droe/xnumon issues and pull requests

#48 - Apply my own configration.plist error!

Issue - State: closed - Opened by MrJeffyw almost 6 years ago - 4 comments
Labels: type:not-a-bug

#48 - Apply my own configration.plist error!

Issue - State: closed - Opened by MrJeffyw almost 6 years ago - 4 comments
Labels: type:not-a-bug

#47 - Add tlsh hash support

Issue - State: open - Opened by droe about 6 years ago
Labels: type:feature, contributor-friendly

#47 - Add tlsh hash support

Issue - State: open - Opened by droe about 6 years ago
Labels: type:feature, contributor-friendly

#46 - Add ssdeep hash support

Issue - State: open - Opened by droe about 6 years ago
Labels: type:feature, contributor-friendly

#46 - Add ssdeep hash support

Issue - State: open - Opened by droe about 6 years ago
Labels: type:feature, contributor-friendly

#45 - Verify identity of process attaching to cdev

Issue - State: open - Opened by droe about 6 years ago - 2 comments
Labels: type:maturity, status:blocked, type:kext

#45 - Verify identity of process attaching to cdev

Issue - State: open - Opened by droe about 6 years ago - 2 comments
Labels: type:maturity, status:blocked, type:kext

#44 - Add symhash hash support

Issue - State: open - Opened by droe about 6 years ago
Labels: type:feature, contributor-friendly, pri:low

#44 - Add symhash hash support

Issue - State: open - Opened by droe about 6 years ago
Labels: type:feature, contributor-friendly, pri:low

#43 - Extend launchd-add[4] event with Login Items

Issue - State: open - Opened by droe over 6 years ago
Labels: type:feature

#42 - O(1) audit event type testing

Issue - State: closed - Opened by droe over 6 years ago - 1 comment
Labels: type:not-a-bug

#41 - Spurious radar39623812_fatal with malformed path[0]

Issue - State: closed - Opened by droe over 6 years ago
Labels: hotfix:released, type:bug, pri:high, status:released

#40 - Differentiate between UDP, TCP, SCTP, raw etc socket events

Issue - State: closed - Opened by droe over 6 years ago - 1 comment
Labels: type:bug, pri:high, status:merged-to-develop

#39 - Add option to suppress localhost socket accept and connect

Issue - State: closed - Opened by droe over 6 years ago
Labels: status:merged-to-develop, type:feature

#38 - Add local addr:port to socket-accept[6] and socket-connect[7] events

Issue - State: closed - Opened by droe over 6 years ago - 2 comments
Labels: status:merged-to-develop, type:feature

#37 - Replace socket-bind[5] with socket-listen[5]

Issue - State: closed - Opened by droe over 6 years ago - 2 comments
Labels: status:merged-to-develop, type:feature

#36 - EXC_BAD_ACCESS of kextloop_thread in kqueue_dispatch()

Issue - State: closed - Opened by droe over 6 years ago - 1 comment
Labels: hotfix:released, type:bug, status:released

#35 - Watchdog timer for system-wide audit policy

Issue - State: closed - Opened by droe over 6 years ago
Labels: status:released, type:maturity

#34 - More flexible suppression syntax

Issue - State: open - Opened by droe over 6 years ago
Labels: type:feature

#33 - [kext] Event loop redesign

Issue - State: closed - Opened by droe over 6 years ago
Labels: status:released, type:maturity

#32 - JSON schema

Issue - State: open - Opened by droe over 6 years ago
Labels: type:feature, contributor-friendly, pri:low

#31 - Add code signature origin field: Apple, App Store, Developer ID

Issue - State: closed - Opened by droe over 6 years ago
Labels: status:released, type:feature

#30 - Schema documentation

Issue - State: closed - Opened by droe over 6 years ago - 1 comment
Labels: type:documentation, status:released

#29 - auid, euid, ruid -1 is logged as 4294967295

Issue - State: closed - Opened by droe over 6 years ago - 2 comments
Labels: type:bug, status:released

#28 - Extend image-exec events with username (e.g. getpwuid)

Issue - State: closed - Opened by losandros over 6 years ago - 2 comments
Labels: status:duplicate, status:released

#27 - Allow by_ident suppressions to restrict ident to a specific teamid

Issue - State: closed - Opened by droe over 6 years ago - 1 comment
Labels: status:released, type:feature

#26 - Improve file monitoring core

Issue - State: open - Opened by droe over 6 years ago - 1 comment
Labels: pri:high, type:maturity, type:kext

#25 - Faster code signature verification mode(s)

Issue - State: closed - Opened by droe over 6 years ago - 3 comments
Labels: status:released, type:maturity

#24 - Continuous integration service

Issue - State: closed - Opened by droe over 6 years ago
Labels: type:build, status:released

#23 - New event: browser extension install

Issue - State: open - Opened by losandros over 6 years ago - 5 comments
Labels: type:feature, status:blocked

#22 - Child image suppression for image exec

Issue - State: closed - Opened by droe over 6 years ago
Labels: status:released, type:feature

#21 - Extract CDHashes from code signature

Issue - State: closed - Opened by droe over 6 years ago
Labels: status:released, type:feature

#20 - Extract the team ID from code signatures

Issue - State: closed - Opened by droe over 6 years ago - 1 comment
Labels: status:released, type:feature

#19 - Make use of identity tokens in audit(4) records in 10.14

Issue - State: open - Opened by droe over 6 years ago
Labels: type:feature, pri:low

#18 - xnumon self-defense

Issue - State: open - Opened by droe over 6 years ago
Labels: type:feature, pri:low

#17 - Reimplement kext loading using c API

Issue - State: closed - Opened by droe over 6 years ago
Labels: status:released, type:feature

#16 - New event: kext load

Issue - State: open - Opened by droe over 6 years ago - 2 comments
Labels: type:feature, status:blocked

#15 - Process access event does not cover processor_set_tasks()

Issue - State: closed - Opened by droe over 6 years ago - 1 comment
Labels: type:third-party-bug, status:wont-fix

#14 - New events: Network sockets

Issue - State: closed - Opened by droe over 6 years ago - 1 comment
Labels: pri:high, type:feature

#13 - json-seq log format (RFC 7464)

Issue - State: closed - Opened by droe over 6 years ago - 1 comment
Labels: status:released, type:feature

#12 - XML log format

Issue - State: closed - Opened by droe over 6 years ago
Labels: status:released, type:feature

#11 - Acquire stat and hashes in kext to move burden to caller

Issue - State: open - Opened by droe over 6 years ago - 2 comments
Labels: type:feature, type:kext

#10 - Test binaries for chdir/fchdir+exec

Issue - State: closed - Opened by droe over 6 years ago - 1 comment
Labels: status:released, type:feature

#9 - Automated test framework

Issue - State: closed - Opened by droe over 6 years ago
Labels: type:build, status:merged-to-develop

#8 - Optional event for already running processes

Issue - State: closed - Opened by droe over 6 years ago
Labels: status:released, type:feature

#7 - Detect DYLD_INSERT_LIBRARIES dylib injection

Issue - State: closed - Opened by droe over 6 years ago
Labels: status:released, type:feature

#6 - Ship signed kext

Issue - State: closed - Opened by droe over 6 years ago - 10 comments
Labels: type:build, pri:high, status:merged-to-develop, type:pkg, type:kext

#5 - Create source release tarballs

Issue - State: closed - Opened by droe over 6 years ago
Labels: type:build, status:wont-fix

#4 - Resolve uid and gid to names

Issue - State: closed - Opened by droe over 6 years ago
Labels: status:released, type:feature

#3 - Field configuration

Issue - State: closed - Opened by droe over 6 years ago - 2 comments
Labels: status:released, type:feature

#2 - Option to omit hashes for signed Apple binaries

Issue - State: closed - Opened by droe over 6 years ago
Labels: status:released, type:feature

#1 - Event type selection in configuration

Issue - State: closed - Opened by droe over 6 years ago - 1 comment
Labels: status:released, type:feature

GitHub / droe/xnumon issues and pull requests