|
|
|
@128
|
[128]
|
12/19/06 15:36:25 |
kindlund |
Added additional registry key to exclude. |
|
|
|
@127
|
[127]
|
12/18/06 15:00:11 |
kindlund |
Updated filesystem exclude list. |
|
|
|
@126
|
[126]
|
12/18/06 14:30:13 |
kindlund |
Tweaked registry exclude list. |
|
|
|
@125
|
[125]
|
12/18/06 14:02:31 |
kindlund |
Added additional registry keys to ignore. |
|
|
|
@123
|
[123]
|
12/17/06 15:39:43 |
kindlund |
Completed alpha version of bug fix. Still have to test it out on our test … |
|
|
|
@122
|
[122]
|
12/17/06 04:51:02 |
kindlund |
Added registry directory key exclusion support. Created test script to … |
|
|
|
@119
|
[119]
|
12/17/06 02:35:40 |
kindlund |
Completed basic capabilities of the Registry object; still have to add … |
|
|
|
@118
|
[118]
|
12/16/06 23:43:37 |
kindlund |
Completed draft version of code; everything appears to work… still need … |
|
|
|
@117
|
[117]
|
12/16/06 22:31:00 |
kindlund |
Minor edits. |
|
|
|
@116
|
[116]
|
12/16/06 22:25:09 |
kindlund |
Still finishing up registry parser; ran into issues where the registry … |
|
|
|
@113
|
[113]
|
12/14/06 11:47:47 |
kindlund |
Discovered that 'use English;' also kills regular expression performance. … |
|
|
|
@112
|
[112]
|
12/14/06 03:48:53 |
kindlund |
Identified slowdown culprit: XML::XPath using $` (which is bad). … |
|
|
|
@111
|
[111]
|
12/13/06 17:29:05 |
kindlund |
Now, _compare() returns what we want; hive enumeration not yet complete… |
|
|
|
@110
|
[110]
|
12/13/06 17:19:41 |
kindlund |
Massive housekeeping; _compare() doesn't quite return what we yet…yet. |
|
|
|
@109
|
[109]
|
12/13/06 17:16:04 |
kindlund |
Finally got the core _compare() functionality to work. |
|
|
|
@108
|
[108]
|
12/13/06 16:27:47 |
kindlund |
Making progress on the registry comparison function. |
|
|
|
@107
|
[107]
|
12/13/06 14:56:34 |
kindlund |
About to split check() into smaller functional blocks. |
|
|
|
@105
|
[105]
|
12/11/06 23:27:43 |
kindlund |
Updated parsing logic. Ran into issue where including the Util::Config … |
|
|
|
@99
|
[99]
|
12/11/06 06:23:07 |
kindlund |
Still debugging registry/parser interactions. |
|
|
|
@98
|
[98]
|
12/11/06 02:17:56 |
kindlund |
Slight tweak. |
|
|
|
@97
|
[97]
|
12/11/06 02:16:26 |
kindlund |
Housekeeping. |
|
|
|
@96
|
[96]
|
12/11/06 02:11:44 |
kindlund |
Completed registry parser documentation and unit tests; corrected minor … |
|
|
|
@95
|
[95]
|
12/10/06 19:26:03 |
kindlund |
Updated parsing logic; added documentation templates and unit test … |
|
|
|
@94
|
[94]
|
12/08/06 17:37:55 |
kindlund |
Updated parser logic. |
|
|
|
@92
|
[92]
|
12/08/06 11:12:46 |
kindlund |
Moved parser to new location; will update code. |
|
|
|
@91
|
[91]
|
12/08/06 11:12:03 |
kindlund |
Updated parser logic; preparing to move. |
|
|
|
@85
|
[85]
|
12/08/06 04:32:16 |
kindlund |
Additional debugging enabled; fixed slight registry parsing issue (one … |
|
|
|
@84
|
[84]
|
12/08/06 04:20:24 |
kindlund |
Added initial draft of next-gen registry parsing code. |
|
|
|
@73
|
[73]
|
12/03/06 05:14:35 |
kindlund |
Updated POD documentation. |
|
|
|
@72
|
[72]
|
12/03/06 04:02:20 |
kindlund |
Cleaned up POD documentation. |
|
|
|
@71
|
[71]
|
12/03/06 03:13:17 |
kindlund |
Updated headers. |
|
|
|
@70
|
[70]
|
12/03/06 03:06:52 |
kindlund |
Updated SVN properties, to support CVS ID tags. |
|
|
|
@59
|
[59]
|
11/30/06 15:01:25 |
xkovah |
changed Integrity.pm to allow reading registry exclusion regexes from … |
|
|
|
@57
|
[57]
|
11/30/06 04:21:23 |
kindlund |
debugging |
|
|
|
@56
|
[56]
|
11/30/06 03:54:15 |
kindlund |
debugging |
|
|
|
@55
|
[55]
|
11/30/06 03:28:30 |
kindlund |
debugging |
|
|
|
@54
|
[54]
|
11/30/06 03:08:55 |
kindlund |
debugging |
|
|
|
@53
|
[53]
|
11/30/06 03:04:02 |
kindlund |
more debugging |
|
|
|
@52
|
[52]
|
11/30/06 02:39:43 |
kindlund |
debugging |
|
|
|
@50
|
[50]
|
11/30/06 01:27:41 |
kindlund |
testing patch to integrity cod |
|
|
|
@38
|
[38]
|
11/29/06 05:28:05 |
kindlund |
experimental support to move integrity baselining into the Agent::init() … |
|
|
|
@37
|
[37]
|
11/29/06 04:58:24 |
kindlund |
slight logging cleanup |
|
|
|
@36
|
[36]
|
11/29/06 04:44:25 |
kindlund |
updating integrity check code |
|
|
|
@35
|
[35]
|
11/29/06 03:59:43 |
kindlund |
updated initAll() to include current documented hack |
|
|
|
@34
|
[34]
|
11/29/06 03:58:20 |
kindlund |
updated initRegistry function to touch any added files, so that … |
|
|
|
@33
|
[33]
|
11/29/06 03:15:10 |
kindlund |
debugging integrity code |
|
|
|
@32
|
[32]
|
11/29/06 02:39:24 |
kindlund |
ignore all changes made to the default cygwin home directory, for now |
|
|
|
@31
|
[31]
|
11/28/06 19:34:03 |
kindlund |
windows explorer is annoying, too |
|
|
|
@30
|
[30]
|
11/28/06 18:57:11 |
kindlund |
windows update is annoying |
|
|
|
@29
|
[29]
|
11/28/06 18:33:37 |
kindlund |
ignoring windows update registry changes |
|
|
|
@28
|
[28]
|
11/28/06 18:16:05 |
kindlund |
resolved conflict |
|
|
|
@27
|
[27]
|
11/28/06 18:10:34 |
kindlund |
reducing false positives in integrity check |
|
|
|
@26
|
[26]
|
11/28/06 17:32:26 |
kindlund |
ignoring windows update changes to registry |
|
|
|
@25
|
[25]
|
11/28/06 17:06:41 |
kindlund |
reducing false positives - windows update |
|
|
|
@24
|
[24]
|
11/28/06 16:48:57 |
kindlund |
Updated registry exclude list, to ignore Windows Update keys. |
|
|
|
@23
|
[23]
|
11/28/06 16:29:37 |
kindlund |
Updated registry exclude list to reduce false positives. |
|
|
|
@21
|
[21]
|
11/28/06 15:47:59 |
kindlund |
Reducing false positives within integrity checking code. |
|
|
|
@18
|
[18]
|
11/27/06 15:34:56 |
kindlund |
sc: creating branch branches/bug/42 |
|
copied from honeyclient/branches/rel/0.9/lib:
|
|
|
|
@14
|
[14]
|
11/16/06 17:31:07 |
kindlund |
sc: creating branch branches/rel/0.9 |