Skip to content

Releases: WithSecureLabs/chainsaw

v2.13.1

07 Oct 19:39
8462fa2
Compare
Choose a tag to compare

This release contains the following changes of note:

  • Fixes datetime parsing when hunting/searching MFTs.

v2.13.0

04 Oct 10:12
ff392fa
Compare
Choose a tag to compare

This release contains the following changes of note:

  • Replaces dead upstream libraries with downstream replacements
    • Handles the bitrot in notatin
    • Applies bug fix PRs and handles bitrot in mft

v2.13.0-beta.0

20 Aug 19:19
3981b32
Compare
Choose a tag to compare
v2.13.0-beta.0 Pre-release
Pre-release

This release contains the following changes of note:

  • Replaces dead upstream libraries with downstream replacements
    • Handles the bitrot in notatin
    • Applies bug fix PRs and handles bitrot in mft

v2.12.0-1

22 Mar 12:51
d93f368
Compare
Choose a tag to compare

This release contains the following changes of note:

  • See v2.12.0 this just fixes CI/CD bitrot...

v2.12.0

22 Mar 12:25
70c3268
Compare
Choose a tag to compare

This release contains the following changes of note:

v2.11.0

28 Dec 18:22
Compare
Choose a tag to compare

This release contains the following changes of note:

  • Improvements to the MFT parser, allowing data streams to be extracted, decoded and written to disk.
  • Decoded MFT Datastreams can now be queried via the Search command and via the Hunt Command.

Additional information in the related PR: #210

This release addresses #190 #191. Thanks to @IppSec for the suggestion.

v2.10.4

24 Dec 14:24
8799abb
Compare
Choose a tag to compare

Changes in this release:

  • Add --skip-errors helper message when chainsaw bails from a hunt
  • Improve progress logging for hunt command, now displays elapsed time and the current artefact file being processed

v2.10.3

22 Dec 14:31
d936304
Compare
Choose a tag to compare

This release contains the following changes of note:

  • Adds -v and -vv to output debug and trace.

v2.10.2

22 Dec 10:46
cb86aac
Compare
Choose a tag to compare

This release contains the following changes of note:

  • New Chainsaw Detection Rules
  • Significant speed improvements when searching across multiple event log files

v2.10.1

27 Oct 18:21
84b72f4
Compare
Choose a tag to compare

This release contains the following changes of note:

  • Minor bug fixes
  • New Chainsaw rules
  • ARM build for Linux