New
v1.3.4
Bug Fixes
- Fixes inoperable UI redact
selection
- Fixes UI database URI generation issue with non-standard ports
- Fixes UI search highlighting
- Fixes
profile --createcreation bug - Fixes unhandled IllegalLocationConstraintException and UnauthorizedOperation ingestion exceptions
- Fixes unhandled error when EC2 instance user data is unavailable (thanks @bytebutcher)
- Fixes inability to load multiline CSV data
- Fixes erroneous non-dependent source node attack exclusion
- Fixes Grants and CreateAction attack definition option interoperability
- Fixes attack computation off-by-one logic error
- Fixes ignored action conditions in attack definition Cypher values
- Fixes discovered attacks tally
- Fixes inadvertent Generic Policy deletion
- Fixes console message style overlap
Improvements
- Upgrades Neo4j from 3.5.13 to 4.3.2
- Adds Neo4j APOC support
- Updates Ingestor resource model logic
- Adds NatGateway EC2 ingestion support
- Adds EC2 PlacementGroup Instance associations
- Removes redundant RouteTable associations
- Adds explicit Admin relationship to all resources
- Adds UI search re-add and resource selection functionality
- Adds UI tag-based resource searching
- Adds UI PermissionsBoundary property resolution and edge stylization
- Updates dynamic graph stylization
- Adds AffectsGeneric attack definition option
- Adds ordering by
--only-attacksif specified - Adds support for list-based attack definition Descriptions
- Standardizes CreatePolicy attack logic
- Adds caching logic for attack definition translation
- Removes profile notice from
--verbose - Adds console tasklist support for function-based wait and done parameters
- Adds UI search visibility toggling using Ctrl + s
Other Changes
- Defaults ingestion to
--verbose(graphical output replaced with--pretty) - Updates UI graph defaults to display unknown nodes and edges
- Updates attack placeholder syntax from
${A}.Bto${A.B} - Updates attack pruning to remove patterns with outdegree 0
- Updates UI path searching to incorporate weight (deprecates some attack pruning logic)
- Removes Domain principal exclusion
- Removes legacy Grants option from CreateRole attack definition
- Removes User Depends from CreateGroup attack definition
- Updates attack definition placeholder regex
- Updates the ARN for Effective Admin
- Updates the hotkey for running an advanced query to Ctrl + enter
- Fixes spelling mistake in
cli.py(thanks @dmyates)