Code

Generate audit logs on login#382

Code

Merged

juggernot325 merged 54 commits intomainSpecterOps/BloodHound:mainfrom audit-log-new-actionsSpecterOps/BloodHound:audit-log-new-actionsCopy head branch name to clipboardFeb 6, 2024

+104-16

Commits

Commits on Jan 25, 2024

• feat: Initial migration and model updates for AuditLog improvements

  

  juggernot325

  authored and

  irshadaj

  committed
  0e1d356

• feat: populate actor_email for existing audit_logs

  

  juggernot325

  authored and

  irshadaj

  committed
  d0c6173

• chore: Fix audit log docs to show the actual response object instead of a generic response

  

  juggernot325

  authored and

  irshadaj

  committed
  1d08960

• feat: Log Requester IP for source and actor email with audit logs

  

  juggernot325

  authored and

  irshadaj

  committed
  6019c99

• wip: createUser audit logging via middleware

  

  juggernot325

  authored and

  irshadaj

  committed
  0f0d55a

• chore: refactor audit logging to trigger from LoggingMiddleware based on the presence of specific context

  Show description for 3d65a85
  

  juggernot325

  authored and

  irshadaj

  committed
  3d65a85

• wip: Successfully creating audit logs from middleware. Capturing failure cases.

  

  juggernot325

  authored and

  irshadaj

  committed
  86b77a3

• feat: Capture DB errors in audit logs

  

  juggernot325

  authored and

  irshadaj

  committed
  22c3e8c

• chore: remove debug logging

  

  juggernot325

  authored and

  irshadaj

  committed
  cf4b854

• chore: Refactor setting of status to receiver function

  

  juggernot325

  authored and

  irshadaj

  committed
  985d580

• wip: All "simple" audit context endpoints updated for middeware

  

  juggernot325

  authored and

  irshadaj

  committed
  29673a9

• fix: Fix a few bugs found during testing

  

  juggernot325

  authored and

  irshadaj

  committed
  a05ba51

• fix: Remove doc for non-existent POST /api/v2/saml endpoint

  

  juggernot325

  authored and

  irshadaj

  committed
  cd78c04

• wip: Refactor to simplify setting of AuditCtx in endpoints

  

  juggernot325

  authored and

  irshadaj

  committed
  9cb8a3d

• fix: registration issue after rebase

  superlinkx

  committed
  e1d81bd

Commits on Jan 26, 2024

• tasks 6 and 7 for #345 (#357)

  Show description for 3ac13c1
  irshadaj

  authored
  3ac13c1

Commits on Jan 29, 2024

• Merge remote-tracking branch 'origin/main' into populate-audit-log-fields

  superlinkx

  committed
  fd32507

• redo IP parsing for changed requirements (#362)

  irshadaj

  authored
  2a14ff5

Commits on Jan 30, 2024

• feat: audit log steel thread (#364)

  Show description for 602d04b
  

  superlinkx

  and

  irshadaj

  authored
  602d04b

• chore: steel thread cleanup (#365)

  Show description for 6fe1f94
  

  7 peopleauthored
  6fe1f94

• add eula_accepted to user audit data (#371)

  irshadaj

  authored
  6810bd3

Commits on Jan 31, 2024

• audit logs for auth tokens and secrets (#372)

  Show description for 0482b61
  irshadaj

  authored
  0482b61

• Merge branch 'main' into populate-audit-log-fields

  superlinkx

  committed
  af01314

• Merge remote-tracking branch 'origin/main' into populate-audit-log-fields

  superlinkx

  committed
  9ff9831

• feat: UpdateAssetGroup, UpdateAssetGroupSelector, DeleteAssetGroupSelector, CreateSAMLIdentityProvider, and UpdateSAMLIdentityProvider have audit log support (#374)

  Show description for 3902523
  superlinkx

  authored
  3902523

• more auth handlers for audit log (#373)

  Show description for d744c31
  irshadaj

  authored
  d744c31

• chore: update documentation for our new commit_id field and intent status

  superlinkx

  committed
  061dc91

• Generate audit log entries on unauthorized access attempts (#375)

  Show description for 4cd2264
  juggernot325

  authored
  4cd2264

Commits on Feb 1, 2024

• chore: change source column to TEXT

  Show description for 13f4160
  juggernot325

  committed
  13f4160

• rename audit log source column, add indices

  irshadaj

  committed
  2a2c839

• Revert "rename audit log source column, add indices"

  Show description for cc16a11
  juggernot325

  committed
  cc16a11

• chore: rename audit_log.source as 'source' is a reserved keyword in postgres

  juggernot325

  committed
  2624969

• chore: add additional fields to user.AuditData

  juggernot325

  committed
  c36c609

• feat: WIP - create audit log entries on login

  juggernot325

  committed
  61427c1

Commits on Feb 2, 2024

• chore: properly set the audit log status if there was an error upon login

  juggernot325

  committed
  d1b66da

• chore: remove debug logging

  juggernot325

  committed
  ac50e4f

• chore: remove reference code

  juggernot325

  committed
  15b24c5

• chore: capture error messages in audit logs on failure

  juggernot325

  committed
  11cbfce

• chore: include RequestID in login audit logs

  juggernot325

  committed
  f37e282

• Refactored unauthorized access audit logging: (#381)

  Show description for eb5e741
  sircodemane

  authored
  eb5e741

• chore: WIP - Refactor audit loggin in authenticator

  juggernot325

  committed
  7bb94e7

• chore: cleanup before review

  juggernot325

  committed
  0719913

• Merge branch 'main' into populate-audit-log-fields

  juggernot325

  committed
  847c92c

Commits on Feb 5, 2024

• Merge branch 'main' into audit-log-new-actions

  juggernot325

  committed
  a713b3f

• Merge branch 'populate-audit-log-fields' into audit-log-new-actions

  juggernot325

  committed
  47735bd

• chore: refactor login auditing to use 2-record method

  juggernot325

  committed
  8ae1344

• chore: remove debug logging

  juggernot325

  committed
  0584311

• chore: update mocks

  juggernot325

  committed
  c92a9c7

• fix: move generate.go to separate package

  juggernot325

  committed
  c106534

• Merge branch 'main' into audit-log-new-actions

  juggernot325

  committed
  910a342

• Merge branch 'main' into audit-log-new-actions

  juggernot325

  committed
  dfd5b2c

Commits on Feb 6, 2024

• chore: address PR comments. Small refactor on parseUserIp to strip the port

  juggernot325

  committed
  e8fb51c

• Merge branch 'main' into audit-log-new-actions

  juggernot325

  committed
  be03293

• fix: always populate actor fields if a user was found in the DB

  juggernot325

  committed
  047465c