You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: CODE_OF_CONDUCT.md
+35-14Lines changed: 35 additions & 14 deletions
Original file line number
Diff line number
Diff line change
@@ -1,3 +1,5 @@
1
+
# Code of Conduct
2
+
1
3
An open-source and open community project is one in which participants choose to work together, and in that process experience differences in language, location, nationality, and experience. In such a diverse environment, misunderstandings and disagreements happen, which in most cases can be resolved informally. In rare cases, however, behavior can intimidate, harass, or otherwise disrupt one or more people in the community, which this project will not tolerate.
2
4
3
5
A **Code of Conduct** is useful to define accepted and acceptable behaviors and to promote high standards of professional practice. It also provides a benchmark for self evaluation and acts as a vehicle for better identity of the organization.
@@ -7,7 +9,9 @@ This code (**CoC**) applies to any participant in this project's community – d
7
9
## Statement of Intent
8
10
9
11
This project is committed to maintain a **positive**[work environment](#work-environment). This commitment calls for a workplace where [participants](#participant) at all levels behave according to the rules of the following code. A foundational concept of this code is that we all share responsibility for our work environment.
12
+
10
13
## Code
14
+
11
15
1. Treat each other with [respect](#respect), professionalism, fairness, and sensitivity to our many differences and strengths, including in situations of high pressure and urgency.
12
16
1. Never [harass](#harassment) or [bully](#workplace-bullying) anyone verbally, physically or [sexually](#sexual-harassment).
13
17
1. Never [discriminate](#discrimination) on the basis of personal characteristics or group membership.
@@ -21,37 +25,50 @@ This project is committed to maintain a **positive** [work environment](#work-en
21
25
1. Step down considerately: Members of every project come and go, and the Hyperledger Project is no different. When you leave or disengage from the project, in whole or in part, we ask that you do so in a way that minimizes disruption to the project. This means you should tell people you are leaving and take the proper steps to ensure that others can pick up where you left off.
22
26
23
27
## Glossary
24
-
#### Demeaning behavior
28
+
29
+
### Demeaning behavior
30
+
25
31
is acting in a way that reduces another person's dignity, sense of self-worth or respect within the community.
26
32
27
-
#### Discrimination
33
+
### Discrimination
34
+
28
35
is the prejudicial treatment of an individual based on criteria such as: physical appearance, race, ethnic origin, genetic differences, national or social origin, name, religion, gender, sexual orientation, family or health situation, pregnancy, disability, age, education, wealth, domicile, political view, morals, employment, or union activity.
29
36
30
-
#### Insulting behavior
37
+
### Insulting behavior
38
+
31
39
is treating another person with scorn or disrespect.
32
40
33
-
#### Acknowledgement
41
+
### Acknowledgement
42
+
34
43
is a record of the origin(s) and author(s) of a contribution.
35
44
36
-
#### Harassment
45
+
### Harassment
46
+
37
47
is any conduct, verbal or physical, that has the intent or effect of interfering with an individual, or that creates an intimidating, hostile, or offensive environment.
38
48
39
-
#### Leadership position
49
+
### Leadership position
50
+
40
51
includes group Chairs, project maintainers, staff members, and Board members.
41
52
42
-
#### Participant
53
+
### Participant
54
+
43
55
includes the following persons:
56
+
44
57
* Developers
45
58
* Anyone from the Public partaking in this project's work environment (e.g. contribute code, comment on our code or specs, email us, attend our conferences, functions, etc)
46
59
47
-
#### Respect
60
+
### Respect
61
+
48
62
is the genuine consideration you have for someone (if only because of their status as participant in Hyperledger Project, like yourself), and that you show by treating them in a polite and kind way.
49
63
50
-
#### Sexual harassment
64
+
### Sexual harassment
65
+
51
66
includes visual displays of degrading sexual images, sexually suggestive conduct, offensive remarks of a sexual nature, requests for sexual favors, unwelcome physical contact, and sexual assault.
52
67
53
-
#### Unwelcome behavior
68
+
### Unwelcome behavior
69
+
54
70
Hard to define? Some questions to ask yourself are:
71
+
55
72
* how would I feel if I were in the position of the recipient?
56
73
* would my spouse, parent, child, sibling or friend like to be treated this way?
57
74
* would I like an account of my behavior published in the organization's newsletter?
@@ -61,21 +78,25 @@ Hard to define? Some questions to ask yourself are:
61
78
62
79
_Summary_: if you are unsure whether something might be welcome or unwelcome, don't do it.
63
80
64
-
#### Unwelcome sexual advance
81
+
### Unwelcome sexual advance
82
+
65
83
includes requests for sexual favors, and other verbal or physical conduct of a sexual nature, where:
84
+
66
85
* submission to such conduct is made either explicitly or implicitly a term or condition of an individual's employment,
67
86
* submission to or rejection of such conduct by an individual is used as a basis for employment decisions affecting the individual,
68
87
* such conduct has the purpose or effect of unreasonably interfering with an individual's work performance or creating an intimidating hostile or offensive working environment.
69
88
70
-
#### Workplace Bullying
89
+
### Workplace Bullying
90
+
71
91
is a tendency of individuals or groups to use persistent aggressive or unreasonable behavior (e.g. verbal or written abuse, offensive conduct or any interference which undermines or impedes work) against a co-worker or any professional relations.
72
92
73
-
#### Work Environment
93
+
### Work Environment
94
+
74
95
is the set of all available means of collaboration, including, but not limited to messages to mailing lists, private correspondence, Web pages, chat channels, phone and video teleconferences, and any kind of face-to-face meetings or discussions.
75
96
76
97
## Incident Procedure
77
98
78
-
To report incidents or to appeal reports of incidents, send email to iplsdk@linux.vnet.ibm.com create email. Please include any available relevant information, including links to any publicly accessible material relating to the matter. Every effort will be taken to ensure a safe and collegial environment in which to collaborate on matters relating to the Project. In order to protect the community, the Project reserves the right to take appropriate action, potentially including the removal of an individual from any and all participation in the project. The Project will work towards an equitable resolution in the event of a misunderstanding.
99
+
To report incidents or to appeal reports of incidents, send email to <iplsdk@linux.vnet.ibm.com> create email. Please include any available relevant information, including links to any publicly accessible material relating to the matter. Every effort will be taken to ensure a safe and collegial environment in which to collaborate on matters relating to the Project. In order to protect the community, the Project reserves the right to take appropriate action, potentially including the removal of an individual from any and all participation in the project. The Project will work towards an equitable resolution in the event of a misunderstanding.
Copy file name to clipboardExpand all lines: CONTRIBUTING.md
+3-3Lines changed: 3 additions & 3 deletions
Original file line number
Diff line number
Diff line change
@@ -146,9 +146,9 @@ To ensure consistency throughout the source code, keep these rules in mind as yo
146
146
147
147
We have very precise rules over how our git commit messages can be formatted. This leads to more readable messages that are easy to follow when looking through the project history.
148
148
149
-
Each commit message consists of a **header**, a **blank line** and a **body**. The header has a special format that includes a **type** and a **subject**.
149
+
Each commit message consists of a **header**, a **blank line** and a **body**. The header has a special format that includes a **type** and a **subject**.
150
150
151
-
```
151
+
```text
152
152
<type>: <subject>
153
153
<BLANK LINE>
154
154
<body>
@@ -158,7 +158,7 @@ Any line of the commit message cannot be longer than 100 characters! This allows
Use of the following Third-Party Software is subject to the license agreements at the URLs listed in the table below.
2
4
3
5
|Product|Copyright|URL|
4
6
|---|---|---|
5
-
|AVML|Use rights in accordance with the information displayed at: https://github.com/microsoft/avml/blob/main/LICENSE|https://github.com/microsoft/avml|
6
-
|linux_procmemdump.sh|Use rights in accordance with the information displayed at: https://creativecommons.org/licenses/by-sa/4.0|
7
-
|statx|Use rights in accordance with the information displayed at: https://github.com/tclahr/statx/blob/main/LICENSE|https://github.com/tclahr/statx|
8
-
|zip|Use rights in accordance with the information displayed at: https://infozip.sourceforge.net/license.html|https://infozip.sourceforge.net|
7
+
|AVML|Use rights in accordance with the information displayed at: <https://github.com/microsoft/avml/blob/main/LICENSE>|<https://github.com/microsoft/avml>|
8
+
|linux_procmemdump.sh|Use rights in accordance with the information displayed at: <https://creativecommons.org/licenses/by-sa/4.0>||
9
+
|statx|Use rights in accordance with the information displayed at: <https://github.com/tclahr/statx/blob/main/LICENSE>|<https://github.com/tclahr/statx>|
10
+
|zip|Use rights in accordance with the information displayed at: <https://infozip.sourceforge.net/license.html>|<https://infozip.sourceforge.net>|
UAC is a Live Response collection script for Incident Response that makes use of native binaries and tools to automate the collection of AIX, ESXi, FreeBSD, Linux, macOS, NetBSD, NetScaler, OpenBSD and Solaris systems artifacts. It was created to facilitate and speed up data collection, and depend less on remote support during incident response engagements.
45
+
**UAC (Unix-like Artifacts Collector)** is a powerful and extensible incident response tool designed for forensic investigators, security analysts, and IT professionals. It automates the collection of artifacts from a wide range of Unix-like systems, including AIX, ESXi, FreeBSD, Linux, macOS, NetBSD, NetScaler, OpenBSD and Solaris.
46
+
47
+
Whether you're handling an intrusion, conducting forensic investigations, or performing compliance checks, UAC simplifies and accelerates data collection while minimizing reliance on external support during critical incidents.
41
48
42
-
UAC reads YAML files on the fly and, based on their contents, collects relevant artifacts. This makes UAC very customizable and extensible.
*Note that UAC even runs on systems like Network Attached Storage (NAS) devices, Network devices such as OpenWrt, and IoT devices.*
88
+
*Note: UAC even runs on systems like Network Attached Storage (NAS) devices, Network devices such as OpenWrt, and IoT devices.*
76
89
77
90
## 🚀 Usage
78
91
79
92
UAC does not need to be installed on the target system. Simply download the latest version from the [releases page](https://github.com/tclahr/uac/releases), uncompress it, and launch. It's that simple!
80
93
81
-
> **Full Disk Access** permission is a privacy feature introduced in macOS Mojave (10.14) that prevents some applications from accessing important data, such as Mail, Messages, and Safari files. So it is strongly recommended that you manually [grant permission for Terminal application](https://support.apple.com/guide/mac-help/allow-access-to-system-configuration-files-mchlccb25729/mac) before running UAC from the terminal, or [grant permission for remote users](https://support.apple.com/guide/mac-help/allow-a-remote-computer-to-access-your-mac-mchlp1066/mac) before running UAC via ssh.
94
+
### 🛠 Getting Started
95
+
96
+
1. Download the latest release from the [Releases page](https://github.com/tclahr/uac/releases).
97
+
2. Uncompress the archive.
98
+
3. Execute the tool directly from the terminal.
82
99
83
-
To execute a collection, you must supply at least a profile and/or a list of artifacts, and specify the destination directory. Any additional parameters are optional.
100
+
### Examples
84
101
85
-
Examples:
102
+
<!-- markdownlint-disable MD033 -->
103
+
<details>
104
+
<summary>Click to view usage examples</summary>
86
105
87
-
Collect all artifacts based on the ir_triage profile, and save the output file to /tmp.
106
+
**Collect all artifacts based on the ir_triage profile:**
88
107
89
108
```shell
90
109
./uac -p ir_triage /tmp
91
110
```
92
111
93
-
Collect all artifacts located in the artifacts/live_response directory, and save the output file to /tmp.
112
+
**Collect memory dump and all artifacts based on the full profile:**
94
113
95
114
```shell
96
-
./uac -a ./artifacts/live_response/\* /tmp
115
+
./uac -a ./artifacts/memory_dump/avml.yaml -p full /tmp
97
116
```
98
117
99
-
Collect all artifacts based on the ir_triage profile, along with all artifacts located in the /my_custom_artifacts directory, and save the output file to /mnt/sda1.
118
+
**Collect all artifacts excluding a specific one:**
100
119
101
120
```shell
102
-
./uac -p ir_triage -a /my_custom_artifacts/\* /mnt/sda1
121
+
./uac -p full -a \!artifacts/bodyfile/bodyfile.yaml .
103
122
```
104
123
105
-
Collect a memory dump and all artifacts based on the full profile.
124
+
**Collect all artifacts based on the ir_triage profile, along with all artifacts located in the /my_custom_artifacts directory:**
106
125
107
126
```shell
108
-
./uac -a ./artifacts/memory_dump/avml.yaml -p full /tmp
127
+
./uac -p ir_triage -a /my_custom_artifacts/\* /mnt/sda1
109
128
```
110
129
111
-
Collect all artifacts based on the ir_triage profile excluding the bodyfile/bodyfile.yaml artifact.
130
+
**Collect all artifacts based on a custom profile:**
112
131
113
132
```shell
114
-
./uac -p ir_triage -a \!artifacts/bodyfile/bodyfile.yaml /tmp
Contributions are what makes the opensource community such an amazing place to learn, inspire, and create. Any contributions you make are greatly appreciated.
141
+
Contributions make the open-source community such an amazing place to learn, inspire, and create. Any contributions you make are greatly appreciated.
120
142
121
143
Have you created any artifacts? Please share them with us!
122
144
123
-
You can contribute with new artifacts, profiles, bug fixes or even propose new features. Please read our [Contributing Guide](CONTRIBUTING.md) before submitting a Pull Request to the project.
145
+
You can contribute with new artifacts, profiles, bug fixes, or propose new features. Please read our [Contributing Guide](CONTRIBUTING.md) before submitting a Pull Request to the project.
124
146
125
-
## 👨💻 Community Support
147
+
## 👨💻 Support
126
148
127
-
For general help using UAC, please refer to the [project documentation page](https://tclahr.github.io/uac-docs). For additional help, you can use one of the channels to ask a question:
149
+
For general help using UAC, please refer to the [project documentation page](https://tclahr.github.io/uac-docs). For additional help, you can use one of the following channels:
128
150
129
151
-[Discord](https://discord.com/invite/digitalforensics) (For live discussion with the community and UAC team)
130
152
-[GitHub](https://github.com/tclahr/uac/issues) (Bug reports and contributions)
131
153
-[Twitter](https://twitter.com/tclahr) (Get the news fast)
132
154
155
+
## ⭐ Support the Project
156
+
157
+
If you find UAC helpful, please give us a ⭐ on [GitHub](https://github.com/tclahr/uac)! This helps others discover the project and motivates us to improve it further.
158
+
133
159
## 📜 License
134
160
135
161
The UAC project uses the [Apache License Version 2.0](LICENSE) software license.
0 commit comments