mbushkov
commented
10 months ago - devenv fixes and cleanups. Support for background processes added.
- Dummy client action and flow added as a demo.
- EficheckCollectHashes, EficheckDumpImage client actions removed.
- Uninstall client action removed.
- SendFile client action removed.
- Refactoring the Interrogate flow to not rely on Forensic Artifacts "provides" section.
- Removed "checks" functionality.
- Removed a number of artifact parsers (eventual goal is to remove all of them).
- In GRR Fleetspeak Frontend - optimised message processing to handle spikes of messages from the same client.
- Deprecated no-op "keep_client_alive" attribute in ApiCreateClientApprovalArgs.
- Deprecated ListClientActionRequests API call (was no-op after Fleetspeak migration).
- Removed KeepAlive, FingerprintFile, FindFiles, SendFile, Uninstall, UpdateClient, CollectEfiHashes, DumpEfiImage flows.
- Added GetCrowdStrikeAgentID flow.
- Deprecated GetFile flow in favor of MultiGetFile.
- Made FileFinder an alias to ClientFileFinder, using ClientFileFinder by default everywhere. Legacy FileFinder is still available as LegacyFileFinder. Fixed several inconsistencies in ClientFileFinder client action. Same for RegistryFinder.
- Added StatMultipleFiles and HashMultipleFiles flows to be used in UIv2.
- Collecting more detailed stats about flow errors.
- Newly interrogated hunts now pick up active hunts automatically.
- UI work: hunts table, Stat/Hash multiple files flows, hunt graphs.