Releases: CERT-Polska/mquery
Releases · CERT-Polska/mquery
Version v1.6.0
Version 1.4
Version 1.4
Breaking changes
[Breaking change] mquery now users typedconfig library instead of the previous config.py file.
- if you deployed mquery using docker (configurable by environment variables)
then no action is required and this is backwards-compatible for you - if you deployed mquery natively using the default configuration, no action is required
- finally, if you deploy mquery natively and changed the default config.py, you will have to create a mquery.ini
file with your config. The format is very simple. Example of a complete config file (there are only 4 possible
configuration keys supported currently. All are optional):
[redis]
host=localhost
port=6379
[mquery]
backend=tcp://localhost:9281
plugins=
New features
- It's now possible to limit the number of yara-scanned files (#339)
- It's now possible to disallow running slow queries (#315, #312)
- Added a configurable /about page, to describe your instance (#341)
- Daemon now has a --scale flag, to automatically fork into mutliple processes (#298)
- More flexible user roles (#350, #314)
Documentation
- Mquery component documentation (#334)
- Yara support documentation (#333)
- S3 support documentation (#327)
UI Improvements
- Progress bar now shows more information (#345)
- Counter race condition fixed (#348)
- Bootstrap update and following fixes (#346,
Improvements
- A big backend improvement - jobs are now scheduled with a rq framework (#317)
- Exceptions thrown during filtering with plugins are now handled correctly (#317)
- Login is now faster - there are no unnecessary redirects (#322)
Bugfixes
- /about route fixed (#343)
- Indexing script won't skip the last few files anymore (#328)
- Actually raise errors from the API (#311)
- Fix multi-agent job completion (#282)
Others
mquery v1.3
mquery v1.2
Version 1.2
New features
- Results streaming (first results appear faster) (#59)
- Support for distributed Ursadb in the backend (#119)
- Powerful plugin support (See the documentation)
- Configurable from the web UI (#132)
- Support for Ursadb tags (for example, to tag collections as benign or malicious) (#44)
UI Improvements
- Use Monaco IDE as yara editor (#109)
- Results view improvements (#82)
- Status page improvements:
- Display file count along with dataset size (#91)
- Filter jobs by author, status and others (#152)
- Show number of errors (for example, missing files) per job (#148)
Improvements
- Much better Yara support (issue #41):
- Use FastAPI framework, instead of Flask to improve performance and get API documentation for free
- Document the API and add swagger UI to
/docs
endpoint - Cache parsed Yara rules
- Batch files when matching yara rules, to improve performance
Others
- Much better workflow for new contributors (#47)
- Various utility scripts (#134), including
command line query tool (#168) - Improved documentation
mquery v1.1
new GUI, major bug fixes
mquery v1.0
Initial stable release.