Ghostwriter v7.2.3
Summary
This release includes some maintenance work and a few oplog changes to improve the user experience.
CHANGELOG
[7.2.3] - 18 July 2026
Added
- Added a Now button to the End Date field in the oplog entry form
- This button sets the field to the current date and time
- Useful for editing the end date of an action after a command finishes
- Added a Default Source field to logs
- Whatever string you set here will be set as the source IP/hostname for any new log entries
- Useful if you are manually logging multiple activities from the same system
- This is an experiment; if it is useful, we will explore this for other fields
Changed
- The oplog entry edit form will now open automatically when you create a new entry
- Made oplog datetime values consistent with the server's timezone
- Ghostwriter defaults to UTC for the server
- New entries always started with the Start Date & Time set to "now" in UTC (regardless of the server timezone)
- The datetime values are always stored in the database as UTC
- Now, the oplog is aware of the server's timezone and will use it for datetime entry
Fixed
- Fixed
loaddatatrying to also load the demo BloodHound JSON during a build- This caused an error that could be confused as a build failure
loaddatanow only loadsinitial.json
Security
- Updated the Hasura GraphQL container image to v2.45.6 to take advantage of bug and security fixes