Nedim Šabić²

Results 42 issues of Nedim Šabić²

The command should launch the default editor and open the fibratus `.yml` configuration file.

needs: docs
scope: cli

This transformer should be in charge of encoding the event params by using the specific data encoding algorithm. Users should be able to choose between `hex`, `base64`, and maybe `asn1`...

needs: docs
needs: config
scope: transformers

### Description Fibratus already knows how to parse the [PE](https://www.fibratus.io/#/pe/introduction) data and extract valuable insights from it. I've been peeking at [pe-sieve](https://github.com/hasherezade/pe-sieve), and I have a feeling it would be...

needs: docs
needs: config
scope: pe

These functions would cooperate with the [Yara](https://www.fibratus.io/#/yara/scanning) scanner to trigger rule execution within the filament. The functions should return which rules and strings were matched along with other useful information....

scope: filaments
needs: docs
scope: yara

The `encrypt` transformer should encrypt event parameters with a specified crypto algorithm (e.g. AES). The original parameter value should get replaced with its respective hash string. Example config: ``` transformers:...

needs: docs
needs: config
scope: transformers

The mask transformer should take care of masking sensitive data living in event parameters. Example config: ``` transformers: mask: char: * enabled: true kparams: - sip - dip ```

needs: docs
needs: config
scope: transformers

`fibratus logs` command should provide a user-friendly interface for grepping/exploring Fibratus log files that reside in the`%PROGRAMFILES%\Fibratus\Logs` directory. The command would have various options: `-f` for tailing the log file...

needs: docs
scope: cli

[MongoDB](https://www.mongodb.com) output would be responsible for storing the events in the Mongo collections. We should consider introducing the `BSON` serializer if the native Mongo client `BSON` encoder doesn't satisfy the...

scope: outputs
needs: docs
output: mongo
needs: config

These helper functions would allow consulting the handle state exposed by Fibratus. The `find_handles` function should return all handles known to Fibratus as a list of Python dictionary objects. The...

scope: filaments
needs: docs
scope: handle

These functions would allow consulting the process state exposed by Fibratus. The `find_processes` function should return currently running processes as a list of Python dictionary objects. The `find_process` function accepts...

scope: filaments
needs: docs