v2.0.0
Changes:
- Added bro to path by default (no prompt) (#321)
- Implement default config values (#329)
- Move hard-coded connection limit to config file (#311)
- Added strobes display to command line and html reporting (#320)
- Update blacklisted analysis (#310)
- Made blacklist database configurable (#310)
- Updated analysis, reset, and delete commands (#324)
- Added NeverInclude to Filtering config section which allows for whitelisting (#328)
- Enabling NeverInclude values by default (#336)
- Change Logging directory structure (#339)
- Create config options for disabling modules (#342)
- Refuse to run import if InternalSubnets is not configured (#341)
- InternalSubnets & Upgrading Documentation (#373)
- Setting local_ Bro values based on InternalSubnets (#350)
Bugfixes:
- Prevent
freqConn
collection from being reset (#323) - Added total duration field into uconns (#318)
- Fixed show databases issue (#326)
Config file changes:
- Added
Enabled
flags to each section to allow turning analysis modules on or off individually. All are enabled by default. Filtering
section added to defaults.Filtering: NeverInclude
section added and initialized to safe universal values.Filtering: InternalSubnets
section commented out by default. ❗ IMPORTANT ❗ This config section must be filled out before RITA will process new data.
General Notes:
This release includes new aliases and flags to commands to help streamline workflow.
reset-analysis
->reset
. Added flag-f|--force
to bypass prompt.analyze
. Added flag-r|--reset
to automatically performreset
without prompting followed byanalyze
.delete-database
->delete
. Added-f|--force
flag to bypass prompt.