Граф коммитов

134 Коммитов

Автор SHA1 Сообщение Дата
Julien Vehent 52318add71 [doc] cheatsheet update 2015-03-20 14:19:59 -04:00
Julien Vehent a4efd70ac0 [doc] new modules, worker and arch diagram 2015-03-17 17:08:03 -04:00
Julien Vehent 315fb85bb9 [doc] css changes 2015-03-14 10:08:37 -04:00
Julien Vehent 2688fabd26 [minor] update mozdef_asset worker to use gozdef 2015-03-13 20:04:57 -04:00
Julien Vehent d20ee3e966 [medium] compliance item worker 2015-03-13 19:44:57 -04:00
Julien Vehent e95510d8de Merge pull request #40 from mozilla/analytic-workers
[major] Implement support for event workers
2015-03-12 12:13:24 -04:00
Julien Vehent ac4ae7c7ff [doc] add example for chaining actions using targets 2015-03-10 23:41:03 -04:00
Julien Vehent dcae2a81d7 [major] Implement support for event workers
This patch implement a new rabbitmq exchange called migevent where
the scheduler publishes any event of interest. Workers can subscribe
to specific events using binding keys (standard rabbitmq topic
exchange). A simple mozdef-asset worker is implemented, and the base
for an agent verification worker is also present but not yet functional.
2015-03-10 17:50:28 -04:00
Julien Vehent 19fb3a5424 [doc] fix a couple nits in cheatsheet 2015-02-23 10:45:59 -05:00
Julien Vehent be544af15a [doc] better description of API endpoints 2015-02-23 10:45:44 -05:00
Julien Vehent 521c4c04ad Merge branch 'master' of github.com:mozilla/mig 2015-02-11 20:26:24 -05:00
Julien Vehent 86101623a4 Merge pull request #33 from gdestuynder/master
[doc] Add example on how to find USB devices
2015-02-11 18:08:16 -05:00
Julien Vehent 3299481761 [doc] file module update 2015-02-11 18:03:34 -05:00
Guillaume Destuynder 923cb915e6 [doc] Add example on how to find USB devices 2015-02-11 15:01:08 -08:00
Julien Vehent 37c0e16961 [doc] fix standalone install script 2015-02-11 17:21:14 -05:00
Julien Vehent 279c4bdec8 [doc] netstat search of all connections to the internet 2015-02-05 10:27:54 -05:00
Julien Vehent 76e3911a11 [doc] updated cheatsheet 2015-01-28 12:58:19 -05:00
Julien Vehent dc6ec6484e [doc] documentation refresh 2015-01-25 18:46:17 -05:00
Guillaume Destuynder f2f4cf8123 [minor] Use a list instead of section headers for clarity
As per request in https://github.com/mozilla/mig/pull/32#issuecomment-69764749
2015-01-14 00:55:40 +01:00
Guillaume Destuynder 1fab782e9a [minor] Add a MIG cheat sheet.
This cheat sheet needs improvements - it's just a start.
The aim of the cheat sheet is to provide single-line commands performing common tasks for different modules, that users
can just copy/paste to run.
2015-01-13 16:17:49 +01:00
Guillaume Destuynder 167858f28d [minor] Allow building "doc" from the toplvl dir
Also allow setting the rst2html program via RST2HTML variable.
2015-01-13 16:12:35 +01:00
Julien Vehent f3d353c9e3 [doc] fix api & scheduler confs in standalone install 2015-01-05 11:49:38 -05:00
Julien Vehent 5ac0f3c8fc [doc] cleanup & reorganize DB creation scripts 2015-01-05 11:49:17 -05:00
Julien Vehent a172596eda [minor/hack] whitelist regexes, take 2 2015-01-04 20:36:44 -05:00
Julien Vehent 4669418d7e [medium] store pending actions in database instead of spool 2015-01-04 14:47:30 -05:00
Julien Vehent beb31d5c1c [doc] configuration details for nofile 2015-01-04 14:47:30 -05:00
Julien Vehent d52e68ca83 [doc] fix wrong pkg name in standalone install 2014-12-21 19:53:01 -05:00
Julien Vehent 8f70ba9fc0 [medium] improve platform status in api and console 2014-12-21 14:43:38 -05:00
Julien Vehent bd6d224822 [medium] add "idle" status to agents that stop sending heartbeats 2014-12-19 12:51:15 -05:00
Julien Vehent 3b4a06d078 [doc] minor fixups 2014-12-18 11:28:20 -05:00
Julien Vehent 8eec22da21 [medium] use agent queueloc instead of hostname in scheduler whitelist 2014-12-17 18:47:14 -05:00
Julien Vehent f52c14454e [doc] html doc for file module 2014-11-30 05:11:53 -05:00
Julien Vehent cf1477f0ec [doc] add integration test at end of standalone install script 2014-11-17 23:52:15 -05:00
Julien Vehent 2acad93c56 [doc] fixed couple nits in standalone install script 2014-11-17 23:41:10 -05:00
Julien Vehent d249d32590 [doc] minor tweaks to standalone install script 2014-11-17 15:18:39 -05:00
Julien Vehent 56369d7968 [doc] various fixes to standalone install script 2014-11-16 23:29:39 -05:00
Julien Vehent cb48ec76a2 [doc] MIG standalone installation script for fun and non-profit 2014-11-16 22:18:04 -05:00
Julien Vehent 4e9732a569 [doc] pgp token generation, python example 2014-11-16 12:40:04 -05:00
Julien Vehent 6b28666a26 [major] refactor agent status handling to enable target expansion pre-launch 2014-11-15 22:31:33 -05:00
Julien Vehent bec9cda192 [minor] add unauthenticated heartbeat endpoint to API 2014-11-15 18:00:40 -05:00
Julien Vehent 400b6d63e7 [medium] add version number 1 to X-PGPAUTHORIZATION api token 2014-11-15 18:00:39 -05:00
Julien Vehent 6791ff3c8e [doc] fix DB creation scripts for investigators sequence 2014-11-06 23:13:41 -05:00
Julien Vehent 671afba33a [major] PGP authentication of API clients, includes client code refactoring
This is a major change to the client code and the API. All API calls now require
a HTTP header called X-PGPAUTHORIZATION that contains a signature from a
known investigator. This work is also the opportunity to split up the API client
part of the MIG console into a new package called mig/client. This will facilitate
code reuse, particularly for standalone command line utilities.
2014-11-06 23:13:15 -05:00
Julien Vehent 1a0c4c7344 [minor] add investigators sequence to DB creation scripts 2014-11-04 07:22:20 -05:00
Julien Vehent bb67d0d7c6 [doc] display html list buttons 2014-11-02 14:53:11 -05:00
Julien Vehent 5a515b9282 [medium] investigator status update in console, api and database (with doc) 2014-11-02 13:25:17 -05:00
Julien Vehent fdb7e5de9a [doc] database doc update 2014-11-02 09:34:46 -05:00
Julien Vehent 75ea1e11fa [minor] fix api search queries 2014-11-01 16:35:03 -04:00
Julien Vehent 5b831a2533 [minor] add creation/modification timestamp to investigator. 2014-11-01 16:34:27 -04:00
Julien Vehent 245e533609 [major] refactor scheduler PGP keyring management
Similar to the work done on the api, instead of managing investigator's keys
with a gpg keyring on disk, pull the keys from the database and manage a
keyring in memory.
The addition here is the management of the scheduler's own investigator
identity, that's used during the upgrade protocol to kill old agents. That private
key is also stored in the database, with permissions that limit the access to the
column to the schedulers themselves.
2014-10-30 19:30:08 -04:00