Commit Graph

206 Commits

Author SHA1 Message Date
Sean Whalen
83a76ec0cd Fix aggregate report splunk conversion 2018-09-25 17:37:43 -04:00
Sean Whalen
cdb9546bc0 Add --hec-skip-certificate-verification option 2018-09-25 16:04:05 -04:00
Sean Whalen
c9177f3342 Only save to Splunk when there are things to save 2018-09-25 15:50:53 -04:00
Sean Whalen
caf6cd1872 Fix error formatting 2018-09-25 14:47:06 -04:00
Sean Whalen
fa38bea8ea Fix error output 2018-09-25 14:44:23 -04:00
Sean Whalen
eff7c552c9 Fix CLI argument logic 2018-09-25 14:26:30 -04:00
Sean Whalen
c964241cba Splunk HEC token not HEC key 2018-09-25 14:21:03 -04:00
Sean Whalen
ba3c9de9b7 Fix HEC key check 2018-09-25 14:15:09 -04:00
Sean Whalen
253d421e29 Splunk and SMTP improvements
SMTP issue #12 fixed (based on PR #13 )
2018-09-25 13:40:55 -04:00
Sean Whalen
861ee7d247 Update Splunk support 2018-09-25 13:06:27 -04:00
Sean Whalen
a1a4cbbf28 Use correct splunk sourcetype format 2018-09-25 10:01:02 -04:00
Sean Whalen
2a4f558bbc Always send creds when reconnecting to IMAP 2018-09-24 05:17:29 -04:00
Sean Whalen
b11c6d587c Fix IMAP reconnection 2018-09-21 23:45:24 -04:00
Sean Whalen
5657a27262 Use port 587 by default when sending email
Hopefully fixes issue #12
2018-09-21 08:42:44 -04:00
Sean Whalen
0a694b0a24 - Always use \n as the newline when generating CSVs 2018-09-19 11:30:34 -04:00
Sean Whalen
0989a8bb8a Fix SMTP AUTH extension not supported by server error on some SMTP servers
Issue #12
2018-09-19 08:01:30 -04:00
Sean Whalen
c051980f26 Update output example in documentation 2018-09-19 07:35:06 -04:00
Sean Whalen
6b01fc0f3f Fix .msg parsing CLI exception when msgconvert is not found in the system path 2018-09-18 21:54:26 -04:00
Sean Whalen
db4e145b7a Add User-Agent to GioIP DB download 2018-09-18 21:40:34 -04:00
Sean Whalen
68c54d4c5c Add missing sub dictionary 2018-09-17 12:40:48 -04:00
Sean Whalen
aead7ee754 Add alignment booleans to JSON output 2018-09-17 12:35:27 -04:00
Sean Whalen
3fdd5457b1 Reduce default DNS timeout to 0.5 seconds 2018-09-17 11:45:08 -04:00
Sean Whalen
d18d9cf5d0 Fix changelog typo 2018-09-17 08:04:51 -04:00
Sean Whalen
9cf113abdc Fix PSL download 2018-09-16 23:05:52 -04:00
Sean Whalen
2796fdd691 PEP 8 fix 2018-09-16 23:02:18 -04:00
Sean Whalen
5160d687f3 Update CLI docs 2018-09-16 22:56:51 -04:00
Sean Whalen
b46fec8983 4.0.0 prelease 2018-09-16 22:51:49 -04:00
Sean Whalen
e8dd04f952 Update systemd config example 2018-09-13 15:50:17 -04:00
Sean Whalen
4d0bf2723f Require sphinx==1.7.9 when building
Sphinx 1.8.0 breaks rstcheck
2018-09-13 14:48:04 -04:00
Sean Whalen
b4b2dc298a Merge branch 'master' of https://github.com/domainaware/parsedmarc 2018-09-13 13:30:27 -04:00
Sean Whalen
e274052133 3.9.7 - Completely reset IMAP connection when a broken pipe is encountered 2018-09-13 13:30:20 -04:00
Sean Whalen
0bb7a5108a Add Ater option to systemd service 2018-09-11 12:58:55 -04:00
Sean Whalen
f59c0d62fc 3.9.6 - Finish incomplete broken pipe fix 2018-09-11 11:18:56 -04:00
Sean Whalen
a6dbf807e4 3.9.5 - Refactor to use a shared IMAP connection for inbox watching and message downloads 2018-09-10 08:48:04 -04:00
Sean Whalen
b1b7f3c329 3.9.4 Fix moving/deleting emails 2018-09-06 16:26:41 -04:00
Sean Whalen
b9c4c62b00 3.9.3 - Fix crash when forensic recorts are missing Arrival-Date 2018-09-06 15:09:44 -04:00
Sean Whalen
92f4085386 fix build.sh typo 2018-09-06 13:48:36 -04:00
Sean Whalen
a6094b2144 3.9.2 - Fix PEP 8 spacing and update build.sh 2018-09-06 13:43:41 -04:00
Sean Whalen
8e102b4e95 Actually bump version to 3.9.1 2018-09-06 12:47:59 -04:00
Sean Whalen
51987ba770 3.9.1 - Use COPY and delete if an IMAP server does not support MOVE (closes issue #9) 2018-09-06 12:45:56 -04:00
Sean Whalen
bcde4bebd5 3.9.0 - Multiple bug fixes 2018-09-06 11:10:18 -04:00
Sean Whalen
f19d623d7d Reduce IMAP IDLE refresh rate to 5 minutes
G-Suite is resetting connections after 10 minutes
2018-09-05 04:55:46 -04:00
Sean Whalen
7c6a0b185a 3.8.2 2018-09-03 22:07:08 -04:00
Sean Whalen
8afa271cb7 Merge pull request #8 from mikesiegel/nameservers_args
Updated to pass nameserver arguments to all occurances of parse_repor…
2018-09-02 20:34:33 -04:00
Mike Siegel
ff8aa4fc32 Updated to pass nameserver arguments to all occurances of parse_report_record(). This significantly speeds up processing long reports from the inbox in my testing. 2018-08-30 12:04:37 -04:00
Sean Whalen
22c2e8799a 3.8.1 - Better handling of .msg files when msgconvert is not installed 2018-08-27 09:04:08 -04:00
Sean Whalen
ca0397c331 Add DKIM selector to dashboard output 2018-08-25 23:48:40 -04:00
Sean Whalen
4853537765 PEP 8 fix and more documentation 2018-08-22 06:50:59 -04:00
Sean Whalen
3954ecc595 3.8.0 - Fix saving to Elasticsearch when the to header is mising from forensic sample 2018-08-21 16:00:46 -04:00
Sean Whalen
245262d997 3.8.0 - Allow forensic to header to be missing 2018-08-21 15:53:44 -04:00