Skip to content

Commit 1e624aa

Browse files
mjabascal10elmilan06JocLRojasylladaCopilot
authored
Release/v11.2.0 (#1567)
* feat: add sql query hints to code editor * feat: add SQL query suggestions to code editor * feat(application-event): enhance logging and update index for application events * update windows-events filter * feat(plugins): add new CrowdStrike plugin to collect and process security events from CrowdStrike Falcon platform * feat: add sql query hints to code editor * feat: add SQL query suggestions to code editor * feat: enhance SQL query suggestions in code editor with limits and aggregation examples * feat: enhance SQL query suggestions in code editor with limits and aggregation examples * feat(crowdstrike): add integration procedures and configuration for CrowdStrike module * feat(crowdstrike): add integration procedures and configuration for CrowdStrike module * feat(crowdstrike): implement CrowdStrike integration guide and update logs display Signed-off-by: Manuel Abascal <mjabascal10@gmail.com> * add the CrowdStrike plugin build and push it into the event processor image * fix: Incorrect cursor behavior in SQL Query Editor * fix: Incorrect cursor behavior in SQL Query Editor * fix: Incorrect cursor behavior in SQL Query Editor * fix(crowdstrike): standardize configuration keys for CrowdStrike module * feat(crowdstrike): implement CrowdStrike integration guide and update logs display Signed-off-by: Manuel Abascal <mjabascal10@gmail.com> * fix(crowdStrike): fixed configuration parameter names to maintain compatibility. * fix(crowdStrike): fixed informational message to follow standard catcher * fix(crowdstrike): standardize configuration keys for CrowdStrike module * feat(crowdstrike): update CrowdStrike integration filter and normalize log fields * fix(app-logs): update log detail terminology for clarity Signed-off-by: Manuel Abascal <mjabascal10@gmail.com> * feat(audit): enhance audit messages with enriched context and implement AuditableDTO * fix(UtmDataInputStatusService): optimize data synchronization and improve error handling * refactor: remove unused agent self * feat(agent): implement UTMStack Updater service * feat(agent): implement updater service installation and update process * feat(modulesConfig): enhance AWS config validation to include log group checks * feat(aws): enhance AWS CloudWatch Logs streaming with dynamic configuration handling and context management * feat(pipeline): update build process to include updater service * Revert "feat(pipeline): update build process to include updater service" This reverts commit e9e395d. * feat(pipeline): update build process to include updater service * feat(data-input): add checkpoint table and repository for data input status management * fix(UtmAlertServiceImpl): filter alerts to process only non parent alerts for notifications * fix(config): add .exe extension to updater service filenames for Windows builds * fix(aws): correct component naming and update routing in email settings Signed-off-by: Manuel Abascal <mjabascal10@gmail.com> * chore(CHANGELOG): update release notes for UTMStack v11.2.0 * chore(CHANGELOG): update release notes for UTMStack v11.2.0 * fix(sql-validation): format code for improved readability in balancedQuotes function Signed-off-by: Manuel Abascal <mjabascal10@gmail.com> * fix(app-logs): remove console log for cleaner output on successful log load Signed-off-by: Manuel Abascal <mjabascal10@gmail.com> * Update the log information agent/updater/service/install.go Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com> --------- Signed-off-by: Manuel Abascal <mjabascal10@gmail.com> Co-authored-by: Elena Lopez Milan <elopez@utmstack.com> Co-authored-by: JocLRojas <joc.l.rojas02@gmail.com> Co-authored-by: Yadian Llada Lopez <yadian.llada@gmail.com> Co-authored-by: Jose L Quiñones Rojas <73146718+JocLRojas@users.noreply.github.com> Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
1 parent a1c619c commit 1e624aa

File tree

116 files changed

+4280
-704
lines changed

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

116 files changed

+4280
-704
lines changed

‎.github/workflows/v11-deployment-pipeline.yml‎

Lines changed: 23 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -95,36 +95,49 @@ jobs:
9595
- name: Check out code into the right branch
9696
uses: actions/checkout@v4
9797

98-
- name: Build Linux Agent
98+
- name: Build Linux Binaries
9999
env:
100100
GOOS: linux
101101
GOARCH: amd64
102102
run: |
103103
cd ${{ github.workspace }}/agent
104104
go build -o utmstack_agent_service -v -ldflags "-X 'github.com/utmstack/UTMStack/agent/config.REPLACE_KEY=${{ secrets.AGENT_SECRET_PREFIX }}'" .
105105
106-
- name: Build Windows Agent (amd64)
106+
cd ${{ github.workspace }}/agent/updater
107+
go build -o utmstack_updater_service .
108+
109+
- name: Build Windows Binaries (amd64)
107110
env:
108111
GOOS: windows
109112
GOARCH: amd64
110113
run: |
111114
cd ${{ github.workspace }}/agent
112115
go build -o utmstack_agent_service.exe -v -ldflags "-X 'github.com/utmstack/UTMStack/agent/config.REPLACE_KEY=${{ secrets.AGENT_SECRET_PREFIX }}'" .
113116
114-
- name: Build Windows Agent (arm64)
117+
cd ${{ github.workspace }}/agent/updater
118+
go build -o utmstack_updater_service.exe .
119+
120+
- name: Build Windows Binaries (arm64)
115121
env:
116122
GOOS: windows
117123
GOARCH: arm64
118124
run: |
119125
cd ${{ github.workspace }}/agent
120126
go build -o utmstack_agent_service_arm64.exe -v -ldflags "-X 'github.com/utmstack/UTMStack/agent/config.REPLACE_KEY=${{ secrets.AGENT_SECRET_PREFIX }}'" .
121127
128+
cd ${{ github.workspace }}/agent/updater
129+
go build -o utmstack_updater_service_arm64.exe .
130+
122131
- name: Sign Windows Agents
123132
run: |
124133
cd ${{ github.workspace }}/agent
125134
signtool sign /fd SHA256 /tr http://timestamp.digicert.com /td SHA256 /f "${{ vars.SIGN_CERT }}" /csp "eToken Base Cryptographic Provider" /k "[{{${{ secrets.SIGN_KEY }}}}]=${{ secrets.SIGN_CONTAINER }}" "utmstack_agent_service.exe"
126135
signtool sign /fd SHA256 /tr http://timestamp.digicert.com /td SHA256 /f "${{ vars.SIGN_CERT }}" /csp "eToken Base Cryptographic Provider" /k "[{{${{ secrets.SIGN_KEY }}}}]=${{ secrets.SIGN_CONTAINER }}" "utmstack_agent_service_arm64.exe"
127136
137+
cd ${{ github.workspace }}/agent/updater
138+
signtool sign /fd SHA256 /tr http://timestamp.digicert.com /td SHA256 /f "${{ vars.SIGN_CERT }}" /csp "eToken Base Cryptographic Provider" /k "[{{${{ secrets.SIGN_KEY }}}}]=${{ secrets.SIGN_CONTAINER }}" "utmstack_updater_service.exe"
139+
signtool sign /fd SHA256 /tr http://timestamp.digicert.com /td SHA256 /f "${{ vars.SIGN_CERT }}" /csp "eToken Base Cryptographic Provider" /k "[{{${{ secrets.SIGN_KEY }}}}]=${{ secrets.SIGN_CONTAINER }}" "utmstack_updater_service_arm64.exe"
140+
128141
- name: Upload signed binaries as artifacts
129142
uses: actions/upload-artifact@v4
130143
with:
@@ -133,6 +146,9 @@ jobs:
133146
${{ github.workspace }}/agent/utmstack_agent_service
134147
${{ github.workspace }}/agent/utmstack_agent_service.exe
135148
${{ github.workspace }}/agent/utmstack_agent_service_arm64.exe
149+
${{ github.workspace }}/agent/updater/utmstack_updater_service
150+
${{ github.workspace }}/agent/updater/utmstack_updater_service.exe
151+
${{ github.workspace }}/agent/updater/utmstack_updater_service_arm64.exe
136152
retention-days: 1
137153

138154
build_utmstack_collector:
@@ -198,6 +214,9 @@ jobs:
198214
cp "${{ github.workspace }}/agent/utmstack_agent_service" ./dependencies/agent/
199215
cp "${{ github.workspace }}/agent/utmstack_agent_service.exe" ./dependencies/agent/
200216
cp "${{ github.workspace }}/agent/utmstack_agent_service_arm64.exe" ./dependencies/agent/
217+
cp "${{ github.workspace }}/agent/updater/utmstack_updater_service" ./dependencies/agent/
218+
cp "${{ github.workspace }}/agent/updater/utmstack_updater_service.exe" ./dependencies/agent/
219+
cp "${{ github.workspace }}/agent/updater/utmstack_updater_service_arm64.exe" ./dependencies/agent/
201220
cp "${{ github.workspace }}/agent/version.json" ./dependencies/agent/
202221
203222
- name: Login to GitHub Container Registry
@@ -241,6 +260,7 @@ jobs:
241260
cd ${{ github.workspace }}/plugins/stats; go build -o com.utmstack.stats.plugin -v .
242261
cd ${{ github.workspace }}/plugins/soc-ai; go build -o com.utmstack.soc-ai.plugin -v .
243262
cd ${{ github.workspace }}/plugins/modules-config; go build -o com.utmstack.modules-config.plugin -v .
263+
cd ${{ github.workspace }}/plugins/crowdStrike; go build -o com.utmstack.crowdstrike.plugin -v .
244264
245265
- name: Prepare Dependencies for Event Processor Image
246266
run: |

‎CHANGELOG.md‎

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
1-
# UTMStack 11.1.8 – Release Notes
1+
# UTMStack 11.2.0 – Release Notes
22

3-
The **UTMStack v11.1.8** update delivers important fixes and usability improvements to enhance stability and user experience.
3+
The **UTMStack v11.2.0** release introduces key enhancements, new integrations, and important fixes to improve system stability, performance, and user experience.
44

55
## Improvements & Fixes
6-
- Improved AWS integration: updated setup guides and more reliable log processing.
7-
6+
- Enhanced AWS integration with updated setup guides and improved log processing reliability.
7+
- Added CrowdStrike Falcon integration for advanced threat detection and response.

‎agent/config/const.go‎

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -13,6 +13,10 @@ type ProtoPort struct {
1313
TCP string
1414
}
1515

16+
const (
17+
SERVICE_UPDATER_NAME = "UTMStackUpdater"
18+
)
19+
1620
var (
1721
REPLACE_KEY string
1822

‎agent/config/linux_amd64.go‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -4,7 +4,7 @@
44
package config
55

66
var (
7-
UpdaterSelf = "utmstack_updater_self%s"
87
ServiceFile = "utmstack_agent_service%s"
8+
UpdaterFile = "utmstack_updater_service%s"
99
DependFiles = []string{"utmstack_agent_dependencies_linux.zip"}
1010
)

‎agent/config/linux_arm64.go‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -4,7 +4,7 @@
44
package config
55

66
var (
7-
UpdaterSelf = "utmstack_updater_self_arm64%s"
87
ServiceFile = "utmstack_agent_service_arm64%s"
8+
UpdaterFile = "utmstack_updater_service%s"
99
DependFiles = []string{"utmstack_agent_dependencies_linux_arm64.zip"}
1010
)

‎agent/config/macos.go‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -4,7 +4,7 @@
44
package config
55

66
var (
7-
UpdaterSelf = "utmstack_updater_self%s"
87
ServiceFile = "utmstack_agent_service%s"
8+
UpdaterFile = "utmstack_updater_service%s"
99
DependFiles = []string{}
1010
)

‎agent/config/windows_amd64.go‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -4,7 +4,7 @@
44
package config
55

66
var (
7-
UpdaterSelf = "utmstack_updater_self%s.exe"
87
ServiceFile = "utmstack_agent_service%s.exe"
8+
UpdaterFile = "utmstack_updater_service%s.exe"
99
DependFiles = []string{"utmstack_agent_dependencies_windows.zip"}
1010
)

‎agent/config/windows_arm64.go‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -4,7 +4,7 @@
44
package config
55

66
var (
7-
UpdaterSelf = "utmstack_updater_self_arm64%s.exe"
87
ServiceFile = "utmstack_agent_service_arm64%s.exe"
8+
UpdaterFile = "utmstack_updater_service%s.exe"
99
DependFiles = []string{"utmstack_agent_dependencies_windows_arm64.zip"}
1010
)

‎agent/models/version.go‎

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,6 @@
11
package models
22

33
type Version struct {
4-
Version string `json:"version"`
4+
Version string `json:"version"`
5+
UpdaterVersion string `json:"updater_version"`
56
}

‎agent/self/config/const.go‎

Lines changed: 0 additions & 6 deletions
This file was deleted.

0 commit comments

Comments
 (0)