-
Notifications
You must be signed in to change notification settings - Fork 2
Expand file tree
/
Copy pathToDo.txt
More file actions
181 lines (111 loc) · 6.23 KB
/
Copy pathToDo.txt
File metadata and controls
181 lines (111 loc) · 6.23 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
-------------------------------------------------------------------------------
TODO - ForIocCrawler
-------------------------------------------------------------------------------
Key
DONE - Item is finished
PROG - Item under progress
OPEN - Item not touche
-------------------------------------------------------------------------------
Release v 1.0 Features
DONE Search binary in file or directories for matches.
DONE Block overlapping search
DONE Use configuration files for pattern and whitelists.
DONE Implement whitelisting
DONE Implement Pattern (Multiple Sections and Options)
DONE Multiprocessig based on file count
DONE Logging, debug view and run time output
DONE CSV Export
DONE stdout Export
DONE Implement match highlighting
DONE Implement match count feature
DONE Add file offset to match
DONE Choose columns for export
DONE Export/print only specific pattern
DONE Implement User interrupt.
-------------------------------------------------------------------------------
Release v 1.0 DONE
-------------------------------------------------------------------------------
Release v 1.1 Features
DONE Implement support for personal whitelists
DONE Implement support for personal pattern file
DONE Rename program mode CSV to forensic
DONE Implement max match size
-------------------------------------------------------------------------------
Release v 1.1 DONE
-------------------------------------------------------------------------------
Bug fixes
DONE Fixed a bug which was caused if the source was a
absolute path
DONE Added better debug view. Verbose mode shows now a
status of long running
DONE Changed format of the printing of the runtime
DONE Only show relative path (the crawled data) in result
-------------------------------------------------------------------------------
Release v 1.1.1 DONE
-------------------------------------------------------------------------------
Release v 1.1.2 Features
DONE Add regex for Crypto currencies
DONE Debug Regex Search. Some data will not be found if it is close
to an other hit. For example domains in python dicts or lists.
DONE Add domains to patterns
DONE Make file or folder (-f argument) a standard argument without
adding -f
DONE Add a switch to enable whitelisting. Whitelisting is deactivated
by default.
DONE Add arguments to print the path and the content of the default
whitelist and pattern file.
DONE Improve help messages.
-------------------------------------------------------------------------------
Release v 1.1.2 DONE
-------------------------------------------------------------------------------
Release v 1.2 Features
DONE Refactored command line arguments for a simpler usability.
DONE Fix a output bug which causes a wrong count number of matched iocs
in forensic mode.
DONE Changeable default whitelist and pattern file. Change the default
file via the config menue.
DONE Converted all indentations in the source code into spaces.
DONE Changed the usage for temporary loading of an individual pattern
and whitelist file in the parse subcommand.
DONE Added more options to change the program configuration permantly.
Changing the configurations can be done over the config subcommand.
Added an argument to show the config content to the user.
DONE Current directory "." can be used as path for search
-------------------------------------------------------------------------------
Release v 1.2 DONE
-------------------------------------------------------------------------------
Release v 1.2.1 Features
DONE Changed the name from "ForIocCrawler" to "fic"
DONE Fixed a bug which causes whitelisting fails because of the false
relative path
DONE Added new linux paths for whitelisting
-------------------------------------------------------------------------------
Release v 1.2.1 DONE
-------------------------------------------------------------------------------
Release v 1.2.2
OPEN Resolve an issue where a whole part of a path is whiltelisted.
But the whitelisting path belongs only to a small part of the path.
-------------------------------------------------------------------------------
Release v 1.2.2 OPEN
-------------------------------------------------------------------------------
Release v 1.3 Features
OPEN Optimize multiprocessing based on file size and not on
file count. The processing and splitting of the files
should be done in the readFiles function of the crawler.
OPEN Implement switch for printing offset as hex or decimal
OPEN Implement switch to output/export only unique matches
OPEN Test the crawler on Windows images
-------------------------------------------------------------------------------
Release v 1.3 OPEN
-------------------------------------------------------------------------------
Release v 1.3.1 Features
OPEN Search in compressed file formats like zip, tar.gz etc.
OPEN Search in file formats like pdf word etc.
Test with Security Reports.
OPEN Add more export features like json output
OPEN Implement a whitelist contains feature.
Whitelisting for files or matches which contains a specific
string
-------------------------------------------------------------------------------
Release v 1.3.1 OPEN
-------------------------------------------------------------------------------