Skip to content

Nimstead Assure 0.7.2

Pre-release
Pre-release

Choose a tag to compare

View all tags
@github-actions github-actions released this 07 Nov 01:35
· 7 commits to main since this release
v0.7.2
19e5f81
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Agent 0.6.3. No database migration; run deploy/update.sh. Proven on real hosts since 0.7.1: the SharePoint and Exchange collectors (last_run_winsharepoint.json, last_run_winexchange.json), coverage on a Windows 11 VM with 63 apps (last_run_wincoverage.json), five more curated apps from real installer names (last_run_winapps_batch8.json), and an attack path across hosts read as confirmed (last_run_winpaths_lab.json). Not yet proven on real hosts: the unverified case of that edge (unit-tested), and the comparison with a commercial scanner (W3).

Added

  • Attack paths across hosts tell a real route from a guess (agent 0.6.3, DECISIONS 112): a sign-in edge inside a domain is confirmed when an account signed in on the first host is an administrator on the second and the first was seen connected to it, and unverified when no signed-in account is. The agent reports its own addresses, its open connections to private addresses, its Administrators group and the signed-in domain accounts' SIDs; nothing is probed.

Proven

  • SharePoint and Exchange collectors on real installs (W11): SharePoint Server Subscription Edition and Exchange Server Subscription Edition from Microsoft's trial media, in the domain lab; the agent's version equals the host's own for both (last_run_winsharepoint.json, last_run_winexchange.json). No code change was needed.

Full list: CHANGELOG.

Assets 10
Loading