Releases: AbdulRhmanAlfaifi/Rhaegal
Releases · AbdulRhmanAlfaifi/Rhaegal
Rhaegal v1.3.1
Delete SMBExecDetected.gh
Rhaegal v1.3
RhaegalLib v1.3: * Change the processing from multiprocessing to multithriding. * Added String search. * A new class that represent an alert. * Change varibales matching to contains insted of equals. * Added progress logging. * Change the main funtion for processing logs (process) to iterable function that return alert object. * Add search modifier to search the full event for a string or regex search. * Update dependencies. Rhaegal v1.1: * Added new option to stop logging `--no-log` * Log time taken by Rhaegal to finish. * Added new option `-o, --output` to specify the output file. * Added new option `--log-file` to specify the log file path. * Added new option `--log-level` to specify the logging level. * Replace the option `--processes` to `-n,--threads` to specify the number of threads for Rhaegal to use. * Update dependencies. Rhaegal Rules: * Added rules to detect RDP from public IP * Added a new rule set for `lateral movements` * Added rule to detect logs cleared. * Fix some false positive on some rules.
Rhaegal v1.2.2
Update rules.gh
Rhaegal v1.2.1
Add files via upload
Rhaegal v1.0.1
Added the following: RhaegalLib v1.0.1: * Added logging * Better Event log parser * Better Rhaegal rule validation Rhaegal v1.0.1: * Added logging
Rhaegal v1.0
Update README.md