github-actions[bot]
57647583cc
Add new iOS versions and build numbers ( #569 )
...
Co-authored-by: DonnchaC <DonnchaC@users.noreply.github.com >
2024-10-29 04:17:03 +01:00
Donncha Ó Cearbhaill
cd99b293ed
Merge pull request #563 from mvt-project/feature/add-package-detections
...
Add additional detections for suspicious packages
2024-10-24 17:37:30 +02:00
Donncha Ó Cearbhaill
5fe8238ef0
Update tests to work with the new side-loading detections
2024-10-24 17:35:34 +02:00
Donncha Ó Cearbhaill
1d44ae3987
Add detections for side-loaded apps, and deduplicate results
2024-10-24 17:19:58 +02:00
Donncha Ó Cearbhaill
bb68e41c07
Add detection for disabled system packages
2024-10-24 16:48:03 +02:00
Donncha Ó Cearbhaill
787b0c1f48
Merge pull request #562 from mvt-project/fix-docker-and-docs
...
Improve Docker image building and add Docker info to docs
2024-10-23 15:25:52 +02:00
Donncha Ó Cearbhaill
83c1bbf714
Revert "Make multiplatform images"
...
This reverts commit 17b625f311 .
2024-10-23 15:22:11 +02:00
Donncha Ó Cearbhaill
17b625f311
Make multiplatform images
2024-10-23 15:16:28 +02:00
Donncha Ó Cearbhaill
7772d2de72
Add build dependencies for pyahocorasick
2024-10-23 15:10:11 +02:00
Donncha Ó Cearbhaill
37705d11fa
Add checksum for ABE jar
2024-10-23 14:57:03 +02:00
Donncha Ó Cearbhaill
319bc7e9cd
Switch docker build to use local context rather than pulling
2024-10-23 14:56:35 +02:00
Donncha Ó Cearbhaill
62cdfa1b59
Add info to docs on using docker image
2024-10-23 13:19:34 +02:00
Donncha Ó Cearbhaill
cbb78b7ade
Update pip version in image to try fix package build issue
2024-10-23 13:19:10 +02:00
Donncha Ó Cearbhaill
4598293c82
Generate ADB key on first run to avoid static key in image
2024-10-23 13:18:43 +02:00
Donncha Ó Cearbhaill
6e0cd23bbc
Add license to Docker image metadata
2024-10-23 13:17:47 +02:00
Donncha Ó Cearbhaill
d6f3561995
Fix docs build dependencies
2024-10-23 12:34:47 +02:00
Donncha Ó Cearbhaill
19b3b97571
Build Docker image on release rather than on branch ( #561 )
...
* Build image on release
* Allow workflow to be trigger manually outside of releases
2024-10-23 12:04:53 +02:00
Donncha Ó Cearbhaill
2c72d80e7c
Fix action which updates iOS verisons and build numbers ( #560 )
2024-10-23 11:55:16 +02:00
Donncha Ó Cearbhaill
720aeff6e9
Add workflow for building Docker image ( #559 )
2024-10-23 11:53:55 +02:00
Donncha Ó Cearbhaill
863de4f543
Fix crash Handling empty adb key list ( #558 )
2024-10-23 11:50:08 +02:00
Donncha Ó Cearbhaill
3afe218c7c
Add support for check APK certificate hash IOCs ( #557 )
...
* Fix bug loading indicators which I introduced in 81b647b
* Add support for matching on APK certificate hash IOCs
2024-10-18 16:35:50 +02:00
Donncha Ó Cearbhaill
665806db98
Add initial parser for ADB state in Dumpsys ( #547 )
...
* Add initial parser for ADB dumpsys
* Add ADBState tests and support for AndroidQF and
check-adb
* Handle case where ADB is not available in device dumpsys
2024-10-18 15:31:25 +02:00
Tek
a03f4e55ff
Adds androidqf files module ( #541 )
...
* Adds androidqf files module
* Add new files module to module list
---------
Co-authored-by: Donncha Ó Cearbhaill <donncha.ocearbhaill@amnesty.org >
2024-10-17 18:32:23 +02:00
Donncha Ó Cearbhaill
81b647beac
Add basic support for IP indicators in MVT ( #556 )
...
* Add prelimary ipv4-addr ioc matching support under collection domains
* Add IP addresses as a valid IOC type
This currently just supports IPv4 addresses which
are treated as domains internally in MVT.
---------
Co-authored-by: renini <renini@local>
2024-10-17 18:20:17 +02:00
Donncha Ó Cearbhaill
5ef19a327c
Fix error reporting for update check failures ( #555 )
2024-10-17 13:26:53 +02:00
Donncha Ó Cearbhaill
f4bf3f362b
Refactor CLI help messages to make the CLI code more readable and maintainable. ( #554 )
...
* - modified help message string storage and referencing for consistency
- grammar correction to docs/android/download_apks.md
- changed ios backup help message from a format string that would reference
and explicitly print the environment variable, to printing the name of the
environment variable itself
* Fix formatting for help message refactor
---------
Co-authored-by: jazzy0verflow <hi@ra0x1duk3.mozmail.com >
Co-authored-by: kh0rvus <50286871+kh0rvus@users.noreply.github.com >
2024-10-17 12:28:42 +02:00
Tek
7575315966
Adds timeout to update checks ( #542 )
...
Co-authored-by: Donncha Ó Cearbhaill <donncha.ocearbhaill@amnesty.org >
2024-10-17 11:56:05 +02:00
Tek
9678eb17e5
Fixes a minor bug in IOC import ( #553 )
2024-10-17 11:36:33 +02:00
Tek
7303bc06e5
Adds recovery of sqlite db when db is opened ( #516 )
...
Co-authored-by: Donncha Ó Cearbhaill <donncha.ocearbhaill@amnesty.org >
2024-10-17 11:28:13 +02:00
Donncha Ó Cearbhaill
477f9a7f6b
Fix CI badge ( #552 )
2024-10-16 17:11:59 +02:00
Tek
aced1aa74d
Fixes a bug in Android SMS parsing #526 ( #530 )
...
Co-authored-by: Donncha Ó Cearbhaill <donncha.ocearbhaill@amnesty.org >
2024-10-16 16:56:06 +02:00
Tek
052c4e207b
Improves STIX2 support and testing ( #523 )
...
* Improves STIX2 support and testing
* Adds documentation on STIX2 support in MVT
---------
Co-authored-by: Donncha Ó Cearbhaill <donncha.ocearbhaill@amnesty.org >
2024-10-16 16:47:10 +02:00
Donncha Ó Cearbhaill
821943a859
Merge branch 'besendorf/main'
2024-10-16 16:36:07 +02:00
Donncha Ó Cearbhaill
f4437b30b1
Fix black formatting
2024-10-16 16:35:28 +02:00
besendorf
d4946b04bf
Update deprecated functions and other small changes ( #533 )
...
* also search for STIX2 files in directories in MVT_STIX2
* update datetime deprecations
* add variable declaration in __init__
* add str to return typed in cmd_download_apks.py
* change dictionary creations to dictionary literals
* replace call to set() with set literal
* fix incorrect docstrings
* remove whitespace according to PEP8: E203
* remove whitespace according to PEP8: E203
* remove unreachable return statement
* use Union[] instead of | operator for python 3.8/9 compatability
* Fix ruff formating of files
* Revert "also search for STIX2 files in directories in MVT_STIX2"
This reverts commit 287a11a2ee . We
have this change as a seperate PR in #527 .
---------
Co-authored-by: Janik Besendorf <jb@reporter-ohne-grenzen.de >
Co-authored-by: Donncha Ó Cearbhaill <donncha.ocearbhaill@amnesty.org >
2024-10-16 16:29:02 +02:00
Donncha Ó Cearbhaill
a15d9f721d
Merge pull request #544 from mvt-project/feature/use-pyproject-toml
...
Configure project to use pyproject.toml and consistent CI and test tooling
2024-10-16 16:06:23 +02:00
Donncha Ó Cearbhaill
10e7599c6e
Merge branch 'main' into feature/use-pyproject-toml
2024-10-16 15:40:36 +02:00
Janik Besendorf
a44688c501
change recursive search for indicator files from os.walk to glob.glob
2024-10-08 15:49:03 +02:00
github-actions[bot]
c66a38e5c0
Add new iOS versions and build numbers ( #549 )
...
Co-authored-by: DonnchaC <DonnchaC@users.noreply.github.com >
2024-10-04 10:53:41 +02:00
Donncha Ó Cearbhaill
ee2fab8d87
Merge main and add dependency change
2024-09-30 16:53:50 +02:00
Donncha Ó Cearbhaill
f8e2b0921a
Merge pull request #509 from scribblemaniac/multistage-docker
...
Docker improvements (multistage builds, separate os images, and more)
2024-09-30 12:50:51 +01:00
Donncha Ó Cearbhaill
5225600396
Remove duplicate CI file
2024-09-30 13:34:56 +02:00
Donncha Ó Cearbhaill
2c4c92f510
Try using package name as path
2024-09-30 13:21:02 +02:00
Donncha Ó Cearbhaill
656feb1da7
Try make sure pytest uses the local editable install
2024-09-30 13:11:21 +02:00
Donncha Ó Cearbhaill
79dd5b8bad
Temporarily disable automatic type checks in CI
...
MyPy checks should be renabled once the types are fixed in
https://github.com/mvt-project/mvt/issues/545
2024-09-30 12:53:17 +02:00
Donncha Ó Cearbhaill
f79938b082
Run ruff on PRs
2024-09-30 12:44:21 +02:00
Donncha Ó Cearbhaill
822536a1cb
Add formating change made by ruff linter
2024-09-30 12:41:46 +02:00
Donncha Ó Cearbhaill
69fb8c236f
Simplify the CI tests using the Makefile
2024-09-30 12:39:21 +02:00
Donncha Ó Cearbhaill
5dfa0153ee
Restructure MVT to use pyproject.toml
2024-09-30 12:26:29 +02:00
Donncha Ó Cearbhaill
d79f6cbd7d
Run black linter on pull requests ( #543 )
...
The black linter was only being run on pushes to main and not on opened PRs. We should run on both to avoid linting errors after a PR is merged.
2024-09-30 11:49:00 +02:00