Mathieu Tarral

Document system-wide changes made by Ansible

2

As raised in https://github.com/IntelLabs/kAFL/pull/80#discussion_r910831103, we need to document the system-wide changes made by Ansible, so users can revert their system back into their original state if desired. Since Ansible is...

High memory usage with a large number of files

1

### Description Cozy-desktop is using too much memory at initialization, and afterwards to watch the modifications on Linux if there are a lot of files in the tree ### Steps...

File is not synced on the server but appears as "up to date"

1

### Description A set of file are not being uploaded to the server, as they appear as `up to date` in the client. ### Steps to Reproduce I don't know...

### Description Cozy loads the file that has to be synchronized in RAM. If the file is big, this can lead to serious issues. ### Steps to Reproduce 1. add...

Volatility fails to extract SSDT on Windows XP guest

1

OSWatcher log file is in this [Gist](https://gist.github.com/Wenzel/20fa59a05187627987b2866bd4107c25) Important part: ~~~ 2020-04-04 19:07:17,038 DEBUG:volatility.framework.automagic.pdbscan:Using symbol library: ntkrpamp.pdb/C40DD53A8D3D4AE3A24CE6BE866649C9-1 2020-04-04 19:07:17,068 INFO:volatility.schemas:Dependency for validation unavailable: jsonschema 2020-04-04 19:07:17,068 DEBUG:volatility.schemas:All validations will report success,...

py2neo 4.3.0 isn't compatible with the latest Neo4j DB. when using Neo4j 4.1, it throws `InvalidTransaction` errors: ~~~ 2020-05-08 04:08:16,398 ERROR:hooks.filesystem.Neo4jFilesystemHook:Invalid transaction Traceback (most recent call last): File "/home/wenzel/Projets/oswatcher/venv/lib/python3.7/site-packages/see/observer.py", line...

Ci security linux

1

This PR adds a new CI workflow, which is a copy of the existing security hook, except that it will run on a Linux image (Ubuntu 6.06 server) cc @milenkowski

use our own implementation of checksec for ELF security analysis. This has the advantage of using the guest libc to check for fortify functions, instead of the host one. However,...

With #101 's PR, we use LIEF to analyze MS-DOS executables. Some of them return `None` after the LIEF parsing. @milenkowski here is the archive containing all the failed executables:...

libguestfs API allows you to call the `file` command from the appliance to identify a file type. however it is not possible to specify the parameters. we would like to...