From fed9c9bcabd80beb7252735582b974d05ff6db72 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?J=C3=B6rg=20Stucke?= Date: Wed, 5 Apr 2023 14:02:00 +0200 Subject: [PATCH] 4.1 release version bump and changelog update (#1011) preliminary changes for the 4.1 release --- src/version.py | 2 +- src/web_interface/templates/about.html | 74 +++++++++++++++++++++----- 2 files changed, 62 insertions(+), 14 deletions(-) diff --git a/src/version.py b/src/version.py index a8a8b5c40..c537fb15f 100644 --- a/src/version.py +++ b/src/version.py @@ -16,4 +16,4 @@ along with this program. If not, see . ''' -__VERSION__ = '4.1-dev' +__VERSION__ = '4.1' diff --git a/src/web_interface/templates/about.html b/src/web_interface/templates/about.html index 1c3a2c090..35c6ce53a 100644 --- a/src/web_interface/templates/about.html +++ b/src/web_interface/templates/about.html @@ -54,27 +54,75 @@

Change Log

-

FACT 4.1-dev

+ +

FACT 4.1 (2023-04-05)

    -
  • New or Improved Analysis +
  • Major Performance Improvements: 🎉 +
      +
    • Significantly sped up unpacking. +
        +
      • Reduced unpacking overhead which should result in a speedup especially for small files.
        • +
      • Unpacking can be several times faster for large firmware containers including many small files.
        • +
      +
      • +
    • Significantly improved scaling of analysis scheduling. +
        +
      • Depending on the core count of the system and the selected plugins, the analysis can be several times quicker.
        • +
      +
      • +
    • Significantly sped up firmware deletion (also used in "redo analysis"). +
        +
      • + + A database migration with alembic is necessary (see instructions when starting FACT for the first time after an update). +
        • +
      +
      • +
    +
    • +
  • Analysis Plugin Changes:
      -
    • Added new plugin for IPC (inter-process communication) analysis.
      • +
    • Added new plugin for IPC (inter-process communication) analysis on ELF files.
      • +
    • Improved "information_leaks" plugin (less false negatives, added detection for SVN artifacts and improved summary)
    • Improved password cracking of the "users_and_passwords" plugin.
      • -
    • Removed the "malware_scanner" plugin.
    • Improved "architecture_detection" plugin with new and more precise detection methods.
      • +
    • Improved resolution of version format strings in the "software_components" plugin.
      • +
    • Removed the "malware_scanner" (OMS) plugin.
    • -
  • - - Changed how the configuration is propagated through FACT and added validation. - Config handling in external plugins may need to be adjusted accordingly. +
  • Comparison Changes: +
      +
    • Better text file comparison (significantly faster and can be reloaded now).
      • +
    • Added a feature for finding changed configuration files to the "file_coverage" plugin.
      • +
    • -
  • Added new config option to adjust the default number of workers for each analysis plugin.
    • -
  • Added new functionality to the "File Coverage" comparison plugin to find changed configuration files.
    • -
  • Significantly sped up the file diff feature and changed it so that the page can be reloaded.
    • -
  • Added a search option to the file tree.
    • -
  • Bug fixes.
    • +
  • Web GUI Changes: +
      +
    • "Update analysis" now supports changing metadata.
      • +
    • Added summaries for included files (in addition to firmware containers).
      • +
    • Summaries now load on demand (for faster page loading and less stress on the database).
      • +
    • Added live runtime stats for analysis plugins to the plugin "cards" on the "system health" page.
      • +
    • Added indicator to signify that unpacking is halted to the "system health" page.
      • +
    • Improved "advanced search" (now "not equal" operator and more examples).
      • +
    • Added search feature to the file tree on the analysis page.
      • +
    • New icons for the file tree which support many more MIME types.
      • +
    +
    • +
  • Backend Changes: +
      +
    • + + Changed how the configuration is propagated through FACT and added validation. + Config handling in external plugins may need to be adjusted accordingly. +
      • +
    • Added new config option to adjust the default number of workers for each analysis plugin.
      • +
    • Log files for backend, frontend and database can now be configured individually.
      • +
    • Added optional authentication option for Redis.
      • +
    +
    • +
  • Improved the documentation and fixed many bugs.
+

FACT 4.0 (2022-07-21)