AHA-GUI-v0.7.0b32-20200326

AHA-GUI-v0.7.0b32-20200326 changes:

√ Support new scraper features
√ Fix several minor cases where data is not shown properly
√ Don't include pipes in the list of addresses for "local addresses" under data view summary section
√ Fix data metrics for worst process failing in some case
√ Fix worst process using processes with no network connections
√ Add AHA-Scraper and os version to data view
√ Add sidebar view for new cert info for signer and timestamper
√ Fixed cases where inverse match search hiding would not work as expected
√ Various bug fixes

SHA256(AHA-GUI-v0.7.0b32-20200326.zip)= c8f7b10c411cb100de60c9b836aee2bb996f23f95cd0664f529cdd09b7424710

AHA-GUI-v0.7.0b16 20191206

AHA-GUI-v0.7.0b16 20191206 Changes

√ Massive rewrite to preferences/settings
√ Ability to use tab to progress through settings
√ No longer update files on disk if no results returned from aDolus
√ Updated to graph stream core and algo 2.0-beta (swing UI remains on 2.0 alpha since they have not released that yet)
√ Fixed search bugs
√ Renamed / improved operating system process hiding
√ Misc fixes

SHA256(AHA-GUI-v0.7.0b16-20191206.zip)= b0f27392d22bcc8ef5b88d7e2d53f4f750ae495912ce9c5be779cc109dc33801

AHA-GUI-v0.7.0b2 20191017

AHA-GUI-v0.7.0b2 20191017

√ Initial fixes to try to prevent the screen from becoming 0 by 0 in cases where the screen is smaller than the window we are requesting, also set a minimum window size of 800x600. More fixes on this coming later, as well as configurable (saveable) window size.

SHA256(AHA-GUI-v0.7.0b2-20191017.zip)= 91466ac8cd9b63a5c91c90fe2de99678e8eedacc26cc9cdbd66022d35c51d14a

v0.7.0b1 20191016

v0.7.0b1 20191016

√ Bundle windows scraper in the release zip
√ Add ability to run windows scraper from AHA-GUI (other platforms will have this ability in the future)
√ Added user preferences which initially mirror the cli args, but are saved from run to run (requires restart of app to take effect (file -> preferences or command/control comma)
√ Fixed bug with the open dialog if a filename was provided but did not point to a file on disk (now properly starts in the AHA-GUI dir instead of reverting to homedir
√ Ability to print Java environment variables for debugging purposes with --getenv
√ Misc fixes and improvements

Enjoy!

SHA256(AHA-GUI-v0.7.0b1-20191016.zip)= 6d9caa874941c97ed35600e86c1a2b1c075cf86c3adfdec3cf3058005987bdf9

v0.6.8b151 20190918

v0.6.8b151 20190918

• Fix ability to disable dns names if you had previously enabled it
• Improved threading model to hopefully keep the graph happier (i.e. not stop graphing in some cases)
• Improved auto layout speed/performance
• Fixed various bugs with zoom/scale/centering with autolayout
• Added new 'naive box' layout which tries to spread the nodes out on a grid
• Added abstractions to allow for other contributors to more easily have a place to put test layout code

SHA256(AHA-GUI-v0.6.8b151-20190918.zip)= 64198fd5ce65388766572767c5e6dd46e158c2597936919ab34927aeb5eae0d6

v0.6.8b113 20190805

Release notes:

• Guard against certain file malformations, primarily due to pipes
• Mark all pipes as internal to the host for now
• Proper support for hiding/showing layers such as TCP, UDP, PIPE, no connection, etc
• Fix Java8 incompatibilities
• Several Misc fixes

SHA256(AHA-GUI-v0.6.8b113-20190805.zip)= 436ff6e39bee35e96c92bd360a5aea28d70a41c75444978aaddc61d8df2b1cc3

v0.6.8b99 20190712

v0.6.8b99 20190712

• To take advantage of all the newest features, make sure you're using the newest AHA-Scraper (most of the new stuff is windows scraper only at the moment)
• √ Add integration to get information from aDolus using the file hashes gathered with the latest windows scraper
  • √ Works via a button in the GUI which will update the file and then re-open the updated data file in the viewer
  • √ Also works from the command line in the case you want to update a bunch of files at once/from a script/etc. (--updatefile combined with inputFile=)
  • √ Progress bar so you can see what you're waiting for in the GUI land
  • √ Progress bar also pops up if you launch from CLI, gracefully doesnt show if headless env
  • √ Fetches the aDolus score, list of known CVEs, avg of the CVE scores
  • √ Backend support to fetch/parse JSON over HTTPs that may be extended to other remote information providers in the future
  • √ Put your API key from adolus' 'api access' page in a text file called credentials.txt in the same location as AHA-GUI.jar
  • √ Attempts to warn if aDolus credentials in credentials.txt are no good
  • √ Avoid reloading the file/GUI if the user exits the file update process via the cancel button
  • √ Forwarning: using --verbose / --debug will dump gobs of flattened JSON when updating files
• √ Keep column widths in inspector when clicking on a new node
• √ Support purging/reloading graph rather than entire GUI
  • √ Faster
  • √ View wont randomly switch monitors when opening new file
  • √ View wont reload if user selects cancel
  • ! Menu selections (show/hide items) are reset to default on new file load, this may change eventually
• √ Cleanup data model and move to more correct MVC
• √ Clicking on nodes / updates to inspector should be marginally faster (still limited by GUI drawing speed)
• √ Add keyboard shortcuts
• √ Add menu to Data View
  • currently only helps close the view via keyboard shortcut, but eventually more menu items will be added
• √ Reduced default verbosity by not printing the metrics table, only platform maxes. Use --verbose to see all
• √ Improved exception handling in MouseAdapter
• √ Cleaned up some concurrency issues on file load
• √ Many many code cleanups
• √ Reduced code verbosity in AHAGUI and AHAGUIHelpers
• √ Connected Processes table should now be correct in the sidebar
• √ Entire row in score metrics section of sidebar is now colored red rather than just the metric (i.e. true now appears red too)
  • Untested but linux drawing performance may be improved via setting system properties
• ! Pipe support is still buggy, some connections may not be drawn, "listening process" list in data table is full of pipes

SHA256(AHA-GUI-v0.6.8b99-20190712.zip)= d9fcf92e49b4e0ece203803589e29116edd568f16555f7410aa1507cea283a32

v0.6.8b1 20190605

v0.6.8b1 20190605 changes:

• √ Move bottom row of buttons and checkboxes to menu bar at top of window
  • √ Supports using the mac menubar at the top of the screen on macOS unless --forceJMenu is specified as a commandline arg
• √ Add options for hiding different protocols (i.e. TCP, UDP, etc) -- somewhat hacky right now for process that have multiple protocols
• √ Continue improving 'pipe' and 'none' protocol support (newest scraper required for 'none' and hiding of processes with no sockets/pipes)
• √ Add workaround to mousemanager so that hidden nodes cannot be clicked on in graphstream-2.0 alpha
• √ Added help text that was missing for several commandline args
• √ Move baseline for build/run back to java8 for now (Should run in anything java8+)
• √ Misc fixes

SHA256(AHA-GUI-v0.6.8b1-20190605.zip)= 07ed00a621c3b4964f04e1947cbb65276317745399bf42122c5fb463485061c5

v0.6.6b11-20190504

Sorry for the "long time, no new updates", rest assured we're still working on making AHA better :)

v0.6.6b11 changes:
√ Improved file loading (use a bit more ram to save overall read operations and combine some parsing)
√ Use "human readable" descriptions for scoring rules loaded out of a new column in MetricsTable.cfg
!!! This means the MetricsTable.cfg format has changed, please see the new example for how to update yours
√ Show rules which subtract score when matched in red
√ Remove info area at the bottom since everything in the sidebar was equivalent or better
√ Update scoring info pane when switching scoring modes (e.g. 'Normal' to 'RelativeScoreBETA' will now show scoring details to RelativeScore)
√ Auto refresh the sidebar when switching scoring methods
√ Auto refresh if you change either of the checkboxes in the sidebar rather than waiting until the user clicks a new node on the graph for the new state of the checkboxes to be reflected
√ Inspector sidebar is now resizeable in the width direction
√ Resizing should now work more predictably in general
√ Fixed DNS names getting broken by a previous fix for an NPE caused by malformed data from some versions of the linux scraper
√ Fixed mismatch between the two file read loops where they handled connection states slightly differently for malformed files
√ Update to graphstream2.0-alpha
√ Attempt to squelch some graphstream and java 9+ bugs
!!! This version ships with a "hack" to force the scale to 100%, since graphstream on most platforms does not handle high dpi screens well in java9+. If you want to disable the "hack" use --noforcescale
√ Experimental support for using OS theme using '--notheme' commandline switch for those who enjoy being blinded by the light emitted from monitors
√ Misc bugfixes

SHA256(AHA-GUI-v0.6.6b11-20190504.zip)= 513b7b9a664dae0420ae0fade75900082384251f791d15932870424aca5f1f6f

AHA-GUI-v0.6.6b5-20181220

v0.6.6b5 Changes:

√ All UDP ports are now considering "listening" and will show up in the info panel and data view.
√ Improved UI appearance with --bigfont (less things cut off randomly)
√ Removed debug output of 'siblings' and 'parents' from report/data view
√ Add Address column to the "listening processes" tab of the data view
√ Use custom scorefile will no longer be selected at start unless a custom file is specified
√ Improved checks that file paths given via command line or FileChooser lead to a real file, and act accordingly
√ Improve handling of csv files that have had their line endings mangled with extra newlines/whitespace/etc.
√ Added a blank-ish machine scan to examples directory.

Known (minor) issue:
! Example scan can triggers a default camera location bug, so you have to zoom out and pan a bit. It is a mild bug, but can be somewhat annoying, sorry in advance if you hit it.

SHA256(AHA-GUI-v0.6.6b5-20181220.zip)= 8ec4bcf6546c0abbf79df6ec2a3ab2dcc546cfb63f7550627579c56de050c19a