Transfer open and relevant issues from other repo

[bartblaze]

Just for some improvements etc. that have been suggested in the past, it'd be useful to port them here - but only those that are open and still relevant - seems the ability to do that in Github exists:
https://help.github.com/en/github/managing-your-work-on-github/transferring-an-issue-to-another-repository

Of course, this is low priority, just think it'd be useful to keep some of them. Happy New Year! 😃

[doomedraven]

what of them are relevant ? win10 support yes, trickbot meh, ie meh xD

[bartblaze]

Haha, good point!

I think these are relevant:

• Windows 10
• IE 11 crashes
• Allow easy copy of binGraph diagrams from the webgui
• Execute all exported functions

These should probably be re-tested now that we have CAPEv2:

• High severity signatures firing during benign URL analysis in IE 7
• VM CPU usage at 100% when using ie URL analysis package
• Trickbot analysis fails

cc @seanthegeek for those ^

These seem done:

• Dump binary registry data to file
  Monitoring DLL Running in Another process
  
• Unable to connect to MongoDB: Unknown option username | ConfigurationError: Unknown option username
• File not detected as being in VT

Could also be worth having a look at @JohnPeng47's PR - I like the idea personally:
Enhanced API call filtering on web interface #234

[doomedraven]

this is nice summary, the problem is next

High severity signatures firing during benign URL analysis in IE 7 <- that is normal browser does that check, is to be expected, so if you have solution we are welcome to hear that, but we won't spend time on that to somehow "whitelist" and that might break real threat

Trickbot analysis fails <- more than solved ;)

Allow easy copy of binGraph diagrams from the webgui <- i was need to readapt bingraph and i don't see a decent/pretty way to put button there to download file so meh

Unable to connect to MongoDB: Unknown option username | ConfigurationError: Unknown option username <- was fixed a lot of time ago

File not detected as being in VT <- normally happens due to apikey limitation

latest one, author just remove code and left a package, his code is here ctxis/CAPE@65ec6d2

@kevoreilly maybe time to close some of them, see my comments ?

[bartblaze]

High severity signatures firing during benign URL analysis in IE 7
Agreed with your comment, better to have a bit more noise than the chance to miss stuff.

The others, thanks - glad to hear it!

[seanthegeek]

Sweet! I'll get to testing sometime this weekend.

[doomedraven]

i spoke with Kevin, he wants the button to download graphs so i will check if i can quickly add it tomorrow and put button in some decent way

[doomedraven]

works for you guys?

[bartblaze]

works for you guys?

Looks great, thank you! 👍

[doomedraven]

i have integrated extended search/filtering from @JohnPeng47, thanks

[kevoreilly]

Fixed the TrickBot parser - another issue bites the dust

[seanthegeek]

I noticed URL/web page analysis is missing. Does that still need to be ported?

[doomedraven]

isn't missed, we disabled that due to not full IE 11 support

[bartblaze]

Think this one can be closed, only one left is ctxis/CAPE#366 to be able to execute all imported functions, should we close this off and open a new issue perhaps? cc @kevoreilly

[doomedraven]

yep, would be better