Hubblestack Hubble Versions Save

Hubble is a modular, open-source security compliance framework. The project provides on-demand profile-based auditing, real-time security event notifications, alerting, and reporting.

v4.5.1_fips_rc1

2 years ago

v4.5.1

2 years ago

Features Added more details about vulnerabilities in oval_scanner Fixes

  1. Windows file caching bug fix.
  2. value of mode was fixed in stat_nova

v4.5.1_rc1

3 years ago

v4.5.0_fips_rc2

3 years ago

v4.5.0_fips_rc1

3 years ago

This is the first test build regarding FIPS initiative.

v4.5.0

3 years ago

Features

  • Desalinization: removed the salt-ssh package dependency
    • ported the required modules and systems into Hubble's codebase
    • promoted Hubble's "ext" mods to be native ones
    • removed unnecessary Salt dependencies (e.g. the various message busses)
    • removed unused systems (e.g. salt-master filesystem servers, ∅mq/raet message bus, etc)
    • Hubble is still very much a Salt descendant, we simply do not need to install Salt as a dependency.
  • migrate to Python 3.7
  • removed any remaining python2 support (e.g. the six module)
  • Repair the build process for Windows platforms
  • Complete Audit system rewrite (formerly Nova).
  • Docker grains improvements

Fixes

  • Various fixes for profile signing
  • profile signing verification caching
  • Config override for files in hubble.d
  • fix various logging spam issues
    • e.g. stack traces that could be made into boring error messages
    • e.g. errors that should be info or debug messages

v4.0.0

3 years ago

Features

  • python3 support (standardized to 3.6.10 in the binaries)
  • profile signing -- for information on using this feature, see signing.msign in the extutils

Fixes

  • the various below fixes from 3.0.8 through 3.0.13 have been forward ported to 4.0.0
  • FIM can now watch single files

v3.0.13

3 years ago

Features

  • Adding a new Hubble grain that lets Hubble know if Docker is installed and running on the system or not.
  • Modified Hubble Dockerfiles to support packaging pre-built osquery.

Bug Fixes

  • Fixed windows config permissions

v3.0.12

4 years ago

Features

Releasing Hubble for CentOS8 and RHEL8

Bug Fixes

Restricted hubble config permissions.

v3.0.11

4 years ago

Features

  • Changed hubble config permissions and removed user group access from it.
  • Added exception handling in hubble schedule.

Bug Fixes

  • Fixed osqueryd issue where file read offset was wrongly set to 0 instead of last_read_location.
  • Cache file bugfix
  • Fixed a hubble_log message that was setting a bad value in the host field.
  • Fixed Osqueryd returner timestamp bug.