Julien Vehent
52318add71
[doc] cheatsheet update
2015-03-20 14:19:59 -04:00
Julien Vehent
a4efd70ac0
[doc] new modules, worker and arch diagram
2015-03-17 17:08:03 -04:00
Julien Vehent
315fb85bb9
[doc] css changes
2015-03-14 10:08:37 -04:00
Julien Vehent
2688fabd26
[minor] update mozdef_asset worker to use gozdef
2015-03-13 20:04:57 -04:00
Julien Vehent
d20ee3e966
[medium] compliance item worker
2015-03-13 19:44:57 -04:00
Julien Vehent
e95510d8de
Merge pull request #40 from mozilla/analytic-workers
...
[major] Implement support for event workers
2015-03-12 12:13:24 -04:00
Julien Vehent
ac4ae7c7ff
[doc] add example for chaining actions using targets
2015-03-10 23:41:03 -04:00
Julien Vehent
dcae2a81d7
[major] Implement support for event workers
...
This patch implement a new rabbitmq exchange called migevent where
the scheduler publishes any event of interest. Workers can subscribe
to specific events using binding keys (standard rabbitmq topic
exchange). A simple mozdef-asset worker is implemented, and the base
for an agent verification worker is also present but not yet functional.
2015-03-10 17:50:28 -04:00
Julien Vehent
19fb3a5424
[doc] fix a couple nits in cheatsheet
2015-02-23 10:45:59 -05:00
Julien Vehent
be544af15a
[doc] better description of API endpoints
2015-02-23 10:45:44 -05:00
Julien Vehent
521c4c04ad
Merge branch 'master' of github.com:mozilla/mig
2015-02-11 20:26:24 -05:00
Julien Vehent
86101623a4
Merge pull request #33 from gdestuynder/master
...
[doc] Add example on how to find USB devices
2015-02-11 18:08:16 -05:00
Julien Vehent
3299481761
[doc] file module update
2015-02-11 18:03:34 -05:00
Guillaume Destuynder
923cb915e6
[doc] Add example on how to find USB devices
2015-02-11 15:01:08 -08:00
Julien Vehent
37c0e16961
[doc] fix standalone install script
2015-02-11 17:21:14 -05:00
Julien Vehent
279c4bdec8
[doc] netstat search of all connections to the internet
2015-02-05 10:27:54 -05:00
Julien Vehent
76e3911a11
[doc] updated cheatsheet
2015-01-28 12:58:19 -05:00
Julien Vehent
dc6ec6484e
[doc] documentation refresh
2015-01-25 18:46:17 -05:00
Guillaume Destuynder
f2f4cf8123
[minor] Use a list instead of section headers for clarity
...
As per request in https://github.com/mozilla/mig/pull/32#issuecomment-69764749
2015-01-14 00:55:40 +01:00
Guillaume Destuynder
1fab782e9a
[minor] Add a MIG cheat sheet.
...
This cheat sheet needs improvements - it's just a start.
The aim of the cheat sheet is to provide single-line commands performing common tasks for different modules, that users
can just copy/paste to run.
2015-01-13 16:17:49 +01:00
Guillaume Destuynder
167858f28d
[minor] Allow building "doc" from the toplvl dir
...
Also allow setting the rst2html program via RST2HTML variable.
2015-01-13 16:12:35 +01:00
Julien Vehent
f3d353c9e3
[doc] fix api & scheduler confs in standalone install
2015-01-05 11:49:38 -05:00
Julien Vehent
5ac0f3c8fc
[doc] cleanup & reorganize DB creation scripts
2015-01-05 11:49:17 -05:00
Julien Vehent
a172596eda
[minor/hack] whitelist regexes, take 2
2015-01-04 20:36:44 -05:00
Julien Vehent
4669418d7e
[medium] store pending actions in database instead of spool
2015-01-04 14:47:30 -05:00
Julien Vehent
beb31d5c1c
[doc] configuration details for nofile
2015-01-04 14:47:30 -05:00
Julien Vehent
d52e68ca83
[doc] fix wrong pkg name in standalone install
2014-12-21 19:53:01 -05:00
Julien Vehent
8f70ba9fc0
[medium] improve platform status in api and console
2014-12-21 14:43:38 -05:00
Julien Vehent
bd6d224822
[medium] add "idle" status to agents that stop sending heartbeats
2014-12-19 12:51:15 -05:00
Julien Vehent
3b4a06d078
[doc] minor fixups
2014-12-18 11:28:20 -05:00
Julien Vehent
8eec22da21
[medium] use agent queueloc instead of hostname in scheduler whitelist
2014-12-17 18:47:14 -05:00
Julien Vehent
f52c14454e
[doc] html doc for file module
2014-11-30 05:11:53 -05:00
Julien Vehent
cf1477f0ec
[doc] add integration test at end of standalone install script
2014-11-17 23:52:15 -05:00
Julien Vehent
2acad93c56
[doc] fixed couple nits in standalone install script
2014-11-17 23:41:10 -05:00
Julien Vehent
d249d32590
[doc] minor tweaks to standalone install script
2014-11-17 15:18:39 -05:00
Julien Vehent
56369d7968
[doc] various fixes to standalone install script
2014-11-16 23:29:39 -05:00
Julien Vehent
cb48ec76a2
[doc] MIG standalone installation script for fun and non-profit
2014-11-16 22:18:04 -05:00
Julien Vehent
4e9732a569
[doc] pgp token generation, python example
2014-11-16 12:40:04 -05:00
Julien Vehent
6b28666a26
[major] refactor agent status handling to enable target expansion pre-launch
2014-11-15 22:31:33 -05:00
Julien Vehent
bec9cda192
[minor] add unauthenticated heartbeat endpoint to API
2014-11-15 18:00:40 -05:00
Julien Vehent
400b6d63e7
[medium] add version number 1 to X-PGPAUTHORIZATION api token
2014-11-15 18:00:39 -05:00
Julien Vehent
6791ff3c8e
[doc] fix DB creation scripts for investigators sequence
2014-11-06 23:13:41 -05:00
Julien Vehent
671afba33a
[major] PGP authentication of API clients, includes client code refactoring
...
This is a major change to the client code and the API. All API calls now require
a HTTP header called X-PGPAUTHORIZATION that contains a signature from a
known investigator. This work is also the opportunity to split up the API client
part of the MIG console into a new package called mig/client. This will facilitate
code reuse, particularly for standalone command line utilities.
2014-11-06 23:13:15 -05:00
Julien Vehent
1a0c4c7344
[minor] add investigators sequence to DB creation scripts
2014-11-04 07:22:20 -05:00
Julien Vehent
bb67d0d7c6
[doc] display html list buttons
2014-11-02 14:53:11 -05:00
Julien Vehent
5a515b9282
[medium] investigator status update in console, api and database (with doc)
2014-11-02 13:25:17 -05:00
Julien Vehent
fdb7e5de9a
[doc] database doc update
2014-11-02 09:34:46 -05:00
Julien Vehent
75ea1e11fa
[minor] fix api search queries
2014-11-01 16:35:03 -04:00
Julien Vehent
5b831a2533
[minor] add creation/modification timestamp to investigator.
2014-11-01 16:34:27 -04:00
Julien Vehent
245e533609
[major] refactor scheduler PGP keyring management
...
Similar to the work done on the api, instead of managing investigator's keys
with a gpg keyring on disk, pull the keys from the database and manage a
keyring in memory.
The addition here is the management of the scheduler's own investigator
identity, that's used during the upgrade protocol to kill old agents. That private
key is also stored in the database, with permissions that limit the access to the
column to the schedulers themselves.
2014-10-30 19:30:08 -04:00