Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[backend] Microsoft Defender collector not working (#1686) #1912

Merged
merged 10 commits into from
Nov 26, 2024

Conversation

antoinemzs
Copy link
Contributor

@antoinemzs antoinemzs commented Nov 22, 2024

Proposed changes

  • The OpenBAS Implant Executor will now only set a required signature of a parent process with a specific uuid matching the specific inject that has been run.
  • The Caldera executor will search for a process name matching the tagged caldera implant image name as well, but not the specific command line.

Related issues

Checklist

  • I consider the submitted work as finished
  • I tested the code for its functionality
  • I wrote test cases for the relevant uses case
  • I added/update the relevant documentation (either on github or on notion)
  • Where necessary I refactored code to improve the overall quality

Further comments

If this is a relatively large or complex change, kick off the discussion by explaining why you chose the solution you did and what alternatives you considered, etc...

Copy link

codecov bot commented Nov 22, 2024

Codecov Report

Attention: Patch coverage is 0% with 23 lines in your changes missing coverage. Please review.

Project coverage is 33.73%. Comparing base (994a7c5) to head (181e908).
Report is 4 commits behind head on master.

Files with missing lines Patch % Lines
...nbas/injectors/openbas/OpenBASImplantExecutor.java 0.00% 23 Missing ⚠️
Additional details and impacted files
@@             Coverage Diff              @@
##             master    #1912      +/-   ##
============================================
+ Coverage     33.61%   33.73%   +0.12%     
  Complexity     1683     1683              
============================================
  Files           573      573              
  Lines         16752    16691      -61     
  Branches        976      967       -9     
============================================
  Hits           5631     5631              
+ Misses        10866    10805      -61     
  Partials        255      255              

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

@antoinemzs antoinemzs changed the title Issue/1685redux [backend] Microsoft Sentinel collector not working (#1685) Nov 25, 2024
Signed-off-by: Antoine MAZEAS <[email protected]>
@antoinemzs antoinemzs marked this pull request as ready for review November 26, 2024 07:32
@antoinemzs antoinemzs changed the title [backend] Microsoft Sentinel collector not working (#1685) [backend] Microsoft Defender collector not working (#1685) Nov 26, 2024
@antoinemzs antoinemzs changed the title [backend] Microsoft Defender collector not working (#1685) [backend] Microsoft Defender collector not working (#1686) Nov 26, 2024
@antoinemzs antoinemzs merged commit 30946fa into master Nov 26, 2024
7 checks passed
@antoinemzs antoinemzs deleted the issue/1685redux branch November 26, 2024 08:20
@antoinemzs antoinemzs added the filigran team use to identify PR from the Filigran team label Nov 26, 2024
@Dimfacion Dimfacion added this to the Release 1.9.0 milestone Nov 29, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
filigran team use to identify PR from the Filigran team
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants