Netglass v1.2.0
Netglass 1.2.0
New OPSEC features (all read-only):
- YAML scope import — define scope inline or import a file (
allowed:/excluded:blocks with CIDRs and*.domains) - Process ancestry — connection inspector shows the chain behind a connection (launchd → zsh → python3)
- Trust inspection — signed/unsigned, team ID, signing authority, SHA-256, temp-path / disk-image / system flags, changed-since-first-seen, network entitlements
- Periodic communication — Operations view flags regular outbound intervals per process/destination (jitter-based), exported with the evidence bundle
- Packet credential hints — Packet Inspector scans opened captures for plaintext credentials: HTTP auth/cookie headers, embedded-URL passwords, FTP/Telnet/POP3 USER/PASS, sensitive DNS names
218 tests, CI green.