Skip to content

Releases: lyft/cartography

0.16.0

13 Feb 01:05
cd1870e
Compare
Choose a tag to compare
  • Update docs on Neo4j versions and JRE
  • Fix #237 - some DNS nameservers were missing their last character
  • AWS - each account now determines its own region list
  • Change CRXcavator intel module to pull configuration from global Config object
  • #240 - Add analysis job for user-uploaded and duplicate EC2 Key Pairs
  • #228 - Add Github intel module

0.15.0

16 Jan 22:57
fe80775
Compare
Choose a tag to compare
  • Map DNS zones to their DNS servers
  • Fix #220 - provide IamInstanceProfile as a member in EC2Instances
  • Link AWS policies to grous/roles based on arn instead of name
  • Fix #217 - correctly ingest GCP projects without parents
  • Fix #223 and #224 - use id as primary identifier in AWS S3Buckets and EC2Instances
  • Fix AWSDNSRecord ids to include zoneid

0.14.0

06 Jan 19:39
49fbc5a
Compare
Choose a tag to compare
  • Fix query for GCP firewall ingress deny rules
  • Replace custom templating with python Template
  • Added required permissions on AWS and GCP missing from documentation
  • Update pre-commit hooks
  • Allow user to not supply Okta API key
  • Add documentation on how to write an intel module

0.13.1

25 Nov 21:58
d9fd750
Compare
Choose a tag to compare
  • Loosen up staleness rules
  • Fix #205: remove python-dateutil from setup.py since we don't use it directly
  • Fix #202: skip Okta sync if API key is undefined

0.13.0

14 Nov 18:36
b16d91d
Compare
Choose a tag to compare
  • Fix positional argument bug in SAML mapping
  • Add ELBv2 support
  • Update Python requirement to 3.6
  • Map GSuiteUsers to Human nodes

0.12.0

06 Nov 18:42
Compare
Choose a tag to compare
  • Add Okta intel module.
  • Map Okta groups to AWS roles and add Okta application reply URIs.

0.11.0

18 Oct 17:54
ab90760
Compare
Choose a tag to compare
  • Change supported version of Neo4j from 3.2 to 3.5.
  • Change AWS EC2 intel module to consume query results during ingestion.
  • Remove using of old Neo4j driver API.
  • Include projectnumber when loading GCP projects.
  • Add interesting fields to RDS databases.
  • Update incorrect Neo4j index - remove :Principal and add :AWSPrincipal.
  • Fix bug in GSuite intel module which could cause partial data ingestion.
  • Fix syntax error in Travis file.
  • Ingest Google Cloud buckets.

0.10.0

30 Sep 22:46
bf7793e
Compare
Choose a tag to compare
  • Added GSuite intel module.
  • Fixed CRXcavator intel module to ingest all extension data.
  • Fixed incorrect linking of AWS users to groups.
  • Fixed incorrect 'lastupdated' field on AWS VPC peering relationships.

0.9.0

19 Aug 21:57
cf7c79c
Compare
Choose a tag to compare
  • Added new lines to end of test files for Drift Detection tests are no longer inconsistent
  • Drift Detection: refactored reporting to use lists instead of dicts to maintain result order
  • Move GCP unit tests to tests/unit/cartography/intel
  • Add support for AWS EC2 key pairs
  • Fixed issue #123 - logic bug in import crxcavator extensions
  • Sorted collect values in boltstatementrecords to enforce consistency with each database pull

0.8.0

05 Aug 17:21
e8f1728
Compare
Choose a tag to compare
  • Added pre-commit linting
  • Drift detection: allow add_shortcuts() to have shortcuts as arguments
  • Fixed #49 - Warn and return None when a NoSuchBucket error is caught from get_bucket_acl()
  • Added CRXcavator intel module to ingest Chrome extension data
  • Fixed #104 - Drift Detection CLI failed occasionally
  • Fixed #99 - improved how AWS ELBs are determined to be internet exposed
  • IAM: fixed UnboundLocalError and added support for AWS IAM Federated Principals
  • Added Drift Detection feature to track graph changes over time