Skip to content

v2.0.0

Compare
Choose a tag to compare
@ethack ethack released this 15 Feb 01:03
· 201 commits to master since this release
c279d29

Changes:

  • Added bro to path by default (no prompt) (#321)
  • Implement default config values (#329)
  • Move hard-coded connection limit to config file (#311)
  • Added strobes display to command line and html reporting (#320)
  • Update blacklisted analysis (#310)
  • Made blacklist database configurable (#310)
  • Updated analysis, reset, and delete commands (#324)
  • Added NeverInclude to Filtering config section which allows for whitelisting (#328)
  • Enabling NeverInclude values by default (#336)
  • Change Logging directory structure (#339)
  • Create config options for disabling modules (#342)
  • Refuse to run import if InternalSubnets is not configured (#341)
  • InternalSubnets & Upgrading Documentation (#373)
  • Setting local_ Bro values based on InternalSubnets (#350)

Bugfixes:

  • Prevent freqConn collection from being reset (#323)
  • Added total duration field into uconns (#318)
  • Fixed show databases issue (#326)

Config file changes:

  • Added Enabled flags to each section to allow turning analysis modules on or off individually. All are enabled by default.
  • Filtering section added to defaults.
  • Filtering: NeverInclude section added and initialized to safe universal values.
  • Filtering: InternalSubnets section commented out by default. ❗ IMPORTANT ❗ This config section must be filled out before RITA will process new data.

General Notes:
This release includes new aliases and flags to commands to help streamline workflow.

  • reset-analysis -> reset. Added flag -f|--force to bypass prompt.
  • analyze. Added flag -r|--reset to automatically perform reset without prompting followed by analyze.
  • delete-database -> delete. Added -f|--force flag to bypass prompt.