spyre-project/spyre issues and pull requests

#77 - Fix MacOS build

Pull Request - State: open - Opened by hillu over 1 year ago

#76 - How to build for 32-bit program of linux on 64-bit linux using musl-gcc

Issue - State: closed - Opened by N0body007 over 2 years ago - 6 comments

#75 - Improve MacOSX support

Pull Request - State: closed - Opened by hillu over 2 years ago

#74 - Add example configuration

Pull Request - State: closed - Opened by hillu almost 3 years ago

#73 - Scan Modules

Issue - State: open - Opened by MesserBart almost 3 years ago - 6 comments

#72 - Stop using which in buildsystem

Pull Request - State: open - Opened by hillu almost 3 years ago

#71 - Add support for Alternate Data Streams on Windows

Pull Request - State: closed - Opened by hillu almost 3 years ago

#70 - Added softload hint for the build process

Pull Request - State: closed - Opened by andurin almost 3 years ago - 6 comments

#69 - Log file sizes and timestamps

Pull Request - State: closed - Opened by hillu about 3 years ago

#68 - Log sha256 sums for files, gather file evidence

Pull Request - State: closed - Opened by hillu about 3 years ago

#67 - Log system information

Issue - State: closed - Opened by hillu about 3 years ago - 1 comment

#66 - RfC, WIP: netstat ioc check, 2nd take

Pull Request - State: open - Opened by hillu about 3 years ago

#65 - Bump build deps

Pull Request - State: closed - Opened by rhaist about 3 years ago - 1 comment

#64 - Remove Travis-CI and add GA badge

Pull Request - State: closed - Opened by rhaist about 3 years ago

#63 - Reimplement config system based around YAML, pflag.FlagSet

Pull Request - State: closed - Opened by hillu about 3 years ago

#62 - Implement scan for active windows with specific window classes

Issue - State: closed - Opened by hillu about 3 years ago

#61 - Implement pattern-based Event Object and Mutex scan

Issue - State: closed - Opened by hillu about 3 years ago

#60 - More instructions about how to generate YARA and IOC.json?

Issue - State: open - Opened by 040840308 over 3 years ago - 3 comments

#59 - add evtx yara scan

Pull Request - State: closed - Opened by lprat over 3 years ago - 1 comment

#58 - netstat ioc check

Pull Request - State: closed - Opened by lprat over 3 years ago - 2 comments

#57 - improve fs scan

Pull Request - State: closed - Opened by lprat over 3 years ago - 1 comment

#56 - Use gopsutil

Pull Request - State: closed - Opened by lprat over 3 years ago - 2 comments

#55 - Add module for network IOCs

Issue - State: open - Opened by hillu over 3 years ago

#54 - Add log file scanner

Issue - State: open - Opened by hillu over 3 years ago

#53 - yara: Log matching strings

Issue - State: open - Opened by hillu over 3 years ago

#52 - Add ignorelist for files

Issue - State: open - Opened by hillu over 3 years ago

#51 - Skip large files before opening

Issue - State: open - Opened by hillu over 3 years ago

#50 - Log SHA256 sums of matched files.

Issue - State: closed - Opened by hillu almost 4 years ago - 1 comment
Labels: enhancement

#49 - Bump dependencies

Pull Request - State: closed - Opened by rhaist almost 4 years ago

#48 - Evaluate MXE as replacement for 3rdparty.mk

Issue - State: open - Opened by hillu almost 4 years ago

#47 - Syntax of ioc.json for Registry

Issue - State: open - Opened by dylanjnsn almost 4 years ago
Labels: question, documentation

#46 - simplistic #44 solved (not tested) and some minor changes

Pull Request - State: closed - Opened by 0mbi about 4 years ago - 1 comment

#45 - Separate the list of skipped large files from rule matches.

Issue - State: open - Opened by anna-g-arbeiter about 4 years ago

#44 - Option to exclude vmtoolsd.exe Process from procscan

Issue - State: closed - Opened by anna-g-arbeiter about 4 years ago - 3 comments
Labels: good first issue

#43 - Exclude WinDefender from procscan

Issue - State: open - Opened by anna-g-arbeiter about 4 years ago - 1 comment
Labels: help wanted

#42 - Make version number overridable via Makefile variable

Pull Request - State: closed - Opened by hillu about 4 years ago

#41 - Make 3rdparty build output less verbose, eliminate Travis workaround

Pull Request - State: closed - Opened by hillu about 4 years ago

#40 - Extend spyre to build on Fedora

Issue - State: closed - Opened by 0mbi about 4 years ago - 3 comments

#39 - scanner/yara: Improve compiler diagnostics

Pull Request - State: closed - Opened by hillu about 4 years ago - 1 comment

#38 - yara compile: drop rules that are slowing down #26

Pull Request - State: closed - Opened by 0mbi about 4 years ago - 1 comment

#37 - Change ProcScan interface to operate on ps.Process instead of pid

Pull Request - State: closed - Opened by hillu about 4 years ago

#36 - macosx: Enforce static linking by removing *.dylib

Pull Request - State: closed - Opened by hillu about 4 years ago - 1 comment

#35 - Makefile: Recognize gtar on BSD etc. systems

Pull Request - State: closed - Opened by hillu about 4 years ago

#34 - Add support for scanning live processes, YARA process scanner

Pull Request - State: closed - Opened by hillu about 4 years ago

#33 - Move platform-specific code around

Pull Request - State: closed - Opened by hillu about 4 years ago

#32 - Use YARA 4

Pull Request - State: closed - Opened by hillu about 4 years ago

#31 - Make: Attempt to support FreeBSD (and eventually other systems)

Pull Request - State: closed - Opened by hillu about 4 years ago

#30 - 3rdparty: Replace explicit pkg.build <- dep.build rules with macros

Pull Request - State: closed - Opened by hillu about 4 years ago

#29 - Move to yara 4.x

Issue - State: closed - Opened by rhaist about 4 years ago - 1 comment
Labels: enhancement

#28 - Make the build chain work on OSX

Issue - State: closed - Opened by rhaist about 4 years ago - 4 comments
Labels: bug

#27 - Implement YARA-based process memory scanning module.

Issue - State: closed - Opened by hillu about 4 years ago
Labels: enhancement

#26 - yara: Reject rules with warnings

Issue - State: closed - Opened by hillu about 4 years ago
Labels: good first issue

#25 - Switch from dep to Go modules

Pull Request - State: closed - Opened by hillu about 4 years ago

#24 - Use explicit formatting for start/end times

Pull Request - State: closed - Opened by hillu about 4 years ago

#23 - yara: Fix include callback for compiling rules

Pull Request - State: closed - Opened by hillu about 4 years ago

#22 - fix filesize-to-string conversion

Pull Request - State: closed - Opened by hillu about 4 years ago

#21 - Add support for rules in $PROGNAME.zip next to $PROGNAME

Pull Request - State: closed - Opened by hillu about 4 years ago

#20 - Incorporate changes from afero/zipfs

Pull Request - State: closed - Opened by hillu about 4 years ago

#19 - report: Parse pathnames with Windows drive letters correctly

Pull Request - State: closed - Opened by hillu about 4 years ago

#18 - Implement encrypted zipfile support

Pull Request - State: closed - Opened by hillu about 4 years ago

#17 - Introduce more than success/error state in module initialization

Issue - State: open - Opened by hillu about 4 years ago
Labels: bug, design

#16 - Re-think handling of command line parameters, configuration file

Issue - State: closed - Opened by hillu about 4 years ago - 4 comments
Labels: enhancement, design

#15 - Use Go modules

Issue - State: closed - Opened by hillu about 4 years ago - 2 comments
Labels: enhancement

#14 - Sigma scanning capability as feature request

Issue - State: open - Opened by stuhli about 4 years ago - 2 comments
Labels: enhancement, help wanted, question

#13 - Bump versions of 3rd-party libraries

Pull Request - State: closed - Opened by hillu over 4 years ago

#12 - Please fix CI setup

Issue - State: closed - Opened by hillu over 4 years ago - 2 comments
Labels: bug

#11 - Please tag 1.1.0 relase

Issue - State: closed - Opened by hillu almost 5 years ago - 1 comment

#10 - Bump OpenSSL, YARA, musl-libc versions

Pull Request - State: closed - Opened by hillu almost 5 years ago

#9 - Error when importing jsonl file in timesketch

Issue - State: closed - Opened by n3x77 about 5 years ago - 1 comment

#8 - Add support for obfuscating IOCs

Issue - State: closed - Opened by hillu over 5 years ago - 1 comment
Labels: enhancement

#7 - Report does not include files which could not be opened

Issue - State: closed - Opened by hw8665 about 6 years ago
Labels: bug

#6 - --report doesn't accept format option

Issue - State: closed - Opened by hw8665 about 6 years ago - 1 comment

#5 - Support sending report to URL as POST

Issue - State: open - Opened by hw8665 about 6 years ago - 1 comment
Labels: enhancement

#4 - Allow setting command-line options from config file within appended zip

Issue - State: closed - Opened by hw8665 about 6 years ago - 1 comment

#3 - Add proper support for yara `import` statement

Issue - State: closed - Opened by hillu about 6 years ago

#2 - Add command line switch to set hostname

Issue - State: closed - Opened by hillu over 6 years ago

#1 - Matching yara rule

Issue - State: closed - Opened by stuhli over 6 years ago - 1 comment

GitHub / spyre-project/spyre issues and pull requests