Goose v2.0.1 - Githubissues

cisagov / untitledgoosetool

Untitled Goose Tool is a robust and flexible hunt and incident response tool that adds novel authentication and data gathering methods in order to run a full investigation against a customer’s Azure Active Directory (AzureAD), Azure, and M365 environments.

Creative Commons Zero v1.0 Universal

912 stars 79 forks source link

Goose v2.0.1 #64

Closed clairecasalnova-cisa closed 2 months ago

clairecasalnova-cisa commented 2 months ago

🗣 Description

[2.0.1] - Enter the honk - 2024-07-31

Added

More Documentation

Changed

Changed all entraid to azuread
Removed version and author information from every file

Fixed

Endless pulling issue for sign in logs when endtime wasn't specified

[2.0.0] - Enter the honk - 2024-05-08

Added

autohonk. No more manual authentication
Variables added to the conf to modify ual tasks running as well as optional extra time field

Changed

more efficient ual pulling. Lots of improvements that led to an 800% speed up.
fixed asynchronous issue with azure dumpers
Better Logging for python3.12. Changed the docker image to use that as well

Fixed

Asynchronous issues with azure dumpers
No save state for azure activity log