Skip to content

Releases: AbdulRhmanAlfaifi/Rhaegal

Rhaegal v1.3.1

15 Aug 19:09
b6de222
Compare
Choose a tag to compare
Delete SMBExecDetected.gh

Rhaegal v1.3

06 Jun 19:33
Compare
Choose a tag to compare
RhaegalLib v1.3:

* Change the processing from multiprocessing to multithriding.
* Added String search.
* A new class that represent an alert.
* Change varibales matching to contains insted of equals.
* Added progress logging.
* Change the main funtion for processing logs (process) to iterable
function that return alert object.
* Add search modifier to search the full event for a string or regex
search.
* Update dependencies.

Rhaegal v1.1:
* Added new option to stop logging `--no-log`
* Log time taken by Rhaegal to finish.
* Added new option `-o, --output` to specify the output file.
* Added new option `--log-file` to specify the log file path.
* Added new option `--log-level` to specify the logging level.
* Replace the option `--processes` to `-n,--threads` to specify the
number of threads for Rhaegal to use.
* Update dependencies.

Rhaegal Rules:
* Added rules to detect RDP from public IP
* Added a new rule set for `lateral movements`
* Added rule to detect logs cleared.
* Fix some false positive on some rules.

Rhaegal v1.2.2

20 Feb 08:06
61d6fa7
Compare
Choose a tag to compare
Update rules.gh

Rhaegal v1.2.1

27 Jan 21:34
dcc44e4
Compare
Choose a tag to compare
Add files via upload

Rhaegal v1.0.1

27 Oct 14:14
Compare
Choose a tag to compare
Added the following:

RhaegalLib v1.0.1:
* Added logging
* Better Event log parser
* Better Rhaegal rule validation
Rhaegal v1.0.1:
* Added logging

Rhaegal v1.0

26 Oct 19:24
9d5c41e
Compare
Choose a tag to compare
Update README.md