VolWeb GUI rework (new theme and way of presenting the information.

noname1007 · Aug 4, 2022 · f2bfb97 · f2bfb97
1 parent 5eb7e42
commit f2bfb97
Show file tree

Hide file tree

Showing 53 changed files with 1,147 additions and 1,316 deletions.
diff --git a/dashboard/static/css/styles.css b/dashboard/static/css/styles.css
@@ -55,6 +55,8 @@
   display: none;
 }
 
+
+
 .text-primary {
   --bs-text-opacity: 1;
   color: rgba(var(--bs-primary-rgb), var(--bs-text-opacity)) !important;
@@ -193,6 +195,16 @@ thead, tbody {
   height: 50px;
   stroke: #fff;
 }
+
+.spinner-review {
+  z-index: 2;
+  position: absolute;
+  top: 30%;
+  left: 60%;
+  margin: -25px 0 0 -25px;
+}
+
+
 .open-menu {
   padding-top: 10px;
   padding-bottom: 10px;
@@ -218,8 +230,8 @@ thead, tbody {
     background-color: var(--bs-primary);
 }
 
-.toast-proc-faild{
-    background-color: var(--bs-danger-rgb);
+.toast-proc-failed{
+    background-color: var(--bs-danger);
 }
 
 .tab-pane.fade {

diff --git a/dashboard/static/js/windows.js b/dashboard/static/js/windows.js
@@ -2,7 +2,6 @@ $(document).ready(function(){
   $('.plugin').hide();
   $('.toast-other').toast('show');
 
-
   var tooltipTriggerList = [].slice.call(document.querySelectorAll('[data-bs-toggle="tooltip"]'))
   var tooltipList = tooltipTriggerList.map(function (tooltipTriggerEl) {
     return new bootstrap.Tooltip(tooltipTriggerEl)
@@ -17,7 +16,6 @@ $(document).ready(function(){
     });
   });
 
-
   function DownloadHive(filename){
       const csrf = document.getElementsByName('csrfmiddlewaretoken');
       const fd = new FormData();
@@ -61,16 +59,14 @@ $(document).ready(function(){
   }
 
 
-    /* ################################ TIMELINE SCRIPTS ################################ */
+  //TimeLine SearchBar
   $("#searchTimeline").on("keyup", function() {
     var value = $(this).val().toLowerCase();
     $("#TimelineTab tr").filter(function() {
       $(this).toggle($(this).text().toLowerCase().indexOf(value) !== -1)
     })
   });
 
-
-    /* ################################ FILES SCRIPTS ################################ */
   //FileScan SearchBar
   $("#search_files").on("keyup", function() {
     var value = $(this).val().toLowerCase();
@@ -80,5 +76,67 @@ $(document).ready(function(){
   });
 
 
+  //CmdLine SearchBar
+  $("#searchCmdLine").on("keyup", function() {
+    var value = $(this).val().toLowerCase();
+    $("#cmdline tr").filter(function() {
+      $(this).toggle($(this).text().toLowerCase().indexOf(value) > -1)
+    });
+  });
+
+  //CmdLine SearchBar
+  $("#searchDllList").on("keyup", function() {
+    var value = $(this).val().toLowerCase();
+    $("#dlllist tr").filter(function() {
+      $(this).toggle($(this).text().toLowerCase().indexOf(value) > -1)
+    });
+  });
+
+  //Privileges SearchBar
+  $("#searchPriv").on("keyup", function() {
+    var value = $(this).val().toLowerCase();
+    $("#processPriv tr").filter(function() {
+      $(this).toggle($(this).text().toLowerCase().indexOf(value) > -1)
+    });
+  });
+
+  //Process Env SearchBar
+
+  $("#searchEnv").on("keyup", function() {
+    var value = $(this).val().toLowerCase();
+    $("#processEnv tr").filter(function() {
+      $(this).toggle($(this).text().toLowerCase().indexOf(value) > -1)
+    });
+  });
+
+
+  //Process Handles SearchBar
+
+  $("#searchHandles").on("keyup", function() {
+    var value = $(this).val().toLowerCase();
+    $("#processHandles tr").filter(function() {
+      $(this).toggle($(this).text().toLowerCase().indexOf(value) > -1)
+    });
+  });
+
+
+  //NetStat Search funtion
+  $("#searchNetworkStat").on("keyup", function() {
+      var value = $(this).val().toLowerCase();
+      $("#netstat tr").filter(function() {
+        $(this).toggle($(this).text().toLowerCase().indexOf(value) > -1)
+      });
+    });
+
+  //NetStat Search funtion
+  $("#searchNetworkScan").on("keyup", function() {
+      var value = $(this).val().toLowerCase();
+      $("#netscan tr").filter(function() {
+        $(this).toggle($(this).text().toLowerCase().indexOf(value) > -1)
+      });
+    });
+
+
+
 
 });
diff --git a/dashboard/templates/dashboard/base.html b/dashboard/templates/dashboard/base.html
@@ -85,6 +85,8 @@
     <script src="https://cdnjs.cloudflare.com/ajax/libs/Chart.js/2.8.0/Chart.bundle.min.js"></script>
     <script src="{% static '/js/bs-init.js' %}"></script>
     <script src="{% static '/js/theme.js' %}"></script>
+    {% include "investigations/toasts.html" %}
+
 </body>
 
 </html>
diff --git a/dashboard/templates/dashboard/dashboard.html b/dashboard/templates/dashboard/dashboard.html
@@ -8,12 +8,6 @@
             <div class="card shadow mb-4" style="background: rgba(0,0,0,0.25);color: rgb(255,255,255);">
                 <div class="card-header d-flex justify-content-between align-items-center" style="background: rgba(0,0,0,0.25);">
                     <h6 class="text-primary fw-bold m-0" style="color: rgb(232,232,232);">Investigations over time</h6>
-                    <!-- <div class="dropdown no-arrow"><button class="btn btn-link btn-sm dropdown-toggle" aria-expanded="false" data-bs-toggle="dropdown" type="button"><i class="fas fa-ellipsis-v text-gray-400"></i></button>
-                        <div class="dropdown-menu shadow dropdown-menu-end animated--fade-in">
-                            <p class="text-center dropdown-header">dropdown header:</p><a class="dropdown-item" href="#">&nbsp;Action</a><a class="dropdown-item" href="#">&nbsp;Another action</a>
-                            <div class="dropdown-divider"></div><a class="dropdown-item" href="#">&nbsp;Something else here</a>
-                        </div>
-                    </div> Can be usefull later-->
                 </div>
                 <div class="card-body">
                   <div id="chart" class="opacity-75" style="height:30rem;"></div>

diff --git a/dashboard/templates/dashboard/login.html b/dashboard/templates/dashboard/login.html
@@ -16,7 +16,7 @@
     <section class="login-clean">
         <form method="post">
             {% csrf_token %}
-            <div class="illustration"><img src="{% static '/img/volweblogo.png' %}" style="width: 150px;"></div>
+            <div class="illustration"><img src="{% static '/img/volweb.svg' %}" style="width: 150px;"></div>
             {{ form|crispy }}
             <div class="mb-3"><button class="btn btn-primary d-block w-100" type="submit">Log In</button></div><span style="text-align: center;font-size: 12px;">Please refer to your administrator to obtain an account</span>
         </form>

diff --git a/investigations/tasks.py b/investigations/tasks.py
@@ -16,6 +16,8 @@ def dump_memory_pid(case_id,pid):
         pass
     try:
         result = dump_process(dump_path, pid, output_path)
+        if result == "Error outputting file":
+            return "ERROR"
         return result
     except:
         print("Error processing memory dump ")
@@ -33,10 +35,13 @@ def dump_memory_file(case_id, offset):
     except:
         pass
     result = dump_file(dump_path, offset, output_path)
-    logger.info(f"Result : {result}")
-    return result
+    if len(result) > 0:
+        logger.info(f"Result : {result}")
+        return result
+    else:
+        return "ERROR"
 
-"""Windows automatic analysis"""
+"""Windows Memory analysis"""
 def windows_memory_analysis(dump_path,case):
     PARTIAL_RESULTS = run_volweb_routine_windows(dump_path,case.id,case)
     case.percentage = "100"
@@ -47,7 +52,7 @@ def windows_memory_analysis(dump_path,case):
     case.save()
     return
 
-"""Linux Memory Analysis (Not implemented yet)"""
+"""Linux Memory Analysis"""
 def linux_memory_analysis(dump_path, case):
     PARTIAL_RESULTS = run_volweb_routine_linux(dump_path,case.id,case)
     case.percentage = "100"

diff --git a/investigations/templates/investigations/investigations.html b/investigations/templates/investigations/investigations.html
@@ -16,8 +16,7 @@ <h4 style="color: var(--bs-white);"><i class="fas fa-briefcase"></i>&nbsp;Invest
             <div class="col-4 invest-table-header"><span class="invest-header">&nbsp;File Name</span></div>
             <div class="col-2 invest-table-header"><span class="invest-header">&nbsp;Linked ISF</span></div>
             <div class="col-1 invest-table-header"><span class="invest-header">&nbsp;OS</span></div>
-            <div class="col-1 invest-table-header"><span class="invest-header">&nbsp;IOCs</span></div>
-            <div class="col-1 text-center invest-table-header"><span class="invest-header">&nbsp;Status</span></div>
+            <div class="col-2 text-center invest-table-header"><span class="invest-header">&nbsp;Status</span></div>
         </div>
     </div>
     {% if investigations %}
@@ -32,7 +31,7 @@ <h4 style="color: var(--bs-white);"><i class="fas fa-briefcase"></i>&nbsp;Invest
                 <div class="invest-cell col-2 align-items-center d-flex"><i class="fas fa-memory" style="font-size: 15px;transform: rotate(116deg);margin-right: 4px;"></i><span class="invest-header">{{i.title}}</span></div>
                 <div class="invest-cell col-4 text-truncate"><span class="invest-header">{{i.name}}</span></div>
                 {% if i.linked_isf %}
-                <div class="invest-cell col-2"><span class="invest-header" style="color: var(--bs-gray-500);">{{i.linked_isf.symbols_file}}</span></div>
+                <div class="invest-cell col-2"><span class="invest-header" style="color: var(--bs-gray-500);">{{i.linked_isf.name}}</span></div>
                 {% else %}
                 <div class="invest-cell col-2"><span class="invest-header" style="color: var(--bs-gray-500);">No linked ISF</span></div>
                 {% endif %}
@@ -46,22 +45,20 @@ <h4 style="color: var(--bs-white);"><i class="fas fa-briefcase"></i>&nbsp;Invest
                 {% if i.os_version == "MacOs" %}
                 <!--- Nothing yet -->
                 {% endif %}
-                <div class="invest-cell col-1"><span class="invest-header">&nbsp;2</span></div>
-
 
                 {% if i.status == '4' %}
-                <div class="col-1 text-center" style="color: var(--bs-body-bg);background: rgba(58,59,69,0);"><span class="invest-header" style="color: var(--bs-orange);">Partial results</span></div>
+                <div class="col-2 text-center" style="color: var(--bs-body-bg);background: rgba(58,59,69,0);"><span class="invest-header" style="color: var(--bs-orange);">Partial results</span></div>
                 {% elif i.status == '2' %}
-                <div class="col-1 text-center" style="color: var(--bs-body-bg);background: rgba(58,59,69,0);"><span class="invest-header" style="color: var(--bs-green);">Ready</span></div>
+                <div class="col-2 text-center" style="color: var(--bs-body-bg);background: rgba(58,59,69,0);"><span class="invest-header" style="color: var(--bs-green);">Ready</span></div>
                 {% elif i.status == '1' %}
-                <div class="col-1 text-center invest-item" style="color: var(--bs-body-bg);background: rgba(58,59,69,0);">
+                <div class="col-2 text-center invest-item" style="color: var(--bs-body-bg);background: rgba(58,59,69,0);">
                   <svg height=20.420578 id=svg5 inkscape:export-filename=side.png inkscape:export-xdpi=96 inkscape:export-ydpi=96 inkscape:version="1.2 (dc2aeda, 2022-05-15)"sodipodi:docname=side.svg version=1.1 viewBox="0 0 1.0868235 23.893361"width=4.6457891 xml:space=preserve xmlns=http://www.w3.org/2000/svg xmlns:inkscape=http://www.inkscape.org/namespaces/inkscape xmlns:sodipodi=http://sodipodi.sourceforge.net/DTD/sodipodi-0.dtd xmlns:svg=http://www.w3.org/2000/svg><sodipodi:namedview bordercolor=#000000 borderopacity=0.25 id=namedview7 inkscape:current-layer=layer1 inkscape:cx=-19.812001 inkscape:cy=42.777106 inkscape:deskcolor=#d1d1d1 inkscape:document-units=mm inkscape:pagecheckerboard=0 inkscape:pageopacity=0.0 inkscape:showpageshadow=2 inkscape:window-height=1302 inkscape:window-maximized=1 inkscape:window-width=3440 inkscape:window-x=1728 inkscape:window-y=25 inkscape:zoom=9.5144351 pagecolor=#ffffff showgrid=false /><defs id=defs2 /><g id=layer1 inkscape:groupmode=layer inkscape:label="Calque 1"transform=translate(-106.95068,-6.8098632)><path class=svg-header-1 d="m 109.49242,7.1074427 c -4.79931,7.2235033 -5.68153,14.8989793 -0.24635,23.3033863"id=path2363 inkscape:export-filename=side.png inkscape:export-xdpi=96 inkscape:export-ydpi=96 sodipodi:nodetypes=cc style=fill:none;stroke:#4e73df;stroke-width:1px;stroke-opacity:1 /><path class=svg-header-2 d="m 109.79308,7.1113105 c -5.45682,7.2211055 -6.4599,14.8940335 -0.28009,23.2956505"id=path297 inkscape:export-filename=side.png inkscape:export-xdpi=96 inkscape:export-ydpi=96 sodipodi:nodetypes=cc style=fill:none;stroke:#54c4d4;stroke-width:1px;stroke-opacity:1 /><path class=svg-header-3 d="m 109.79731,7.1077022 c -4.86467,7.2233428 -5.7589,14.8986478 -0.2497,23.3028678"id=path3032 inkscape:export-filename=side.png inkscape:export-xdpi=96 inkscape:export-ydpi=96 sodipodi:nodetypes=cc style=fill:none;stroke:#e83e8c;stroke-width:1px;stroke-opacity:1 /></g></svg>
                   <span class="invest-header">{{i.percentage}}%</span>
                     <svg height=20.420578 id=svg5 inkscape:export-filename=side.png inkscape:export-xdpi=96 inkscape:export-ydpi=96 inkscape:version="1.2 (dc2aeda, 2022-05-15)"sodipodi:docname=side.svg version=1.1 viewBox="0 0 1.0868235 23.893361"width=4.6457891 xml:space=preserve xmlns=http://www.w3.org/2000/svg xmlns:inkscape=http://www.inkscape.org/namespaces/inkscape xmlns:sodipodi=http://sodipodi.sourceforge.net/DTD/sodipodi-0.dtd xmlns:svg=http://www.w3.org/2000/svg><sodipodi:namedview bordercolor=#000000 borderopacity=0.25 id=namedview7 inkscape:current-layer=layer1 inkscape:cx=-21.388553 inkscape:cy=42.987313 inkscape:deskcolor=#d1d1d1 inkscape:document-units=mm inkscape:pagecheckerboard=0 inkscape:pageopacity=0.0 inkscape:showpageshadow=2 inkscape:window-height=1302 inkscape:window-maximized=1 inkscape:window-width=3440 inkscape:window-x=1728 inkscape:window-y=25 inkscape:zoom=9.5144351 pagecolor=#ffffff showgrid=false /><defs id=defs2 /><g id=layer1 inkscape:groupmode=layer inkscape:label="Calque 1"transform=translate(-106.95068,-6.8098632)><path class=svg-header-1 d="m 105.49577,7.1074427 c 4.79931,7.2235033 5.68153,14.8989793 0.24635,23.3033863"id=path2363 inkscape:export-filename=side.png inkscape:export-xdpi=96 inkscape:export-ydpi=96 sodipodi:nodetypes=cc style=fill:none;stroke:#4e73df;stroke-width:1px;stroke-opacity:1 /><path class=svg-header-2 d="m 105.19511,7.1113105 c 5.45682,7.2211055 6.4599,14.8940335 0.28009,23.2956505"id=path297 inkscape:export-filename=side.png inkscape:export-xdpi=96 inkscape:export-ydpi=96 sodipodi:nodetypes=cc style=fill:none;stroke:#54c4d4;stroke-width:1px;stroke-opacity:1 /><path class=svg-header-3 d="m 105.19088,7.1077022 c 4.86467,7.2233428 5.7589,14.8986478 0.2497,23.3028678"id=path3032 inkscape:export-filename=side.png inkscape:export-xdpi=96 inkscape:export-ydpi=96 sodipodi:nodetypes=cc style=fill:none;stroke:#e83e8c;stroke-width:1px;stroke-opacity:1 /></g></svg>
 
                 </div>
                 {% else %}
-                <div class="col-1" style="color: var(--bs-body-bg);background: rgba(58,59,69,0);"><span class="invest-header" style="color: var(--bs-pink);">Not started</span></div>
+                <div class="col-2 text-center" style="color: var(--bs-body-bg);background: rgba(58,59,69,0);"><span class="invest-header" style="color: var(--bs-pink);">Not started</span></div>
                 {% endif %}
             </a></div>
     </div>
@@ -139,13 +136,13 @@ <h4 style="color: var(--bs-white);"><i class="fas fa-briefcase"></i>&nbsp;Invest
 
 <form style="all: unset;" id='reviewform' action="{% url 'reviewinvest' %}" method="GET">
 </form>
+
 <form method="POST">
   {% csrf_token %}
 </form>
 
 
 <div class="overlay"></div>
-{% include "investigations/toasts.html" %}
 <script src="https://cdnjs.cloudflare.com/ajax/libs/jquery/3.6.0/jquery.min.js"></script>
 <script>