{"push_id":905734496,"size":160,"distinct_size":160,"ref":"refs/heads/master","head":"4c7bc33091626084c35d8cb0eff2efc82863c4ea","before":"7fac495ca8f9ce37c7194d1d923eb741ed440378","commits":[{"sha":"63f32a4ad161bebf4c39e345e77fbe4e64ccf11d","author":{"email":"c3f7bf866735d032086dc7d1a24447c699a8306f@mgeorge-mbp.corp.dropbox.com","name":"Michael George"},"message":"fixed bson imprting issue\n Please enter the commit message for your changes. Lines starting","distinct":true,"url":"https://api.github.com/repos/costingalan/cuckoo/commits/63f32a4ad161bebf4c39e345e77fbe4e64ccf11d"},{"sha":"5d873060abe6fd9eff153074e0d7d12c18269f37","author":{"email":"df7e1a82190b7223dd38cc6e241dee145b1b0f9e@gmail.com","name":"Jurriaan Bremer"},"message":"introduce file-exists in the summary","distinct":true,"url":"https://api.github.com/repos/costingalan/cuckoo/commits/5d873060abe6fd9eff153074e0d7d12c18269f37"},{"sha":"3a5c3ebb57c9544bddccec918bcca506f0342cf2","author":{"email":"df7e1a82190b7223dd38cc6e241dee145b1b0f9e@gmail.com","name":"Jurriaan Bremer"},"message":"passthrough the disguise option to the monitor","distinct":true,"url":"https://api.github.com/repos/costingalan/cuckoo/commits/3a5c3ebb57c9544bddccec918bcca506f0342cf2"},{"sha":"af480d48bc9f70e4677887d023cfc8148bcab714","author":{"email":"df7e1a82190b7223dd38cc6e241dee145b1b0f9e@gmail.com","name":"Jurriaan Bremer"},"message":"separate directory for keeping monitoring binaries\n\nAfter having been overwriting the binaries in analyzer/windows/bin for\ntoo many years now, it's time to start building up a small but useful\ndatabase of monitoring binaries in data/monitor/.\n\nWhen releasing new features or bug fixes which also affect the monitor,\nwe can now update the data/monitor/latest symbolic link to point to the\nGit hash of the required monitor version. Upon start of Cuckoo we can\nthen check whether the symbolic links target exists and report to the\nuser the need to upgrade to the latest monitoring binaries if it does\nnot. (In the end this will only occur when a user manually updates his\nor her Cuckoo setup or does a Git clone of the Git repository).\n\nAside from the improved user experience this will also improve our\nability to bisect the monitor against older versions of it. Sometimes\nnew features break older features or introduce crashes. Being able to\nreplay analyses with older monitoring binaries we should be able to\nhave bisect-like functionality more easily (without race condition\nproblems that are introduced when overwriting the analyzer/windows/bin\ndirectory while running multiple analyses in parallel).","distinct":true,"url":"https://api.github.com/repos/costingalan/cuckoo/commits/af480d48bc9f70e4677887d023cfc8148bcab714"},{"sha":"f449447d04cda3a75873aee63b5c5c381dd87206","author":{"email":"df7e1a82190b7223dd38cc6e241dee145b1b0f9e@gmail.com","name":"Jurriaan Bremer"},"message":"simplify logging message back to what it was before","distinct":true,"url":"https://api.github.com/repos/costingalan/cuckoo/commits/f449447d04cda3a75873aee63b5c5c381dd87206"},{"sha":"95f7649e659660bb05fb3ec510241950383c7bb6","author":{"email":"df7e1a82190b7223dd38cc6e241dee145b1b0f9e@gmail.com","name":"Jurriaan Bremer"},"message":"populate the registry with various anti-anti-vm values","distinct":true,"url":"https://api.github.com/repos/costingalan/cuckoo/commits/95f7649e659660bb05fb3ec510241950383c7bb6"},{"sha":"c8edf6ab68470f57201187e1efa5b7034b490aa8","author":{"email":"df7e1a82190b7223dd38cc6e241dee145b1b0f9e@gmail.com","name":"Jurriaan Bremer"},"message":"backport the new monitor stuff to the old guest manager\n\nThat is, apply the same rules when using the old Cuckoo Agent. And get\nrid of hashes path for now as we're not using it anyway.","distinct":true,"url":"https://api.github.com/repos/costingalan/cuckoo/commits/c8edf6ab68470f57201187e1efa5b7034b490aa8"},{"sha":"ca20e05567a2047e682241230f2af4c8f3766cd9","author":{"email":"df7e1a82190b7223dd38cc6e241dee145b1b0f9e@gmail.com","name":"Jurriaan Bremer"},"message":"update the community.py warnings and make them persistent\n\nWith our new versioning system for the monitoring binaries we can now\nproperly inform the user when they're not up-to-date. Do so :-)","distinct":true,"url":"https://api.github.com/repos/costingalan/cuckoo/commits/ca20e05567a2047e682241230f2af4c8f3766cd9"},{"sha":"e58e662ad1a1c67aff26271e975ed0c94ad8a5c5","author":{"email":"df7e1a82190b7223dd38cc6e241dee145b1b0f9e@gmail.com","name":"Jurriaan Bremer"},"message":"support for symbolic links in community.py\n\nZip files don't support symbolic links, so we have to move to .tar.gz\narchive files instead. Symbolic links are required for the new way of\ndistributing monitoring binaries.","distinct":true,"url":"https://api.github.com/repos/costingalan/cuckoo/commits/e58e662ad1a1c67aff26271e975ed0c94ad8a5c5"},{"sha":"e387b8519a0989299288e72157f92fad8f1b7be9","author":{"email":"df7e1a82190b7223dd38cc6e241dee145b1b0f9e@gmail.com","name":"Jurriaan Bremer"},"message":"Merge pull request #644 from PickmanSec/master\n\nfixed bson importing issue","distinct":true,"url":"https://api.github.com/repos/costingalan/cuckoo/commits/e387b8519a0989299288e72157f92fad8f1b7be9"},{"sha":"e1923d6dca8c0c06a372f4b77d519d93a8e5d94e","author":{"email":"df7e1a82190b7223dd38cc6e241dee145b1b0f9e@gmail.com","name":"Jurriaan Bremer"},"message":"older reports do not have the track variable for each process\n\nSo for those reports we shouldn't be filtering as that results in having\n0 processes show up in the Behavioral Analysis tab.","distinct":true,"url":"https://api.github.com/repos/costingalan/cuckoo/commits/e1923d6dca8c0c06a372f4b77d519d93a8e5d94e"},{"sha":"c6fa4cffa7a7c2516b363df96ffa037397788fe7","author":{"email":"df7e1a82190b7223dd38cc6e241dee145b1b0f9e@gmail.com","name":"Jurriaan Bremer"},"message":"more pages is more better","distinct":true,"url":"https://api.github.com/repos/costingalan/cuckoo/commits/c6fa4cffa7a7c2516b363df96ffa037397788fe7"},{"sha":"fdae38c659c409bb4970ae979ac06d2343bc4b68","author":{"email":"df7e1a82190b7223dd38cc6e241dee145b1b0f9e@gmail.com","name":"Jurriaan Bremer"},"message":"correctly handle volatile registry stuff under winxp\n\nThe _winreg API doesn't play nice under Windows XP due to Volatile\nRegistry limitations. Therefore we fallback to using the Windows API,\nwhich does apparently work.","distinct":true,"url":"https://api.github.com/repos/costingalan/cuckoo/commits/fdae38c659c409bb4970ae979ac06d2343bc4b68"},{"sha":"b357bcad034e427fda64252fc3cdd74741e86335","author":{"email":"df7e1a82190b7223dd38cc6e241dee145b1b0f9e@gmail.com","name":"Jurriaan Bremer"},"message":"correctly handle unicode buffers and trailing zeroes","distinct":true,"url":"https://api.github.com/repos/costingalan/cuckoo/commits/b357bcad034e427fda64252fc3cdd74741e86335"},{"sha":"a6d0980ea4770101f4eb0a2dfaab159e52c03a18","author":{"email":"df7e1a82190b7223dd38cc6e241dee145b1b0f9e@gmail.com","name":"Jurriaan Bremer"},"message":"regsetvalueexw expects unicode strings","distinct":true,"url":"https://api.github.com/repos/costingalan/cuckoo/commits/a6d0980ea4770101f4eb0a2dfaab159e52c03a18"},{"sha":"73f703e064cddaaabe82d1c49c9192c49aa07bc2","author":{"email":"20ff83fbcb9a22193f1938482e6bfc898d967c13@nex.sx","name":"Nex"},"message":"Added libffi-dev as requirement","distinct":true,"url":"https://api.github.com/repos/costingalan/cuckoo/commits/73f703e064cddaaabe82d1c49c9192c49aa07bc2"},{"sha":"35bdf8d5839310d0fab122ace1d287d9170dcd10","author":{"email":"7cdfcbd9315be4cfd7bdf307b4ac78d3bcdb56ad@cuckoo.sh","name":"Jurriaan Bremer"},"message":"integration with suricata as a processing module\n\nInitial integration of Suricata with Cuckoo. This code is based on\nthe Suricata integration with cuckoo-modified developed mostly by Will\nMetcalf, Brad Spengler, Sean Whalen, and Jeremy Hedges.","distinct":true,"url":"https://api.github.com/repos/costingalan/cuckoo/commits/35bdf8d5839310d0fab122ace1d287d9170dcd10"},{"sha":"71e079235846bf5fe576e9bb9cd2b0303bdc1a49","author":{"email":"7cdfcbd9315be4cfd7bdf307b4ac78d3bcdb56ad@cuckoo.sh","name":"Jurriaan Bremer"},"message":"allow process.py to work in debug mode\n\nIs there a better way to do this?","distinct":true,"url":"https://api.github.com/repos/costingalan/cuckoo/commits/71e079235846bf5fe576e9bb9cd2b0303bdc1a49"},{"sha":"4ad22a1dce6da3b76c3395a6b4da7219991061f9","author":{"email":"7cdfcbd9315be4cfd7bdf307b4ac78d3bcdb56ad@cuckoo.sh","name":"Jurriaan Bremer"},"message":"enable suricata blacklists with a debug message","distinct":true,"url":"https://api.github.com/repos/costingalan/cuckoo/commits/4ad22a1dce6da3b76c3395a6b4da7219991061f9"},{"sha":"09a3e5a0addbf172a6b10ebc19c9992bada5b0e0","author":{"email":"7cdfcbd9315be4cfd7bdf307b4ac78d3bcdb56ad@cuckoo.sh","name":"Jurriaan Bremer"},"message":"integration with snort 2.9.x.y as a processing module\n\nSnort integration enables us to utilize Snort rules next to Suricata\nrules. Thanks to Steve Henderson for the regex to properly interpret\nSnort alerts from the command-line.","distinct":true,"url":"https://api.github.com/repos/costingalan/cuckoo/commits/09a3e5a0addbf172a6b10ebc19c9992bada5b0e0"}]}