Code

Zerologon password reset warning#998

Code

Merged

mssalvatore merged 27 commits intodevelopguardicore/monkey:developfrom zerologon-password-reset-warningguardicore/monkey:zerologon-password-reset-warningCopy head branch name to clipboardMar 2, 2021

+481-266

Commits

Commits on Feb 24, 2021

• cc: add a note about resetting password after failed zerologon attempt

  mssalvatore

  committed
  b5b8d28

  Copy full SHA for b5b8d28

• cc: format exploiter_classes.py with black

  mssalvatore

  committed
  b6bb6d8

  Copy full SHA for b6bb6d8

• agent: add zerologon password restore success/failure to telemetry

  mssalvatore

  committed
  36bd983

  Copy full SHA for 36bd983

• ui: add machine-related recommendation for Zerologon to security report

  mssalvatore

  committed
  4fbb0f2

  Copy full SHA for 4fbb0f2

• cc: add password_restore_success to zerologon report issue

  mssalvatore

  committed
  70fd7d7

  Copy full SHA for 70fd7d7

• cc,agent: rename password_restore_success -> password_restored

  mssalvatore

  committed
  f17c08d

  Copy full SHA for f17c08d

Commits on Feb 25, 2021

• Add Zerologon (and Drupal) information to "Immediate Threats"

  shreyamalviya

  committed
  3da1de3

  Copy full SHA for 3da1de3

• Add warning to machine-specific recommendation if password was not reset

  shreyamalviya

  committed
  6581a5a

  Copy full SHA for 6581a5a

• Added ZeroLogon overview section to the report

  VakarisZ

  committed
  8b7e0d0

  Copy full SHA for 8b7e0d0

• Improved zero logon overview UI and added password restoration warning to overview.

  VakarisZ

  committed
  94ac75e

  Copy full SHA for 94ac75e

• report: rename ZEROLOGON_CRED_RESTORE_FAILED -> ZEROLOGON_PASSWORD_RESTORED

  mssalvatore

  committed
  67fd171

  Copy full SHA for 67fd171

• Improved zero logon exploiter to fail on failed domain controller name fetch.

  VakarisZ

  committed
  e9b84ff

  Copy full SHA for e9b84ff

• Improved exception handling of expected exceptions - if they are expected, we don't need to see the error trace.

  VakarisZ

  committed
  ce697b3

  Copy full SHA for ce697b3

• Fix typo, remove unused import, change function/variable names for consistency

  shreyamalviya

  committed
  c0d2d5b

  Copy full SHA for c0d2d5b

Commits on Feb 26, 2021

• Fix unit tests

  shreyamalviya

  committed
  2f99631

  Copy full SHA for 2f99631

Commits on Feb 28, 2021

• docs: Add warnings and password restoration instructions for Zerologon

  mssalvatore

  committed
  f094c3e

  Copy full SHA for f094c3e

• docs: minor rewording in zerologon docs

  Show description for 5e088e6
  

  mssalvatore

  and

  shreyamalviya

  authored
  5e088e6

  Copy full SHA for 5e088e6

• docs: add missing comma on zerologon docs

  Show description for abc76e0
  

  mssalvatore

  and

  shreyamalviya

  authored
  abc76e0

  Copy full SHA for abc76e0

Commits on Mar 1, 2021

• Changed the logic of zerologon password restoration issue overview to be more consistent with the function of issue map.

  

  VakarisZ

  authored and

  mssalvatore

  committed
  b3e9922

  Copy full SHA for b3e9922

• Changed zerologon links to be more consistent and have a style

  

  VakarisZ

  authored and

  mssalvatore

  committed
  8eeed20

  Copy full SHA for 8eeed20

• Improved formatting and link styles in SecurityReport.js

  

  VakarisZ

  authored and

  mssalvatore

  committed
  e49b7b8

  Copy full SHA for e49b7b8

• Minor formatting improvements in SecurityReport.js

  

  VakarisZ

  authored and

  mssalvatore

  committed
  9171ed8

  Copy full SHA for 9171ed8

• Replace double quotes with single quotes in SecurityReport.js

  

  VakarisZ

  authored and

  mssalvatore

  committed
  9e3fe03

  Copy full SHA for 9e3fe03

• cc: reword zerologon exploiter class info

  mssalvatore

  committed
  ac530b2

  Copy full SHA for ac530b2

Commits on Mar 2, 2021

• Improved warning icon display style in the overview

  VakarisZ

  committed
  89907d1

  Copy full SHA for 89907d1

• Change warning order and phrasing in report

  shreyamalviya

  committed
  6babcd0

  Copy full SHA for 6babcd0

• Consider non-threat issues when calculating threat count

  shreyamalviya

  committed
  5f66a99

  Copy full SHA for 5f66a99