Commits

Breadcrumbs

History for

onmaster

User selector

All users

Datepicker

All time

Commit History

Commits on Nov 28, 2024

• Added typed parameters to all notebooks (Velocidex#3925)

  Show description for 79219ac
  scudette

  authored
  79219ac

  Copy full SHA for 79219ac

Commits on Nov 23, 2024

• Improved artifact verifier (Velocidex#3914)

  Show description for 9fa908b
  scudette

  authored
  9fa908b

  Copy full SHA for 9fa908b

Commits on Nov 20, 2024

• Initial commit of Sigma Studio Notebook (Velocidex#3904)

  Show description for 3fb9587
  

  3 peopleauthored
  3fb9587

  Copy full SHA for 3fb9587

Commits on Nov 12, 2024

• Bump github.com/golang-jwt/jwt/v4 from 4.4.3 to 4.5.1 (Velocidex#3880)

  dependabot[bot]

  authored
  fc5747e

  Copy full SHA for fc5747e

Commits on Nov 11, 2024

• Include fileb0x version directly in magefile. (Velocidex#3888)

  Show description for 68a1acb
  scudette

  authored
  68a1acb

  Copy full SHA for 68a1acb

Commits on Nov 10, 2024

• Added eBPF networking plugins and events. (Velocidex#3887)

  scudette

  authored
  251f515

  Copy full SHA for 251f515

Commits on Nov 8, 2024

• Added artifacts for eBPF plugin (Velocidex#3884)

  Show description for 67042dc
  scudette

  authored
  67042dc

  Copy full SHA for 67042dc

Commits on Nov 6, 2024

• Initial implementation of ebpf plugin (Velocidex#3882)

  scudette

  authored
  6c45bc6

  Copy full SHA for 6c45bc6

Commits on Nov 2, 2024

• Fixed build (Velocidex#3872)

  scudette

  authored
  eaf4e4e

  Copy full SHA for eaf4e4e

Commits on Oct 25, 2024

• Initial implementation of Sigma correlations (Velocidex#3853)

  scudette

  authored
  65d6af8

  Copy full SHA for 65d6af8

Commits on Oct 17, 2024

• Bugfix: Disable support for FlowStatsRequest in pool client (Velocidex#3840)

  Show description for 2779058
  scudette

  authored
  2779058

  Copy full SHA for 2779058

Commits on Oct 9, 2024

• Bugfixes: Force timeline message to be a string. (Velocidex#3811)

  Show description for 1f9379a
  scudette

  authored
  1f9379a

  Copy full SHA for 1f9379a

Commits on Oct 4, 2024

• Added timeboxing for the Journald parser (Velocidex#3800)

  scudette

  authored
  491f2c3

  Copy full SHA for 491f2c3

Commits on Sep 19, 2024

• Fix flakey tests (Velocidex#3764)

  Show description for f030559
  scudette

  authored
  f030559

  Copy full SHA for f030559

Commits on Sep 10, 2024

• Update Windows.Forensics.Prefetch to support Win11 format. (Velocidex#3744)

  Show description for f7724a6
  scudette

  authored
  f7724a6

  Copy full SHA for f7724a6

Commits on Sep 9, 2024

• Added experimental vmdk support for dead disk forensics. (Velocidex#3738)

  scudette

  authored
  51d258d

  Copy full SHA for 51d258d

Commits on Aug 19, 2024

• Added artifacts to make it easier to post process KapeFiles.Targets (Velocidex#3693)

  Show description for cd69c3e
  scudette

  authored
  cd69c3e

  Copy full SHA for cd69c3e

Commits on Aug 13, 2024

• Track tempfiles in the debug server. (Velocidex#3686)

  scudette

  authored
  8fdafea

  Copy full SHA for 8fdafea

Commits on Aug 12, 2024

• Bugfix: Timestamp comparisons with integers and strings (Velocidex#3677)

  scudette

  authored
  5bd3925

  Copy full SHA for 5bd3925

Commits on Aug 11, 2024

• Cleanup: Remove dead code and clean up a bit (Velocidex#3676)

  scudette

  authored
  d075118

  Copy full SHA for d075118

Commits on Jul 31, 2024

• Added tags to hunts. (Velocidex#3655)

  Show description for 90fa1db
  scudette

  authored
  90fa1db

  Copy full SHA for 90fa1db

Commits on Jul 30, 2024

• Refactored parse_usn() to accept USN file and MFT (Velocidex#3652)

  Show description for 4669dd2
  scudette

  authored
  4669dd2

  Copy full SHA for 4669dd2

Commits on Jul 27, 2024

• Added the yara_lint() VQL function to clean up yara rules (Velocidex#3649)

  Show description for ab9cd3a
  scudette

  authored
  ab9cd3a

  Copy full SHA for ab9cd3a

Commits on Jul 25, 2024

• Bugfix: Retry removing tempfile in scope destructor (Velocidex#3642)

  Show description for d758f28
  scudette

  authored
  d758f28

  Copy full SHA for d758f28

Commits on Jul 22, 2024

• Added parse_journald() and watch_journald() plugins (Velocidex#3634)

  Show description for 950233d
  scudette

  authored
  950233d

  Copy full SHA for 950233d

Commits on Jul 11, 2024

• Added a built in winpmem plugin (Velocidex#3603)

  scudette

  authored
  5cc893a

  Copy full SHA for 5cc893a

Commits on Jul 3, 2024

• Bump github.com/gorilla/schema from 1.1.0 to 1.4.1 (Velocidex#3587)

  dependabot[bot]

  authored
  c0f4116

  Copy full SHA for c0f4116

Commits on Jun 28, 2024

• Bugfix: Update index when processing automated client metadata (Velocidex#3582)

  Show description for 49fefa5
  scudette

  authored
  49fefa5

  Copy full SHA for 49fefa5

Commits on Jun 25, 2024

• Bump github.com/hashicorp/go-retryablehttp from 0.7.2 to 0.7.7 (Velocidex#3580)

  dependabot[bot]

  authored
  77fae5b

  Copy full SHA for 77fae5b

Commits on Jun 24, 2024

• Refact ntfs parser functions so they can accept a raw $MFT file. (Velocidex#3579)

  scudette

  authored
  c9dd7d8

  Copy full SHA for c9dd7d8

Commits on Jun 18, 2024

• Added mscfb (OLE) accessor and Jumplist artifact (Velocidex#3573)

  Show description for d87d9c3
  scudette

  authored
  d87d9c3

  Copy full SHA for d87d9c3

• Bugfix: Handle NULL in stacking (Velocidex#3570)

  Show description for 575cde1
  scudette

  authored
  575cde1

  Copy full SHA for 575cde1

Commits on Jun 8, 2024

• Bugfix: S3 accessor was unable to handle 416 byte range error. (Velocidex#3547)

  scudette

  authored
  858e2e4

  Copy full SHA for 858e2e4

• Added ext4 and raw_ext4 accessors. (Velocidex#3545)

  Show description for 80e329b
  scudette

  authored
  80e329b

  Copy full SHA for 80e329b

Commits on Jun 5, 2024

• Bugfix: Float sorting. (Velocidex#3538)

  scudette

  authored
  7cfad4a

  Copy full SHA for 7cfad4a

Pagination

Previous

Next