23 Commits

Author SHA1 Message Date
Evan Hosinski 3f50f20892 Enhance API error responses with JSON format, improve suspicious directory detection with worker pool implementation, and refine elimination logic with better index validation and data flow updates. Update UI for active report indicators, item expansion, and eliminated state tracking. 2025-10-12 21:58:11 -04:00
Evan Hosinski 25d99c265d Add elimination API handler, update browser logic for process tracking, and refine UI animations and modal handling. 2025-10-12 20:58:53 -04:00
Evan Hosinski 0b09092973 Refine comments in index.html for clarity, update alert message in elimination workflow, and adjust UI text for improved consistency. 2025-10-12 20:07:16 -04:00
Evan Hosinski adcad167df Add support for dynamic hosts file management, browser opening, and new favicon handling in web server. Add elimination workflow UI enhancements with better state management and design.
TODO: Test elimination per finding type in web view

Figure out where RustDesk registry persistence is located. The installer is aware of it somehow
2025-10-12 20:02:49 -04:00
Evan Hosinski 15fb9eb510 Add web-based user interface with hunting, reporting, and elimination workflow for RMM-Hunter 2025-10-12 18:53:07 -04:00
Evan Hosinski 01113551fb Add web server implementation for RMM-Hunter with API endpoints and WebSocket support 2025-10-12 18:46:59 -04:00
Evan Hosinski b47351f4ee Remove placeholder text from action descriptions in UI and clarify performEliminate function behavior. 2025-10-11 21:08:58 -04:00
Evan Hosinski c9e2e8dff8 Refactor suspicious artifact data structures, enhance eliminated state tracking, and update UI rendering for eliminated items. Add JSON marshal/unmarshal support for Binary and Directory types. 2025-10-11 21:01:07 -04:00
Evan Hosinski bde1b23753 Enhance detection logic to include process-based suspicious connection checks and refine firewall rule attributes in eliminate package. Add PID-to-process name mapping functionality. 2025-10-11 19:49:21 -04:00
Evan Hosinski d14b2837d0 Update eliminate connection logic to refine firewall rules and upgrade Scurvy library to latest version 2025-10-11 18:42:58 -04:00
Evan Hosinski 9c54a22bcf Update eliminate connection logic to refine firewall rules and upgrade Scurvy library to latest version 2025-10-11 18:06:42 -04:00
Evan Hosinski b855f0eaec Add eliminate package with functions for removing suspicious artifacts (files, directories, processes, services, scheduled tasks) and enhance detection logic to include whitelist checks and multi-indicator scoring 2025-10-11 17:22:44 -04:00
Evan Hosinski e835629643 Improve AutoRun and service detection with enhanced vendor/token matching, reduced false positives, and isolated changes 2025-10-11 15:26:42 -04:00
Evan Hosinski 53f527feff Refactor AutoRun detection to use Scurvy library, enhance suspicious entry checks, and update UI rendering for detailed info 2025-10-11 15:15:35 -04:00
Evan Hosinski 02ed2ce046 Initialize web package with placeholder file 2025-10-10 23:00:13 -04:00
Evan Hosinski 192ce28d89 Add warning modal support and checks for blocked binaries and directories
Introduce `WarnBlock` to handle non-fatal warnings displayed in a warning modal. Add pre-elimination checks to identify blocked binaries and directories based on running processes or enabled services. Enhance path normalization for robust comparisons.
2025-10-10 22:53:20 -04:00
Evan Hosinski 2b6c4eb4cd Implement TUI for managing suspicious artifacts (FilePicker, TypePicker, ListView, and DetailView)
Introduce Bubble Tea-based terminal UI to manage suspicious artifact findings, including file selection, type filtering, list view, and details.
2025-10-10 22:43:47 -04:00
KrakenTech 9d385bb6b0 Update htmlTemplate.go 2025-10-10 18:03:35 -04:00
Evan Hosinski d28b8b1211 Refine AutoRun logging to display key counts, remove redundant entry count log 2025-10-10 17:01:14 -04:00
Evan Hosinski 7cdee4b62c Enhance directory detection to handle prefix matching and eliminate duplicates
Helps to discover directories with a prefix instead of just by exact match
2025-10-10 16:57:12 -04:00
Evan Hosinski f48178f450 Add README, .gitignore, and refactor common detection constants 2025-10-10 16:20:55 -04:00
Evan Hosinski e2015b3df2 Add JSON and HTML writers for reporting Hunter findings 2025-10-10 16:06:48 -04:00
Evan Hosinski 10b1bb7ed6 Implement initial detection and data structures for suspicious artifacts 2025-10-10 15:35:17 -04:00