http://open-source-security-software.net/project/timesketch/releases.atom 2024-11-15T14:38:32.370457+00:00 python-feedgen timesketch v1.0.0 2014-03-23T04:52:42+00:00 First "real-world" release of an anonymous and decentralized instant messaging client for Tor. See the [README](https://github.com/special/torsion/blob/master/README.md) for more information. `torsion-1.0.0+git10-debian-static.tar.bz2` is an experimental statically linked build for Debian 7 (Wheezy). 2014-03-23T04:52:42+00:00 timesketch v1.0.1 2014-04-14T01:30:21+00:00 Torsion will [be renamed](https://github.com/special/torsion/issues/20) in the next release; suggestions are welcome. Contact addresses and configuration will remain compatible. Thanks to Antaon, HostFat, GIANNAT, and Anton for their contributions to this release, and to many others for [reporting issues](https://github.com/special/torsion/issues) and sharing their thoughts. #### Security - Updated to OpenSSL 1.0.1g for Windows and Linux static builds #### Features - Added Italian translation, contributed by HostFat and GIANNAT via [Transifex](https://www.transifex.com/projects/p/torsion/) - Added static Linux build, which can run without dependencies on most distributions - URLs in chat are highlighted and can be copied or opened in the default browser (with a warning) - Polished add contact UI to make usage clearer and explain validation problems #### Fixes - Fixed display of hidden service state in Tor preferences - Fixed rendering issues with message text on some platforms - Fixed crash when pressing 'Remove' in contact preferences with nothing selected - Fixed compatibility with older versions of OS X - Improved debugging when bundled Tor fails to start Windows: `Torsion.exe` - OS X: `Torsion.dmg` - Linux (static): `torsion-1.0.1-static.tar.bz2` 2014-04-14T01:30:21+00:00 timesketch v1.0.2 2014-07-06T15:32:25+00:00 Formerly known as Torsion, now Ricochet. Along with changing the name, this release includes mostly minor fixes and packaging improvements. More substantial changes will be coming soon. Existing configurations should continue to work after upgrading, including connections to contacts. If installing to a new directory, copy the `config` or `config.torsion` folder to keep your identity and contacts. Thanks to @obvio171 for the Ricochet name, strel for Spanish translations, and many others for [name suggestions](https://github.com/ricochet-im/ricochet/issues/20), bug reports, and their thoughts. Downloads and signatures are available from https://ricochet.im/releases/1.0.2/ #### Features - Renamed to Ricochet. Contact addresses now begin with `ricochet:` - Added Spanish translation, contributed by strel via [Transifex](https://www.transifex.com/projects/p/ricochet/) #### Fixes - Fix some characters like " being displayed incorrectly in chat messages (#36) - OS X now supports automatic GPU switching #### Packaging - Added 32-bit static Linux binaries (#41) - Added 32-bit Windows binaries (#44) - Updated Tor to 0.2.4.22 - Updated OpenSSL to 1.0.1h - Updated Qt to 5.3.1 2014-07-06T15:32:25+00:00 timesketch v1.0.3 2014-07-30T17:15:52+00:00 The Tor Project released today a [security announcement](https://blog.torproject.org/blog/tor-security-advisory-relay-early-traffic-confirmation-attack) regarding an anonymity attack carried out on users of hidden services, presumably by the authors of a withdrawn research talk. I've written an explanation of [what this means](https://github.com/ricochet-im/ricochet/wiki/Impact-of-the-Tor-relay-early-attack) for users of Ricochet and similar programs, and the steps we'll be taking in the future to mitigate similar problems. This release includes a new version of Tor, which will help reduce the impact of these attacks in the future. This release also moves configuration to a more flexible and reliable system (existing configuration is migrated automatically), adds a "single window" mode that combines the contact list and chat windows, includes new translations, and more. Downloads and PGP signatures are also available from https://ricochet.im/releases/1.0.3/ #### Security - Updated tor to 0.2.4.23 #### Features - Migrated configuration to a more useful and robust system (#21) - OS X bundles are now signed to remove Gatekeeper warnings - Added optional 'single window' mode (#19) - Added options to skip the "Open Browser" security nagging dialog - The contact list shows the number of unread messages - Added Danish translation by Mikkel Kroman - Added Portuguese (Brazil) translation by swperman #### Fixes - Fixed Windows installer on 32bit systems (also in 1.0.2.1) - Fixed loading old platform-location configuration files (1.0.2 regression) 2014-07-30T17:15:52+00:00 timesketch v1.0.4 2014-09-02T03:30:28+00:00 This is a bugfix-only release for a handful of annoying or common problems, while work continues on protocol and design improvements. The next two months will be exciting: we're moving towards improved security, several much-needed features, and better support behind the project. Thanks as always to everyone reporting bugs, making suggestions, [contributing translations](https://www.transifex.com/projects/p/ricochet/), and spreading the word about Ricochet. Downloads and PGP signatures are available from https://ricochet.im/releases/1.0.4/ #### Fixes - Fixed a bug which caused the chat window to move erratically in some cases when receiving messages or scrolling (#76) - Fixed "Configuration is already in use" errors appearing on startup after unexpected system reboots (#73) - Improved documentation on [building from source](https://github.com/ricochet-im/ricochet/blob/master/BUILDING.md) (#56, #57) - Fixed Tor errors after moving Ricochet configuration between folders or computers (#59) - Improved text input focus in "single window" mode #### Other - Updated Spanish translation from strel - Updated Brazilian Portuguese translation from swperman - Updated Danish translation from @mkroman - Updated OpenSSL to 1.0.1i 2014-09-02T03:30:28+00:00 timesketch v1.1.0 2015-04-11T00:06:08+00:00 This major release switches to a safer and more extensible protocol, adds a brand new icon and 11 new language translations, and includes many UI fixes as well as **security updates** for Tor and OpenSSL. Downloads: - [Windows](https://ricochet.im/releases/1.1.0/Ricochet-1.1.0.exe) - [Mac OS X](https://ricochet.im/releases/1.1.0/Ricochet-1.1.0.dmg) - [Linux 32-bit](https://ricochet.im/releases/1.1.0/ricochet-1.1.0-static-i686.tar.bz2) - [Linux 64-bit](https://ricochet.im/releases/1.1.0/ricochet-1.1.0-static-x86_64.tar.bz2) Other downloads and PGP signatures are available at https://ricochet.im/releases/1.1.0/. As always, you can share any bugs, ideas, and thoughts through GitHub or [privately](https://github.com/ricochet-im/ricochet#other). ### Important note about old versions This version is not "backwards compatible" with contacts that run Ricochet 1.0.4 or older. **Your contacts must also update** in order to chat again. You will keep your existing address and contacts. To get everyone updated quickly, people running an older version will see an [automatic message](https://github.com/ricochet-im/ricochet/pull/140) one time from their updated contacts. We intend to keep compatibility in the future, and to not need to resort to this method again. ### Security fixes This release fixes two issues in Tor, which allow an attacker to crash the tor client and force Ricochet offline. There is no possibility of exploitation or code execution through these bugs. ### Thanks [Blueprint for Free Speech](http://blueprintforfreespeech.net/) generously sponsored the protocol changes, and is doing fantastic work for freedom of expression and whistleblowers. This update was possible thanks to help and contributions from: Robin Burchell, Patrick Gray, Suelette Dreyfus, Lawrence Eastland, HD Moore, The Grugq, Kevin Littlejohn, Jan Noertemann, Gabe Edwards, ivopetkovcz, Einfach, Mikkel Kroman, mijnheer, Meternalf, reviewjolla, rike, Creaprog, CrumpyGat, Jordi, franck99, Daniel James Smith, esqfax, swperman, vla8752, qualte, strel, rawtaz, taskmaster, cbolat, basarancaner, l3rixon, nergal, weedpatch2, yawnbox, and other anonymous contributors. ### Changes - Implement a [new protocol](https://github.com/ricochet-im/ricochet/blob/master/doc/protocol.md), intended to improve safety and extensibility - Brand new application icon (#11), contributed by Lawrence Eastland - Add Bulgarian, Czech, German, Finnish, Tagalog, French, Dutch, Russian, Swedish, Turkish, and Ukranian translations - Show a timestamp in chat when more than an hour has passed since the last message. Patch from Jan Noertemann and Robin Burchell - Improve contact preferences UI design and behavior (#18) - Refresh contact list UI design - Make sure chat windows are always opened fully on screen (#85). Patch from Jan Noertemann. - Fix windows not always flashing for new messages on Windows (#114). Patch from Jan Noertemann. - Fix network setup getting stuck when tor fails to launch - Correctly display newlines in chat messages (regression from 1.0.1) - Remove the unnecessary hidden service self-test at startup (#26) - Windows builds now use MinGW for better automation and compatibility - Update to Qt 5.4.1, OpenSSL 1.0.1m, and Tor 0.2.6.7 2015-04-11T00:06:08+00:00 timesketch 2015.7 2015-07-23T12:36:09+00:00 Version 2015.7 of Timesketch 2015-07-23T12:36:09+00:00 timesketch v1.1.1 2015-09-09T23:10:12+00:00 Ricochet 1.1.1 comes with fixes for a variety of bugs, software updates, and several minor new features. Downloads: - [Windows](https://ricochet.im/releases/1.1.1/Ricochet-1.1.1.exe) - [Mac OS X](https://ricochet.im/releases/1.1.1/Ricochet-1.1.1.dmg) - [Linux 32-bit](https://ricochet.im/releases/1.1.1/ricochet-1.1.1-static-i686.tar.bz2) - [Linux 64-bit](https://ricochet.im/releases/1.1.1/ricochet-1.1.1-static-x86_64.tar.bz2) Other downloads and PGP signatures are available at https://ricochet.im/releases/1.1.1/. As always, you can share any bugs, ideas, and thoughts through GitHub or [privately](https://github.com/ricochet-im/ricochet#other). ### Changes #### UI - Optionally play sounds when messages are received or contacts come online (#37, by qsodev) - Language can now be changed in preferences (#172, patch by qsodev) - Add Polish translation (by Kacper Kołodziej) - Use a custom scrollbar to avoid buggy scrolling behavior - Show the number of unread messages in the dock on OS X - Improve UI icon quality - Avoid bouncing the OS X dock icon indefinitely - Fix clipboard behavior in some X11 environments - Update to Qt 5.5.0, including fixes for a variety of text display issues - Translation updates and fixes for many languages #### Core - Use compiler hardening flags when available (by Isis Lovecruft) - Add experimental apparmor and minijail sandboxing policies (by Jacob Appelbaum) - Accept public keys generated by vanity address tools (#186, by Gabe Edwards) - Fix a case where contacts would be stuck in the 'Rejected' category until manually removed - Treat all random number generator failures as fatal (#164, #89, reported by mik235) - Update Tor to 0.2.6.10, including a fix for a hidden service reliability issue - Update OpenSSL to 1.0.1p ### Thanks This release is made possible by contributions from: Adeor, Gabe Edwards, I3rixon, Isis Lovecruft, Jacob Appelbaum, John Brooks, Jordi, Kacper Kołodziej, Michael Samuel, Millak, Peter Ludikovsky, Robin Burchell, Roger Dingledine, Sarah Jamie Lewis, ShionRyuu, corvinux, gus, ivopetkov, mijnheer, mik235, mkn, participante0, qsodev, rawtaz, reviewjolla, strel, tknv, and many others. 2015-09-09T23:10:12+00:00 timesketch 2015.7.1 2015-09-24T11:23:54+00:00 Maintainance release that fixes 2 bugs: - Breaking change in flask-login package BREAKING: The `is_authenticated`, `is_active`, and `is_anonymous` members of the user class are now properties, not methods. - Plaso task worker did not set data location. Added this so that message strings support in Plaso is enabled. 2015-09-24T11:23:54+00:00 timesketch 2015.7.2 2015-10-07T14:30:51+00:00 Maintainance release that fixes 1 more bug related to flask-login: Breaking change in flask-login package The is_authenticated, is_active, and is_anonymous members of the user class are now properties, not methods. 2015-10-07T14:30:51+00:00 timesketch 2015.7.3 2015-10-07T20:33:35+00:00 Maintainance release. Regression fix for flask-login bugfix. 2015-10-07T20:33:35+00:00 timesketch 2015.12 2015-12-23T13:08:32+00:00 Version 2015.12 of Timesketch 2015-12-23T13:08:32+00:00 timesketch v1.1.2 2016-02-15T22:13:18+00:00 Ricochet 1.1.2 fixes a vulnerability which could lead to user-assisted network deanonymization, improves contact connection reliability, and fixes a common stability issue. We're also proud to [release the results](https://ricochet.im/files/ricochet-ncc-audit-2016-01.pdf) of an audit by NCC Group through the Open Technology Fund. The report validates Ricochet's security and provides a great outline of areas to improve in the near future. ### Downloads - [Windows](https://ricochet.im/releases/1.1.2/Ricochet-1.1.2.exe) - [(pgp)](https://ricochet.im/releases/1.1.2/Ricochet-1.1.2.exe.asc) - [Mac OS X](https://ricochet.im/releases/1.1.2/Ricochet-1.1.2.dmg) - [(pgp)](https://ricochet.im/releases/1.1.2/Ricochet-1.1.2.dmg.asc) - [Linux 32-bit](https://ricochet.im/releases/1.1.2/ricochet-1.1.2-static-i686.tar.bz2) - [(pgp)](https://ricochet.im/releases/1.1.2/ricochet-1.1.2-static-i686.tar.bz2.asc) - [Linux 64-bit](https://ricochet.im/releases/1.1.2/ricochet-1.1.2-static-x86_64.tar.bz2) - [(pgp)](https://ricochet.im/releases/1.1.2/ricochet-1.1.2-static-x86_64.tar.bz2.asc) - [Source](https://ricochet.im/releases/1.1.2/ricochet-1.1.2-src.tar.bz2) - [(pgp)](https://ricochet.im/releases/1.1.2/ricochet-1.1.2-src.tar.bz2.asc) ### Security fixes By sending a nickname with some HTML tags in a contact request, an attacker could cause Ricochet to make network requests without Tor after the request is accepted, which would reveal the user's IP address. The malicious nickname is clearly displayed, and no network activity takes place unless the request is accepted. We've addressed this vulnerability by sanitizing nicknames in all cases before display, rejecting contact requests with suspicious nicknames, and blocking any network requests at that layer. Thanks to the incredible Sarah Jamie Lewis (@s-rah) for originally discovering this issue. ### Changes - Block all network requests to guard against potential deanonymization issues (#303) - Reject contact requests with nicknames containing suspicious characters - Sanitize nicknames before use in UI labels - Fix a common crash when restarting an outbound connection attempt - Fix a bug which caused connection attempts to contacts to stall until restarted (#295) - Added translations for Hebrew, Slovenian, and Chinese - Updated translations - Updated to Qt 5.5.1, OpenSSL 1.0.1r, and Tor 0.2.7.6 - OS X builds now use AddressSanitizer for hardening ### Thanks This release is made possible by contributions from: Billy Burrows, John Brooks, Robin Burchell, Jeff Burdges, Colin Childs, Gabe Edwards, Patrick Gray, Kacper Kołodziej, Sarah Jamie Lewis, all of our [translators](https://www.transifex.com/ricochet-im/ricochet/), NCC Group and the Open Tech Fund, and many others. 2016-02-15T22:13:18+00:00 timesketch 2016.7 2016-07-22T08:48:28+00:00 Version 2016.7 of Timesketch 2016-07-22T08:48:28+00:00 timesketch v1.1.4 2016-11-07T21:27:20+00:00 Ricochet 1.1.4 fixes some common bugs and usability issues, updates Tor and other important dependencies, contains new and updated translations, and has other minor fixes. All users should update. You didn't miss 1.1.3 -- it was used to solve a packaging problem, but wasn't ready for a full release. The changelog below includes all changes since version 1.1.2. I apologize that this isn't the exciting-new-features release we've all been waiting for. Ricochet's development is volunteer-based, and in particular I haven't been able to dedicate as much energy to it as I've wanted to. There's a lot of interest and activity happening right now, and I think there will be some more interesting progress soon. ### Downloads - [Windows](https://ricochet.im/releases/1.1.4/ricochet-1.1.4-win-install.exe) - [(pgp)](https://ricochet.im/releases/1.1.4/ricochet-1.1.4-win-install.exe.asc) - [macOS](https://ricochet.im/releases/1.1.4/ricochet-1.1.4.1-macos.dmg) - [(pgp)](https://ricochet.im/releases/1.1.4/ricochet-1.1.4.1-macos.dmg.asc) - [Linux 32-bit](https://ricochet.im/releases/1.1.4/ricochet-1.1.4-linux-i686.tar.bz2) - [(pgp)](https://ricochet.im/releases/1.1.4/ricochet-1.1.4-linux-i686.tar.bz2.asc) - [Linux 64-bit](https://ricochet.im/releases/1.1.4/ricochet-1.1.4-linux-x86_64.tar.bz2) - [(pgp)](https://ricochet.im/releases/1.1.4/ricochet-1.1.4-linux-x86_64.tar.bz2.asc) - [Source](https://ricochet.im/releases/1.1.4/ricochet-1.1.4-src.tar.bz2) - [(pgp)](https://ricochet.im/releases/1.1.4/ricochet-1.1.4-src.tar.bz2.asc) ### Changes - Added translations for Albanian, Chinese (Hong Kong), Estonian, Italian (Italy), Norwegian Bokmål, and Portuguese (Portugal) - Updated translations for Danish, German, Russian, Czech, and Turkish - Use a software-only render to hopefully fix graphical and text issues (#367) - Also resolves #365, #358, #348, #375, #331, #389, #411, #454, #409, #442, #445, #447 - Fix parsing of links containing certain sequences (#403, #372, no security impact) - Fix 'dead keys' and other compose/ibus input methods with Linux binaries (#60) - Fix Tor configuration with HTTP proxies (#418) - Fix copying links with right click (#429) - Use combined chat window by default (#355) - Use an external tor instance when `TOR_CONTROL_{HOST,PORT,PASSWD}` is set - Fix visual bugs with window resizing during network setup - Properly display the "X is already your contact" error (#439) - Revise language selection UI to fit all of our languages (#473) - Store identity keys in ricochet.json when Tor is new enough (#227) - Disable ASAN by default for release builds (#341) - Attempt to disable use of RWX memory for improved security - Display configuration parsing errors correctly - Add support for OpenSSL 1.1 (#444) - Updated builds with Qt 5.6.2, OpenSSL 1.0.2j, and Tor 0.2.8.9 - Windows builds can now be [cross-compiled](https://github.com/ricochet-im/buildscripts/tree/master/mingw-cross) with MinGW - Re-issued macOS build as 1.1.4.1 to fix #480 (thanks @taoeffect!) ### Thanks This release is possible thanks to contributions from: Adalid Claure, basil sabee, Besnik, botherder, bungabunga, Chi-Hsun Tsai, Clon, git_in_my_anus, Grant Jacobson, Greg Slepak, HostFat, icesquare, Jacob Appelbaum, Joe Gallo, Jesper Hess Nielsen, Matt Traudt, Miguel de Moura, Mingye Wang, nomeutente, Per Peterson, Robin Burchell, Sam Schlinkert, Sascha Steinbiss, TolgaAydin, tran161, vaba, Ximin Luo, Zero King, anyone we forgot to mention, and everyone who reports bugs or supports the project. 2016-11-07T21:27:20+00:00 timesketch 20170721 2017-07-21T15:15:56+00:00 Version 20170721 of Timesketch 2017-07-21T15:15:56+00:00 timesketch 20180612 2018-06-12T06:29:42+00:00 Version 20180612 of Timesketch 2018-06-12T06:29:42+00:00 timesketch 20180613 2018-06-13T07:51:38+00:00 Timesketch release 20180613 2018-06-13T07:51:38+00:00 timesketch 20181116 2018-11-16T08:58:07+00:00 Timesketch release 20181116 2018-11-16T08:58:07+00:00 timesketch 20190207 2019-02-07T15:57:48+00:00 New release with updated analyzers, py3 support and bugfixes. 2019-02-07T15:57:48+00:00 timesketch 20191220 2019-12-20T10:14:05+00:00 New UI, more analyzers and an updated API client 2019-12-20T10:14:05+00:00 timesketch 20200131 2020-01-31T14:15:58+00:00 Release 20200131 2020-01-31T14:15:58+00:00 timesketch 20200226 2020-02-26T09:58:47+00:00 Release 20200226 2020-02-26T09:58:47+00:00 timesketch 20200227 2020-02-27T07:35:03+00:00 Release 20200227 2020-02-27T07:35:03+00:00 timesketch 20200310 2020-03-10T10:55:47+00:00 Release 20200310 2020-03-10T10:55:47+00:00 timesketch 20200319 2020-03-19T13:28:38+00:00 Release 20200319 2020-03-19T13:28:38+00:00 timesketch 20200422 2020-04-22T11:11:42+00:00 Release 20200422 2020-04-22T11:11:42+00:00 timesketch 20200507 2020-05-07T13:48:50+00:00 Release 20200507 2020-05-07T13:48:50+00:00 timesketch test 2020-05-15T14:29:19+00:00 test 2020-05-15T14:29:19+00:00 timesketch 20200710-pre 2020-07-10T15:19:00+00:00 20200710 pre release for deployment testing purposes 2020-07-10T15:19:00+00:00 timesketch 20201015-pre 2020-10-15T07:52:19+00:00 20201015 pre release 2020-10-15T07:52:19+00:00 timesketch 20201120 2020-11-20T11:13:39+00:00 Pre release to test packaging before stable release. 2020-11-20T11:13:39+00:00 timesketch 20201229 2020-12-29T22:42:51+00:00 Pre-release 20201229 2020-12-29T22:42:51+00:00 timesketch 20210224 2021-02-24T16:21:21+00:00 Pre-release for 20210224 2021-02-24T16:21:21+00:00 timesketch 20230518 2023-05-18T11:58:15+00:00 Timesketch release 20230518 2023-05-18T11:58:15+00:00 timesketch 20230526 2023-05-26T09:20:15+00:00 Version 20230526 2023-05-26T09:20:15+00:00 timesketch 20230628 2023-06-28T13:08:01+00:00 ## What's Changed * Update changelog by @berggren in https://github.com/google/timesketch/pull/2768 * Scenarios model refactor by @berggren in https://github.com/google/timesketch/pull/2672 * Ssh bruteforce analyzer by @roshanmaskey in https://github.com/google/timesketch/pull/2769 * Add missing dependency for e2e container by @berggren in https://github.com/google/timesketch/pull/2783 * 🐛 Handle None response from ip2geo by @pemontto in https://github.com/google/timesketch/pull/2770 * Fix #2784 - pandas.read_csv arguments by @jkppr in https://github.com/google/timesketch/pull/2785 * Add tzdata to all container builds by @berggren in https://github.com/google/timesketch/pull/2788 * Fix for #2738 - Analyzer not in AnalyzerList by @jkppr in https://github.com/google/timesketch/pull/2786 * Fixing #2393 - analysis of broken timelines by @jkppr in https://github.com/google/timesketch/pull/2787 * Helm k8s by @wajihyassine in https://github.com/google/timesketch/pull/2661 * Enable settings from environment (needs Flask 2.1+) by @bpereto in https://github.com/google/timesketch/pull/2417 * Add 🐀 emoji for remote access tools by @pemontto in https://github.com/google/timesketch/pull/2779 * Switch to Compose V2 by @koromodako in https://github.com/google/timesketch/pull/2654 * Return user defined aggregation name when using the API client by @sydp in https://github.com/google/timesketch/pull/2507 * Bump cryptography from 39.0.1 to 41.0.0 by @dependabot in https://github.com/google/timesketch/pull/2778 * Bump pyjwt from 1.7.1 to 2.4.0 by @dependabot in https://github.com/google/timesketch/pull/2192 * Update Helm README to refer to OSDFIR Infrastructure by @wajihyassine in https://github.com/google/timesketch/pull/2790 * DFIQ support by @berggren in https://github.com/google/timesketch/pull/2782 * Fix for importing small JSONL files by @berggren in https://github.com/google/timesketch/pull/2793 * Restyle timeline chips by @Annoraaq in https://github.com/google/timesketch/pull/2777 * Windows bruteforce analyzer by @roshanmaskey in https://github.com/google/timesketch/pull/2792 * Automate verbose analyzer output metadata collection by @jkppr in https://github.com/google/timesketch/pull/2798 * Update the event tags UI by @jkppr in https://github.com/google/timesketch/pull/2805 * UI support for verbose analyzer output by @jkppr in https://github.com/google/timesketch/pull/2797 * New UI build (automated) by @berggren in https://github.com/google/timesketch/pull/2806 ## New Contributors * @bpereto made their first contribution in https://github.com/google/timesketch/pull/2417 * @koromodako made their first contribution in https://github.com/google/timesketch/pull/2654 **Full Changelog**: https://github.com/google/timesketch/compare/20230526...20230628 2023-06-28T13:08:01+00:00 timesketch 20230721 2023-07-21T11:57:16+00:00 ## What's Changed * fixes #2809 UI bug by @jkppr in https://github.com/google/timesketch/pull/2810 * Timeline and Scenarios fixes + small UI fixes by @berggren in https://github.com/google/timesketch/pull/2808 * Show selected event in context view by @berggren in https://github.com/google/timesketch/pull/2811 * Consitent forms and cleaned up XML viewer by @berggren in https://github.com/google/timesketch/pull/2812 * Remove ports from e2e-tests by @berggren in https://github.com/google/timesketch/pull/2816 * Update Account Finder Analyzer by @jkppr in https://github.com/google/timesketch/pull/2803 * Delete sketch and list archived sketches by @berggren in https://github.com/google/timesketch/pull/2817 * Add json and tab output to CLI client by @jaegeral in https://github.com/google/timesketch/pull/2818 * [CLI] Add `output-format` as cli wide argument by @jaegeral in https://github.com/google/timesketch/pull/2819 * Update hashR analyzer by @jkppr in https://github.com/google/timesketch/pull/2820 * [CLI] refactor to use central output-format by @jaegeral in https://github.com/google/timesketch/pull/2821 * Support OpenSearch queries in DFIQ by @berggren in https://github.com/google/timesketch/pull/2822 * Add Windows Lateral Movement DFIQ scenario by @berggren in https://github.com/google/timesketch/pull/2823 * Adding hashR user documentation by @jkppr in https://github.com/google/timesketch/pull/2824 * New UI build by @berggren in https://github.com/google/timesketch/pull/2828 * Update tsdev.sh to add creation of api client and cli client by @jaegeral in https://github.com/google/timesketch/pull/2830 * fix mkdocs warnings by @jkppr in https://github.com/google/timesketch/pull/2832 * fix docs formatting by @jkppr in https://github.com/google/timesketch/pull/2833 * Add a test case for conditions with multiple words in a Sigma rule by @jaegeral in https://github.com/google/timesketch/pull/2835 * Always set active timelines by @berggren in https://github.com/google/timesketch/pull/2838 * Preserve user defined filters by @berggren in https://github.com/google/timesketch/pull/2840 * Support event list sorting (asc/desc) by @berggren in https://github.com/google/timesketch/pull/2843 * Rework comments by @jkppr in https://github.com/google/timesketch/pull/2845 * Upgrade to PyYAML 6.0.1 and NodeJS 18 by @berggren in https://github.com/google/timesketch/pull/2853 * Bump cryptography from 41.0.0 to 41.0.2 by @dependabot in https://github.com/google/timesketch/pull/2844 * Documentation updates for analyzers by @jkppr in https://github.com/google/timesketch/pull/2851 * Add timesketch analyze results to the CLI client by @jaegeral in https://github.com/google/timesketch/pull/2846 * Manage sketch attributes in the CLI client by @jaegeral in https://github.com/google/timesketch/pull/2841 * New UI build and update version numbers by @berggren in https://github.com/google/timesketch/pull/2854 **Full Changelog**: https://github.com/google/timesketch/compare/20230628...20230721 2023-07-21T11:57:16+00:00 timesketch 20230913 2023-09-13T12:06:14+00:00 ## What's Changed * [Analyzers] Spelling errors by @jaegeral in https://github.com/google/timesketch/pull/2860 * correct paramters in cli attributes method by @jaegeral in https://github.com/google/timesketch/pull/2863 * Update troubleshooting.md by @jaegeral in https://github.com/google/timesketch/pull/2866 * adding timeline info to the tsctl by @jaegeral in https://github.com/google/timesketch/pull/2870 * Feature extraction for TI data in "Windows-Bits-Client" events by @jkppr in https://github.com/google/timesketch/pull/2873 * Update Date chip to support milliseconds by @sydp in https://github.com/google/timesketch/pull/2867 * Allow API port to listen on localhost by @tomchop in https://github.com/google/timesketch/pull/2875 * Loading indicator active analyzers by @Annoraaq in https://github.com/google/timesketch/pull/2855 * OpenSearch 2.x support by @berggren in https://github.com/google/timesketch/pull/2876 * ui build 20230831 by @jkppr in https://github.com/google/timesketch/pull/2878 * Bump cryptography from 41.0.2 to 41.0.3 by @dependabot in https://github.com/google/timesketch/pull/2858 * Add TTY check for providing missing config values by @ramo-j in https://github.com/google/timesketch/pull/2850 * Don't exit with error if user chooses not to start timesketch by @pemontto in https://github.com/google/timesketch/pull/2857 * Export query result to CSV by @berggren in https://github.com/google/timesketch/pull/2882 * Run analyzers only once per timeline by @jkppr in https://github.com/google/timesketch/pull/2883 * Support overriding/extending Plaso formatter definitions by @berggren in https://github.com/google/timesketch/pull/2881 * New UI build (automated) by @berggren in https://github.com/google/timesketch/pull/2884 * Tag list refactor & bug fixes by @jkppr in https://github.com/google/timesketch/pull/2886 * Event attribute include / exclude filters by @jkppr in https://github.com/google/timesketch/pull/2888 * refactor verbose analyzer output by @jkppr in https://github.com/google/timesketch/pull/2885 * Analyzer Output UI update by @jkppr in https://github.com/google/timesketch/pull/2887 * Adding tag filter chips to sigma rules by @jkppr in https://github.com/google/timesketch/pull/2890 * Search History graph cleanup by @berggren in https://github.com/google/timesketch/pull/2891 * UI build 20230913 by @jkppr in https://github.com/google/timesketch/pull/2892 **Full Changelog**: https://github.com/google/timesketch/compare/20230721...20230913 2023-09-13T12:06:14+00:00 timesketch 20231025 2023-10-25T14:49:30+00:00 > **Note** Upgrading to this Timesketch version requires a database upgrade! See https://timesketch.org/guides/admin/upgrade/ for more details. ## What's Changed * filter chip fixes by @jkppr in https://github.com/google/timesketch/pull/2893 * Adding multi analyzer result support by @jkppr in https://github.com/google/timesketch/pull/2894 * Fix CSV upload without timestamp_desc by @jkppr in https://github.com/google/timesketch/pull/2896 * Bump cryptography from 41.0.3 to 41.0.4 by @dependabot in https://github.com/google/timesketch/pull/2904 * Deprecate Sigma status CSV usage from code by @jaegeral in https://github.com/google/timesketch/pull/2913 * Add intelligence command to the CLI client by @jaegeral in https://github.com/google/timesketch/pull/2864 * UI build 2023-10-05 by @jkppr in https://github.com/google/timesketch/pull/2926 * Fix missing plaso_formatters by @jkppr in https://github.com/google/timesketch/pull/2933 * Refactor base layout by @berggren in https://github.com/google/timesketch/pull/2929 * ui build 20231010 by @jkppr in https://github.com/google/timesketch/pull/2934 * Fix #2908 tagger bug by @jkppr in https://github.com/google/timesketch/pull/2935 * Update yeti analyzer by @tomchop in https://github.com/google/timesketch/pull/2930 * Adjusting regular expressions for features extraction by @tomchop in https://github.com/google/timesketch/pull/2932 * [Documentation] timesketch_client.TimesketchApi in api client documentation by @jaegeral in https://github.com/google/timesketch/pull/2938 * Improvements to the Yeti analyzer by @tomchop in https://github.com/google/timesketch/pull/2942 * Truncate timeline names in analyzer results by @jkppr in https://github.com/google/timesketch/pull/2945 * API client method to delete Sigma rule by @jaegeral in https://github.com/google/timesketch/pull/2924 * Fix missing sketchId in Search.vue by @jkppr in https://github.com/google/timesketch/pull/2955 * Unfurl integration by @jkppr in https://github.com/google/timesketch/pull/2897 * Copy saved search ID by @jkppr in https://github.com/google/timesketch/pull/2956 * Support emojis in new UI by @NightAcrobat777 in https://github.com/google/timesketch/pull/2951 * SSL/TLS support and authentication for SMTP by @fazledyn-or in https://github.com/google/timesketch/pull/2940 * Instantiate side panel only once by @berggren in https://github.com/google/timesketch/pull/2949 * Unit test to ensure invalid timestamp conversions do not occur by @bwhelan212 in https://github.com/google/timesketch/pull/2954 * Add DFIQ context to SearchHistory by @berggren in https://github.com/google/timesketch/pull/2957 * Sanitise HTML from Unfurl by @berggren in https://github.com/google/timesketch/pull/2959 * Context link backwards compatibility & sanitation by @jkppr in https://github.com/google/timesketch/pull/2958 * UI build 2023-10-25 by @jkppr in https://github.com/google/timesketch/pull/2960 ## New Contributors * @NightAcrobat777 made their first contribution in https://github.com/google/timesketch/pull/2951 * @fazledyn-or made their first contribution in https://github.com/google/timesketch/pull/2940 * @bwhelan212 made their first contribution in https://github.com/google/timesketch/pull/2954 **Full Changelog**: https://github.com/google/timesketch/compare/20230913...20231025 2023-10-25T14:49:30+00:00 timesketch 20231206 2023-12-06T14:12:10+00:00 ## What's Changed * Left panel timeline management by @Annoraaq in https://github.com/google/timesketch/pull/2999 * Extract Windows event logs messages attributes by @roshanmaskey in https://github.com/google/timesketch/pull/2910 * API client: Return all field for analysis sessions by @tomchop in https://github.com/google/timesketch/pull/2504 * Highlight DFIQ context card by @berggren in https://github.com/google/timesketch/pull/2996 * Introduce (large) CSV import in e2e tests by @jaegeral in https://github.com/google/timesketch/pull/2912 * "Add to Threat Intelligence" via context links by @jkppr in https://github.com/google/timesketch/pull/2980 * Graph bug and layout fix by @berggren in https://github.com/google/timesketch/pull/2994 * Feature extraction config for BITS and Terminal Services by @roshanmaskey in https://github.com/google/timesketch/pull/2974 * Adjust default example text for yeti endpoint by @tomchop in https://github.com/google/timesketch/pull/2963 * Adding a copy action to filter chips by @JohannesLks in https://github.com/google/timesketch/pull/2990 * Update to the windows deployment script by @coloradosarge in https://github.com/google/timesketch/pull/3000 * Adding and updating tooltips for icons by @jkppr in https://github.com/google/timesketch/pull/2983 * Fix hidden text by @jkppr in https://github.com/google/timesketch/pull/2965 * bug-fix for context links by @jkppr in https://github.com/google/timesketch/pull/2962 * Update for upgrade documentation by @jkppr in https://github.com/google/timesketch/pull/2967 * Removing old feature extractor analyzer by @jkppr in https://github.com/google/timesketch/pull/2969 * Update for the context_links documentation by @jkppr in https://github.com/google/timesketch/pull/2970 * Updating the feature extraction analyzer documentation by @jkppr in https://github.com/google/timesketch/pull/2973 * [tests] Add jsonl e2e tests by @jaegeral in https://github.com/google/timesketch/pull/2976 * Fix vue dependency issues with "v-calendar" by @jkppr in https://github.com/google/timesketch/pull/2989 * Mute noisy info logging in the feature extraction analyzer by @jkppr in https://github.com/google/timesketch/pull/2993 * New empty-state and left panel bugfix by @berggren in https://github.com/google/timesketch/pull/2991 * Update the analyzer timeline picker by @jkppr in https://github.com/google/timesketch/pull/3001 * UI build 20231206 by @jkppr in https://github.com/google/timesketch/pull/3002 ## New Contributors * @JohannesLks made their first contribution in https://github.com/google/timesketch/pull/2990 * @coloradosarge made their first contribution in https://github.com/google/timesketch/pull/3000 **Full Changelog**: https://github.com/google/timesketch/compare/20231025...20231206 2023-12-06T14:12:10+00:00