Skip to content

Releases: WithSecureLabs/chainsaw

v2.14.0

Choose a tag to compare

@github-actions github-actions released this 14 Feb 12:40
46a238a

This release contains the following changes of note:

  • handle multiple separate sigma rules in a single file (#223)
  • update to use the new version of the evtx library

v2.13.1

Choose a tag to compare

@github-actions github-actions released this 07 Oct 19:39
8462fa2

This release contains the following changes of note:

  • Fixes datetime parsing when hunting/searching MFTs.

v2.13.0

Choose a tag to compare

@github-actions github-actions released this 04 Oct 10:12
ff392fa

This release contains the following changes of note:

  • Replaces dead upstream libraries with downstream replacements
    • Handles the bitrot in notatin
    • Applies bug fix PRs and handles bitrot in mft

v2.13.0-beta.0

v2.13.0-beta.0 Pre-release
Pre-release

Choose a tag to compare

@github-actions github-actions released this 20 Aug 19:19
3981b32

This release contains the following changes of note:

  • Replaces dead upstream libraries with downstream replacements
    • Handles the bitrot in notatin
    • Applies bug fix PRs and handles bitrot in mft

v2.12.0-1

Choose a tag to compare

@github-actions github-actions released this 22 Mar 12:51
d93f368

This release contains the following changes of note:

  • See v2.12.0 this just fixes CI/CD bitrot...

v2.12.0

Choose a tag to compare

@github-actions github-actions released this 22 Mar 12:25
70c3268

This release contains the following changes of note:

v2.11.0

Choose a tag to compare

@FranticTyping FranticTyping released this 28 Dec 18:22

This release contains the following changes of note:

  • Improvements to the MFT parser, allowing data streams to be extracted, decoded and written to disk.
  • Decoded MFT Datastreams can now be queried via the Search command and via the Hunt Command.

Additional information in the related PR: #210

This release addresses #190 #191. Thanks to @IppSec for the suggestion.

v2.10.4

Choose a tag to compare

@FranticTyping FranticTyping released this 24 Dec 14:24
8799abb

Changes in this release:

  • Add --skip-errors helper message when chainsaw bails from a hunt
  • Improve progress logging for hunt command, now displays elapsed time and the current artefact file being processed

v2.10.3

Choose a tag to compare

@github-actions github-actions released this 22 Dec 14:31
d936304

This release contains the following changes of note:

  • Adds -v and -vv to output debug and trace.

v2.10.2

Choose a tag to compare

@FranticTyping FranticTyping released this 22 Dec 10:46
cb86aac

This release contains the following changes of note:

  • New Chainsaw Detection Rules
  • Significant speed improvements when searching across multiple event log files