Skip to content
This repository has been archived by the owner on Nov 3, 2021. It is now read-only.

v3.1.0 MozDef: Mozilla Enterprise Defense Platform
Compare
Choose a tag to compare
@pwnbus pwnbus released this 25 Jul 15:57
· 1010 commits to master since this release
v3.1.0
f517be4
This commit was signed with the committer’s verified signature.
gene1wood Gene Wood
GPG key ID: F0A9E7DCD39E452E
Learn about vigilant mode.

Added

  • Captured the AWS CodeBuild CI/CD configuration in code with documentation
  • Support for HTTP Basic Auth in AWS deployment
  • Docker healthchecks to docker containers
  • Descriptions to all AWS Lambda functions
  • Support for alerts-* index in docker environment
  • Alert that detects excessive numbers of AWS API describe calls
  • Additional AWS infrastructure to support AWS re:Inforce 2019 workshop
  • Documentation specific to MozDef installation now that MozDef uses Python 3
  • Config setting for CloudTrail notification SQS queue polling time
  • Config setting for Slack bot welcome message

Changed

  • Kibana port from 9443 to 9090
  • AWS CloudFormation default values from "unset" to empty string
  • Simplify mozdef-mq logic determining AMQP endpoint URI
  • SQS to always use secure transport
  • CloudTrail alert unit tests
  • Incident summary placeholder text for greater clarity
  • Display of Veris data for easier viewing
  • All Dockerfiles to reduce image size, pin package signing keys and improve
    clarity

Fixed

  • Workers starting before GeoIP data is available
  • Mismatched MozDefACMCertArn parameter name in CloudFormation template
  • Duplicate mozdefvpcflowlogs object
  • Hard coded AWS Availability Zone
  • httplib2 by updating to version to 0.13.0 for python3
  • mozdef_util by modifying bulk queue to acquire lock before saving events
  • Dashboard Kibana URL
  • Unnecessary and conflicting package dependencies from MozDef and mozdef_util
  • get_indices to include closed indices
Assets 2
Loading