6d5
  

  Zalgo2462

  and

  Logan L

  authored
  5cec6d5

  Copy full SHA for 5cec6d5

Commits on Jan 9, 2023

• Update Beacons Proxy Scoring (activecm#778)

  Show description for b96ae47
  

  lisaSW

  and

  Logan L

  authored
  b96ae47

  Copy full SHA for b96ae47

• bump RITA version to v4.7.0 (activecm#777)

  Show description for 4764ce5
  

  Zalgo2462

  and

  Logan L

  authored
  4764ce5

  Copy full SHA for 4764ce5

• Update readme to remove ubuntu 18 and debian 10. Add better error reporting to the install script (activecm#776)

  Show description for cb5fd17
  

  Zalgo2462

  and

  Logan L

  authored
  cb5fd17

  Copy full SHA for cb5fd17

Commits on Dec 19, 2022

• Update Web Beacon scoring (activecm#774)

  Show description for 399728a
  lisaSW

  authored
  399728a

  Copy full SHA for 399728a

• Beacon scoring patch (activecm#773)

  Show description for d3ad434
  

  lisaSW

  and

  Logan L

  authored
  d3ad434

  Copy full SHA for d3ad434

• Remove beaconfqdn package (activecm#771)

  Show description for 60a433a
  

  Zalgo2462

  and

  Logan L

  authored
  60a433a

  Copy full SHA for 60a433a

Commits on Dec 16, 2022

• Fix strobes from overflooding *conn documents when strobing is cumulative (activecm#767)

  Show description for 1870a54
  

  3 peopleauthored
  1870a54

  Copy full SHA for 1870a54

Commits on Dec 13, 2022

• Check if a max analysis subdocument has already been inserted into the target host's dat collection before updating or inserting (activecm#764)

  Show description for c864d16
  

  3 peopleauthored
  c864d16

  Copy full SHA for c864d16

Commits on Dec 9, 2022

• Add rita clean command to remove RITA datasets without MetaDB entries (activecm#763)

  Show description for e7b6b34
  

  3 peopleauthored
  e7b6b34

  Copy full SHA for e7b6b34

• Add filter for all internal proxy traffic (activecm#765)

  Show description for b36791a
  

  Zalgo2462

  and

  Logan L

  authored
  b36791a

  Copy full SHA for b36791a

Commits on Nov 22, 2022

• Stop aggregation phase if there aren't local hosts (activecm#761)

  Show description for a6a1339
  

  3 peopleauthored
  a6a1339

  Copy full SHA for a6a1339

Commits on Nov 21, 2022

• removed calculations and associated storage for max dns query count score (activecm#762)

  lisaSW

  authored
  c1c8279

  Copy full SHA for c1c8279

Commits on Nov 14, 2022

• Lower bulk beaconFQDN lookup threshold to avoid hitting the 16MB limit on Mongo queries (activecm#760)

  Show description for 1ebfcab
  

  Zalgo2462

  and

  Logan L

  authored
  1ebfcab

  Copy full SHA for 1ebfcab

Commits on Sep 16, 2022

• filter external to internal traffic by default (activecm#753)

  Show description for ef9373d
  

  Zalgo2462

  and

  Logan L

  authored
  ef9373d

  Copy full SHA for ef9373d

Commits on Aug 26, 2022

• Fixed breaking proxy beacons aggregtion step typo (activecm#749)

  lisaSW

  authored
  5383a55

  Copy full SHA for 5383a55

Commits on Aug 25, 2022

• Fixed some beacon scores from being NaN (activecm#748)

  Show description for 6ab6138
  caffeinatedpixel

  authored
  6ab6138

  Copy full SHA for 6ab6138

Commits on Aug 23, 2022

• Bump to 4.6.0 (activecm#747)

  Show description for ef7cebc
  

  caffeinatedpixel

  and

  Zalgo2462

  authored
  ef7cebc

  Copy full SHA for ef7cebc

• Update rita-bl (activecm#746)

  Show description for 497259e
  

  caffeinatedpixel

  and

  Logan L

  authored
  497259e

  Copy full SHA for 497259e

Commits on Aug 19, 2022

• Migrate beacons analysis to using full timestamp list (activecm#745)

  Show description for ea1007d
  lisaSW

  authored
  ea1007d

  Copy full SHA for ea1007d

Pagination

Previous

Next