Search Results

FeaturesImplemented the group setting and related endpoints for the setup and management of proxy configurations to assist in agent deploymentUpdated our telemetry data endpoints to be able to view all telemetry data or only data directly related to an extorti...

FeaturesAdded the ability to setup and manage proxy configurations to assist in agent deployment. View more about proxy configurations hereFixed the issue where the horizontal scrollbar at the bottom of our data grids was not visible due to the grid extending ...

FeaturesDMZ ModeOptional configuration to use a signed CA bundle for TLS communication with authentication and telemetry servers. These CA bundles are then protected from tampering or deletion by Cyber Crucible’s proprietary anti-tampering capabilities.OCSP a...

FeaturesKernel-mode Authenticode telemetryFor increased speed and reliability, certificate data for process creations and incidents will be recorded by the driver alone.This update does not remove dependencies on Windows cryptography libraries, but conducts cr...

FeaturesExecutable metadata such as product version, company name, etc. for in-memory processes are reported by the driver via kernel visibility. Normal functionality is to use user-space Windows API calls. This move to parsing in the kernel removing the (ob...

FeaturesAdded support for an optional system tray icon. This feature is disabled by default.FixesAdded workaround for issue requesting kernel Windows API hashing requests. Workaround may be removed at some point in the future if Windows issue is corrected, p...

FeaturesAdded to the Agent licenses page the ability to filter expired licenses from the grid and chart by default. This setting can be updated on the toggle above the agent licenses gridImplemented multi condition filters for a single column on the server sid...

FeaturesImplemented the endpoints for the new Group DMZ Mode settingUpdated the Deal Registration endpoints to be able to register multi-year deals with the ability to pay up front or pay yearly for multi-year dealsAdded the ability to view the root cause anal...

FeaturesKernel-mode DLL telemetryCertificate parsing and trust calculation for all loaded DLLs in the driver.FixesNone.MD5 Hashesservice.exe = f4e017fab1f1117859bcfcd4733cc439 CCRRSecMon.sys (Windows7) = 976f8826ebd5bacb1803fcf6d274a6d0 CCRRSecMon.sys ...

FeaturesNone.FixesIncreased amount of telemetry handled at once by the service for creation and injection data.Adjusted ordering of canaries for programs using unusual file iteration methods.Adjusted ACL on some canaries to better fit in with real filesystems....

FeaturesMemory modification tracking for loaded DLLs.Memory diff generation for modified DLLs.FixesHandle some non-conforming DLLs from yielding incorrect authenticode hash results.MD5 Hashesservice.exe = 7b76a84809347d1caa4f46217d7c02ad CCRRSecMon.sys (Windo...

FixesService dump files are now limited to 10 per version+thread combination.MD5 Hashesservice.exe = TBD CCRRSecMon.sys (Windows7) = 27cc77a22706f1f007f0c8f433910efd CCRRSecMon.sys (Windows8) = d94978e73452be5869b194fe234fc125 CCRRSecMon.sys (Wi...

FeaturesAI Kernel FirewallAuthenticode hash calculation speedupsSignificantly reduced memory usage for DLL telemetryIncreased visibility for memory modifications in DLLsFixesFix service recovery compatibility with 24H2MD5 Hashesservice.exe = 2a01dc8267e6bbae3...

FeaturesOption to migrate to hosted OAuth authentication server domainTask to dynamically configure REST and OAuth server URLsFixesNone.MD5 Hashesservice.exe = 171e15eb5bf2a8c2d5f13ef6711d09d0 CCRRSecMon.sys (Windows7) = 502b85e17a7103a35d5b6eb50ce0eea...

FeaturesNone.FixesReduced memory used for AI Kernel Firewall.Quicker usage of new authentication endpoints.Removed icanhazip.com calls, previously optional but no longer necessary.MD5 Hashesservice.exe = 716d0a77b44e612342007d64cb1b54aa CCRRSecMon.sys (Window...

FeaturesAdded SSO integration for our dashboard login with Microsoft Entra ID (Azure Active Directory)Users must contact Cyber Crucible and complete a few steps found here to integrate Entra ID SSO for their organization with our dashboard loginDistributor Par...

FeaturesUpdated the Sales Notification model with new types:Distributor Partners can receive alerts when their reseller subgroups create a new Deal RegistrationPartner Deal POC activityUpdated the authentication process to allow for SSO integration with Micros...

FeaturesStatus tray indicator now displays self configuration status for new installations.MD5 Hashesservice.exe = 517b27279ea728223d6dd32ecb90f2e5 CCRRSecMon.sys (Windows7) = 754908e2775c1e88e2ca693e8fc4f71b CCRRSecMon.sys (Windows8) = 50c180de...