Skip to content

Latest commit

 

History

History
83 lines (65 loc) · 2.41 KB

CHANGELOG.md

File metadata and controls

83 lines (65 loc) · 2.41 KB

Changelog

Changes to the project will be tracked in this file via the date of change.

2019-02-19

Added

  • "beautified" field (bool) to ScanJavascript (jshlbrd)

2019-02-14

Added

  • strelka_dirstream.py now supports recursive directory scanning (zachsis)

2019-02-07

Added

  • ScanZip now supports decryption via password bruteforcing (ksdahl)

2019-02-04

Added

  • Unit tests for ScanPe added (infosec-intern)

2019-02-01

Added

  • strelka_dirstream.py now supports moving files after upload (zachsis)

2019-01-28

Added

  • Added version info to ScanPe (infosec-intern)

2019-01-26

Changed

  • Expanded identification of email files (DavidJBianco)

2019-01-16

Changed

  • pip packages now installed via requirements.txt file(s) (infosec-intern)

2019-01-03

Added

  • EOF error flag to ScanBzip2 (jshlbrd)

Changed

  • taste_yara now loads files from directories, not a static file (ksdahl)

2018-12-12

Added

  • Options for manually setting ZeroMQ TCP reconnections on the task socket (between broker and workers) (jshlbrd)

Changed

  • "request_port" option renamed to "request_socket_port" (jshlbrd)
  • "task_port" option renamed to "task_socket_port" (jshlbrd)

2018-12-10

Changed

  • strelka_dirstream.py switched from using inotify to directory polling (jshlbrd)
  • strelka_dirstream.py supports monitoring multiple directories (jshlbrd)
  • extract-strelka.bro will temporarily disable file extraction when the extraction directory reaches a maximum threshold (jshlbrd)

2018-11-27

Added

  • New scanner ScanFalconSandbox can send files to CrowdStrike's Falcon Sandbox (ksdahl)

2018-10-16

Added

  • New scanner ScanPhp can collect tokenized metadata from PHP files (jshlbrd)

2018-10-05

Added

  • New scanner ScanStrings can collect strings from file data (similar to Unix "strings" utility) (jshlbrd)

Changed

  • ScanPdf was unintentionally extracting duplicate streams, but now it is fixed to only extract unique streams (jshlbrd)

2018-10-03

Added

  • ScanJavascript now supports deobfuscating JavaScript files before parsing metadata (jshlbrd)

2018-09-28

Added

  • ScanUrl now supports user-defined regular expressions that can be called per-file (jshlbrd)

Changed

  • Refactored taste.yara javascript_file rule for readability (jshlbrd)
  • Removed JavaScript files from ScanUrl in the default strelka.yml (jshlbrd)

2018-09-26

Added

  • Project went public!