First Release
- Support for NHN Cloud Security Monitoring event retrieval command and logger.
- Support for NHN Cloud Security Monitoring ticket retrieval command.
First Release
- Provides command and logger to retrieve NHN Cloud CloudTrail logs.
First Release
- Sends messages using Kakao Business AlimTalk API.
- Supports three extended commands for AlimTalk message delivery.
First Release
- Supports MonitorApp AISVA(Application Insight SSL/TLS Visibility Appliance) log schemas, logger model, and dashboard
- Suppported log types
- SESSION
- SYSTEM
- TRAFFIC
- NET_TRAFFIC
- AUDIT
Implemented report commands using Action Center API.
New Commands
- securitytrails-admin-pages-report: Fetch identified admin pages from SecurityTrails service.
- securitytrails-all-apex-report: Fetch all apex domain list from SecurityTrails service.
- securitytrails-all-hostname-report: Fetch all hostname list from SecurityTrails service.
- securitytrails-all-ip-report: Fetch all IP address list from SecurityTrails service.
- securitytrails-deployment-hardening-report: Fetch deployment hardening report from SecurityTrails service.
- securitytrails-dns-records-report: Fetch DNS records report from SecurityTrails service.
- securitytrails-domain-management-report: Fetch domain management report from SecurityTrails service.
- securitytrails-expired-ssl-report: Fetch expired SSL report from SecurityTrails service.
- securitytrails-expiring-ssl-report: Fetch expiring SSL report from SecurityTrails service.
- securitytrails-exposures-host-report: Fetch exposures host report from SecurityTrails service.
- securitytrails-exposures-issue-report: Fetch exposures issue report from SecurityTrails service.
- securitytrails-harvested-information-report: Fetch harvested information report from SecurityTrails service.
- securitytrails-ports-host-report: Fetch open ports per host from SecurityTrails service.
- securitytrails-ports-ip-report: Fetch open ports per IP from SecurityTrails service.
- securitytrails-product-inventory-report: Fetch product inventory report from SecurityTrails service.
- securitytrails-remote-access-report: Fetch remote access service list from SecurityTrails service.
- securitytrails-vulnerable-products-report: Fetch vulnerable products report from SecurityTrails service.
- securitytrails-websec-config-report: Fetch web security configuration report from SecurityTrails service.
Changed Commands
- securitytrails-usage: Added 401 authentication error guard.
- securitytrails-asi-certificates: Eliminated N+1 API calls
- securitytrails-asi-dns-records: Eliminated N+1 API calls
- securitytrails-asi-tcp-ports: Eliminated N+1 API calls
- securitytrails-asi-whois-records: Eliminated N+1 API calls
- securitytrails-asi-exposures: Eliminated N+1 API calls
Changelog
- Added support for V3_MALWARE logs
- Added schema for unknown, HIPS_FW logs
First release
Changelog
- Added log_type field
- Improved WEBFRONT Audit log parsing
Add parser support and log schema for 6 new log types:
- Group VPN Tunnel Statistics
- IPsec Events
- IPsec Per-Line Statistics
- IPsec Tunnel Statistics
- IPsec Tunnel Status
- IPsec Per-Tunnel Statistics
First release
First release
Added Web Search functionality and connection profile options.
- Added a web-search option to the chatgpt-ask and chatgpt-ask-batch commands
- Fixed an error where the `chatgpt-audit-logs` extension command profile could not be specified
- Added support for configuring allowed web search domains in connection profiles (up to 100 domains)
- Added support for selecting the GPT-5.4 model in connection profiles
Feature Improvements
- Added blocking integration functionality
- Added support for AhnLab TrusGuard API access profiles
- Added the `trusguard-blacklist-rules` command to query blacklist rules
- Added the `trusguard-add-blacklist-rule` command to add blacklist rules
- Added the `trusguard-update-blacklist-rule` command to modify blacklist rules
- Added `trusguard-remove-blacklist-rule` command to delete blacklist rules
- Added `trusguard-blacklist-files` command to list blacklisted files
- Added `trusguard-remove-blacklist-file` command to delete blacklisted files
- Added `trusguard-ipv4-addresses` command to list IPv4 address objects
- Added `trusguard-add-ipv4-address` command to add an IPv4 address object
- Added `trusguard-update-ipv4-address` command to update an IPv4 address object
- Added `trusguard-remove-ipv4-address` command to delete an IPv4 address object
- Added `trusguard-ipv4-address-groups` command to query IPv4 address groups
- Added `trusguard-add-ipv4-address-group` command to add IPv4 address groups
- Added `trusguard-update-ipv4-address-group` command to update IPv4 address groups
- Added `trusguard-remove-ipv4-address-group` command to delete an IPv4 address group
- Added `trusguard-policies` command to list policies
- Added `trusguard-commit` command to commit configuration changes
First release
- Support for Akamai Guardicore collection models, parsers, and 5 types of log schemas
Changelog
- Supports v2.0.11 firmware
- Added support for following log types
- 3013 Interface(Ethernet)
- 3014 Interface(Bridge)
- 3241 Global Protocol Anomaly Rule Block
- 3251 Region Based Filter Block
- 3300, 3310, 3320, 3330, 3340, 3350, 3360, 3370, 3380, 3390, 3400, 3410, 3420, 3430, 3440, 3450, 3460, 3470 Filter Stats
- 3461 Anti-Spoofing(NXDomain) Filter Block
- 3462 Anti-Spoofing(NXDomain) Filter Allow
- 3471 Anti-Spoofing(UDP) Filter Block
- 3472 Anti-Spoofing(UDP) Filter Allow
- 3500 NMS Audit
- 3501 NMS Performance
- Added log schema
- dpx-alert
- dpx-filter-stats
- dpx-iface-bridge
- dpx-iface-ethernet
- dpx-system-perf
- Added **Unknown stream** to logger model
- Added **Filter Stats** dashboard
Migrated Attack Surface Intelligence features to SecurityTrails app.
Added SecurityTrails Attack Surface Intelligence integration
Changelog
- Added Exosphere Web Control Logger
- Added exosp-webcontrol-logs command
First release
- Event logger and dashboard
Remove unnecessary rule object, 'tip test'.