Release Date: 30 Mar 2018
1.) Configurable Flask interface and port bindings
2.) Configurable AutoFocus points information threading and execution thresholds
3.) Configurable multi-processing
4.) Retrieve number of events per domain
doc_created gets manipulated when sfn-domain-details doc is updated
Domains per install list
Make AutoFocus point updates separate, configurable thread
Flask bound to 0.0.0.0 which makes Web service available on TCP :5000
Make multi-procs configurable
SFN stops if daily AF points go to 0
Release Date: 23 Feb 2018
1.) Start SafeNetworking at system start time automatically
Breakout large docs into headings with sub-docs
Auto startup using supervisor
Add contributing guidelines
Need issue templates
Need pull request templates
Startup script
setup.sh
Release Date: 09 Feb 2018
1.) New Kibana visualizations and Dashboards added for malware viewed by time
- If you already have an install:
Setup index-patterns for sfn-domain-details* & sfn-tag-details*
Import install/kibana/export.json via Kibana and select the appropriate index-patterns for the visualizations
2.) Safenetworking now processes all threat categories with dns in the name (dns, dns-wildfire, etc.)
Concurrency issue with af-details
SFN2.0.1 not populating sfn-domain-details index docs
Change "Not Available" verbage
Runner processDNS() search should be descending
Move documentation to the Wiki
sfn linting score
runner linting score
dnsutils linting score
dns linting score
views linting score
init linting score
instance empty directory
public = empty directory
cleanup unused directory
Unassigned shards error
Add new viz to 2.0.2
- Intermittently, there is a domain document concurrency error that will show up in the sfn.log as an ERROR and it will create subsequent ERROR messages as the system cannot work with the domain details document correctly. To remedy this, as it could slow down performance, delete the domain document in question. Contact the account team or SP-Solutions with help on this matter.
Release Date: 17 Jan 2018
Moved to ElasticStack (ELK) as the underlying architecture
New processing engine for DNS event
Ability to sync directly from Github with no VM download
Issue tracking via Github
Full documentation on install, startup and (some) troubleshooting
- Intermittently, there is a concurrency error that will show up in the sfn.log as an ERROR and it will create subsequent ERROR messages as the system cannot work with the domain details document correctly. To remedy this, as it could slow down performance, delete the domain document in question. Contact the account team or SP-Solutions with help on this matter.