AttackSurfaceAnalyzer
AttackSurfaceAnalyzer copied to clipboard
microsoft
Attack Surface Analyzer can help you analyze your operating system's security configuration for changes during software installation.
Experiment with EF Core for access instead of SQlite directly: https://docs.microsoft.com/en-us/ef/core/
Monitor Network Traffic. See https://github.com/chmorgan/sharppcap On Windows this requires the user to install npcap separately.
**Describe the bug** Bootstrap is included in `Cli\wwwroot\js`. We're using version 4.3.1, which is a bit old and has some non-inclusive language (`whitelist`), which was changed in version 5.1. Let's...
See #649. The current Linux collector parsed ss with regex but the formatting can be unreliable.
…ename" Fix #642 This is a semver change so it will be 2.4. Also should include the fix for the .net tool gui, clean up the interface returns in attacksurfaceanalyzerclient...
Hi, I don't know if it's the same for [ASA 2.2](https://github.com/microsoft/AttackSurfaceAnalyzer/wiki/Authoring-Analysis-Rules#verifying-your-rules-1) but the parameter "--analysesfile" doesn't work in ASA 2.3 anymore. It's listed in the wiki at [verifying custom rules](https://github.com/microsoft/AttackSurfaceAnalyzer/wiki/Authoring-Analysis-Rules#verifying-your-rules)...
**Is your feature request related Recently fixed a non threadsafe collections bug and would be good to have tests to ensure single threaded and parallel compares of very large data...
**Is your feature request related to a problem? Please describe.** Currently ASA builds from release branches but main has stagnated and hasn't been updated with the latest. Now that we...
None of the static web assets are available in the packed version. I tried both with a "dotnet pack" version of the code in release/v2.3 as well as the latest...
**Describe the bug** Running ASA on windows2012 R2 but for various collects getting " Collector is not supported for this platform" **To Reproduce** Steps to reproduce the behavior: 1. Go...
