root/honeyclient


Mode:

Legend:

Added
Modified
Copied or renamed
Rev Chgset Date Author Log Message
(edit) @1582 [1582] 05/14/08 14:58:08 kindlund Added work_unit_limit logic; where cloned VMs will get recycled after …
(edit) @1581 [1581] 05/12/08 16:24:37 kindlund Reverted to defaults.
(edit) @1580 [1580] 05/12/08 16:24:06 kindlund Added startup_worker_delay.
(edit) @1579 [1579] 05/12/08 16:23:35 kindlund Housekeeping.
(edit) @1578 [1578] 05/12/08 15:47:21 kindlund Updated exclusion list (re: 84e19947e56c3c6713206bed03).
(edit) @1577 [1577] 05/12/08 15:13:29 kindlund Disabled multi-threaded snapshotting, since performing this as a subthread …
(edit) @1576 [1576] 05/12/08 15:12:26 kindlund Initial fix, to deal with spinning up too many clone VMs simultaneously… …
(edit) @1559 [1559] 04/25/08 11:17:11 kindlund Housekeeping.
(edit) @1558 [1558] 04/24/08 17:14:36 kindlund Updated Manager to support DB retrieval of URLs for multiple, simultaneous …
(edit) @1554 [1554] 04/22/08 13:20:44 kindlund Updated unit tests and log messages.
(edit) @1547 [1547] 04/22/08 02:22:00 kindlund Added initial support for managing simultaneous honeyclient VMs on a …
(edit) @1544 [1544] 04/22/08 02:10:19 kindlund 'sva: creating tag tags/rel/1.1.0'
(edit) @1543 [1543] 04/22/08 02:10:06 kindlund 'sva: creating branch branches/rel/1.1'
(edit) @1541 [1541] 04/19/08 15:48:53 kindlund Disabled prerouting logging functionality on FW, since it was yielding …
(edit) @1540 [1540] 04/17/08 22:48:41 kindlund IE7 visiting multimedia website (sound) - (308d8ba0ccf89389210ae652f9).
(edit) @1539 [1539] 04/17/08 18:39:00 kindlund IE7 exclusion list update (ee3b1ef22860c7a9c64956d080).
(edit) @1538 [1538] 04/17/08 17:26:50 kindlund Updated Master VM to support IE7 with default policy, active scripting …
(edit) @1537 [1537] 04/17/08 16:52:57 kindlund Updated IE7 false positive (cfb601205432618e08a2857cfd).
(edit) @1536 [1536] 04/17/08 11:27:44 kindlund IE7 benign activity - (392c0d3fa27bb6b46f5bba6804).
(edit) @1535 [1535] 04/17/08 11:17:05 kindlund Capture only works with EXL entries that have dots (.) escaped properly.
(edit) @1534 [1534] 04/17/08 11:14:29 kindlund IE7 Exclusion Entry - (e395e843a5dad632d004be63ca)
(edit) @1532 [1532] 04/16/08 19:45:38 kindlund Added Database recovery logic, in case the Ruby Drone web service …
(edit) @1531 [1531] 04/16/08 19:44:52 kindlund Updated utility script.
(edit) @1530 [1530] 04/16/08 17:17:31 kindlund Updated utility functions.
(edit) @1528 [1528] 04/16/08 17:14:15 kindlund Added utility code.
(edit) @1527 [1527] 04/16/08 15:22:54 kindlund Benign flash activity (IE7) - 2f174eecc05393f1a8a89075cb
(edit) @1526 [1526] 04/16/08 15:20:29 kindlund Updated false positive (0b52f9a0ad4992fdb2abe5afa1).
(edit) @1525 [1525] 04/16/08 15:16:52 kindlund False positive - (29fffdfc3dcc7eb6cdfa65609c).
(edit) @1524 [1524] 04/16/08 14:41:12 kindlund Capture doesn't like extra spaces at the end of each EXL directive.
(edit) @1523 [1523] 04/16/08 14:17:42 kindlund Bumped AM version.
(edit) @1522 [1522] 04/16/08 14:17:28 kindlund Exclusion list updates - IE7 accessing live.com which calls CardSpace …
(edit) @1520 [1520] 04/16/08 13:34:40 kindlund Updated exclusion list to reflect Windows Side-by-Side benign activity. …
(edit) @1518 [1518] 04/15/08 08:17:13 kindlund Encountered rare error, where retry rate would hit 5, yet the 5th …
(edit) @1517 [1517] 04/14/08 08:44:32 xkovah Replaced changes which got removed in r 1511
(edit) @1516 [1516] 04/11/08 11:42:39 xkovah a couple more misc ctfmon.exe entries
(edit) @1515 [1515] 04/11/08 11:18:31 xkovah interesting thing with the language bar getting turned on after I did …
(edit) @1514 [1514] 04/11/08 09:37:26 xkovah a new internationalization reg change found on the default IE7
(edit) @1513 [1513] 04/11/08 09:09:51 xkovah another false positive from IE7 running
(edit) @1512 [1512] 04/10/08 10:58:01 xkovah + SetValueKey C:\\WINDOWS\\explorer\.exe …
(edit) @1511 [1511] 04/10/08 10:47:45 xkovah Added to the file: #XENO: I recommend commenting out all blacklist entries …
(edit) @1510 [1510] 04/09/08 22:01:40 kindlund False positive (d006934159767a7fc28160d5d1).
(edit) @1509 [1509] 04/09/08 20:20:15 kindlund False positives (326851bdd43e32b5554e99a52e).
(edit) @1508 [1508] 04/09/08 20:12:22 kindlund Updated IE7 white list (1d380b911f63801355d90ff5da).
(edit) @1507 [1507] 04/09/08 18:26:14 kindlund Updated to support source_type and source_name.
(edit) @1499 [1499] 04/09/08 15:47:11 kindlund Merging simpler_agent branch into trunk.
(edit) @1498 [1498] 04/09/08 15:40:43 kindlund 'sva: creating tag tags/exp/DOWN1-kindlund-simpler_agent'
(edit) @1497 [1497] 04/09/08 15:39:22 kindlund Updated documentation and unit tests.
(edit) @1496 [1496] 04/09/08 15:39:08 xkovah Added Pod::Usage (aka Pod::Parser)
(edit) @1495 [1495] 04/09/08 15:26:50 kindlund Verified unit tests now work perfectly with these changes.
(edit) @1494 [1494] 04/09/08 15:09:18 kindlund Switching back to production Drone webservice.
(edit) @1493 [1493] 04/09/08 14:51:06 kindlund sva: merging branch using tags …
(edit) @1492 [1492] 04/09/08 14:49:42 kindlund 'sva: creating tag tags/exp/UP1-kindlund-simpler_agent'
(edit) @1491 [1491] 04/09/08 14:36:49 kindlund Migrated disk checking into Clone object; switched all SOAP ports to IANA …
(edit) @1490 [1490] 04/08/08 23:21:56 kindlund Finished initial round of integration with Manager. Still have to fix …
(edit) @1489 [1489] 04/08/08 15:19:42 kindlund Oops.
(edit) @1488 [1488] 04/08/08 15:14:41 kindlund Performing unit testing on Clone.
(edit) @1487 [1487] 04/08/08 15:12:53 kindlund Tweaks.
(edit) @1486 [1486] 04/08/08 14:48:13 kindlund Got most of the FW handling code working properly, also added error …
(edit) @1472 [1472] 04/08/08 10:43:11 kindlund Still working on FW integration within Clone.
(edit) @1471 [1471] 04/08/08 10:29:49 xkovah as I thought might happen, the checksums file for the Bundle::CPAN stuff …
(edit) @1470 [1470] 04/08/08 10:26:47 xkovah missing local copy of Compress::BZip2 for some reason
(edit) @1469 [1469] 04/08/08 10:05:22 kindlund Updated to account for IE7 activity.
(edit) @1468 [1468] 04/08/08 09:01:43 xkovah Changed Agent bundle to add Win32::Exe and also adding the CPAN::Checksums …
(edit) @1467 [1467] 04/07/08 23:22:17 kindlund Additional Windows Update cleanup.
(edit) @1466 [1466] 04/07/08 22:21:30 kindlund IE7 false positive (windows update cleanup).
(edit) @1465 [1465] 04/07/08 13:32:19 xkovah Updated the bundle names to reflect the last tag/rel version, 1.0.2. They …
(edit) @1464 [1464] 04/07/08 08:57:17 xkovah As Matt mentioned, we need to state where the modified capture source can …
(edit) @1463 [1463] 04/04/08 22:49:58 kindlund Almost finished.
(edit) @1462 [1462] 04/04/08 22:38:19 kindlund Updated exclusion list to account for writes to the …
(edit) @1461 [1461] 04/04/08 22:21:25 kindlund Still working on finalizing new-Agent support inside Clone.
(edit) @1460 [1460] 04/04/08 17:15:49 kindlund Still working on the integration.
(edit) @1453 [1453] 04/04/08 13:24:42 kindlund Still updating support for light-weight Agent.
(edit) @1452 [1452] 04/03/08 17:20:18 kindlund Testing initial DB interactions.
(edit) @1451 [1451] 04/03/08 17:08:26 kindlund Oops.
(edit) @1450 [1450] 04/03/08 17:07:10 kindlund Starting integration of new Agent code inside Manager code.
(edit) @1449 [1449] 04/03/08 16:17:42 kindlund Improved cleanup code.
(edit) @1448 [1448] 04/03/08 16:12:57 kindlund Migrated unused Agent settings to future Crawler section.
(edit) @1447 [1447] 04/03/08 15:49:37 kindlund Oops.
(edit) @1446 [1446] 04/03/08 15:48:27 kindlund Experimental.
(edit) @1445 [1445] 04/03/08 15:35:41 kindlund Updated bootstraper.
(edit) @1444 [1444] 04/03/08 15:34:52 kindlund Removed excessive watchdog code.
(edit) @1443 [1443] 04/03/08 15:22:02 kindlund Finalized light-weight Agent design. Additional Housekeeping.
(edit) @1436 [1436] 04/03/08 00:32:10 kindlund Working on integrating Win32::Exe into Agent.
(edit) @1435 [1435] 04/02/08 22:52:27 kindlund Minor documentation tweak.
(edit) @1434 [1434] 04/02/08 22:47:32 kindlund Added proper documentation and argument/parameter encoding.
(edit) @1433 [1433] 04/02/08 22:28:51 kindlund Housekeeping.
(edit) @1432 [1432] 04/02/08 22:27:43 kindlund Removed unused code (for now); will migrate this code to the Manager …
(edit) @1431 [1431] 04/02/08 22:26:01 kindlund Updated Agent unit tests.
(edit) @1430 [1430] 04/02/08 22:00:03 kindlund Updated unit tests.
(edit) @1429 [1429] 04/02/08 21:39:37 kindlund Updated unit tests.
(edit) @1428 [1428] 04/02/08 21:09:16 kindlund Updated unit tests to work in non cygwin environments.
(edit) @1427 [1427] 04/02/08 21:02:38 kindlund Updated unit tests.
(edit) @1426 [1426] 04/02/08 20:35:55 kindlund Updated Agent unit tests.
(edit) @1425 [1425] 04/02/08 17:18:13 kindlund Updated initial unit tests for Agent.
(edit) @1424 [1424] 04/02/08 16:54:12 kindlund Housekeeping.
(edit) @1423 [1423] 04/02/08 16:45:16 kindlund Finished migration.
(edit) @1422 [1422] 04/02/08 16:44:58 kindlund Need to remove old Agent to perform unit tests.
(edit) @1421 [1421] 04/02/08 16:42:12 kindlund Housekeeping.
(edit) @1420 [1420] 04/02/08 16:36:25 kindlund Incremental updates.
(edit) @1419 [1419] 04/02/08 16:01:48 kindlund Updated copyright.
Note: See TracRevisionLog for help on using the revision log.