Skip to content

v1.3.0

Compare
Choose a tag to compare
@beatro0t beatro0t released this 01 Sep 12:02
· 133 commits to master since this release

New Features

  • Adds Dockerfile (#29)
  • Adds UI Database options
  • Adds IAM ingestion support for MFA devices
  • Adds MFA support for CLI (#33) - thanks @dmyates!

Bug Fixes

  • Fixes installation failure (#35)
  • Fixes misidentified group relationships
  • Fixes ARN and Resource Type filtering
  • Fixes false positive node casts
  • Fixes Ctrl event bug
  • Fixes fallback Resource image
  • Fixes redundant DescribeInstanceAttribute request
  • Fixes Principal list index out of range error

Improvements

  • Improves CLI aesthetics
  • Adds attack pruning logic: retains the shortest paths only
  • Updates attack edge creation logic: if an admin path exists in a set, don't create the others
  • Adds IngestionManager: decouples IAM ingestor
  • Rewrite base Ingestor: skips disqualified collections in advance
  • Standardizes IAM, S3, EC2, and Lambda classes
  • Improves CLI logging

Other Changes

  • Removes attacks affecting generic resources
  • Adds Profile class (moved from cli.py)
  • Converts Attacks and Neo4j from static to dynamic classes
  • Adds --verbose CLI option to db and attacks
  • Updates regions