4.0.0

[wbooth]

What's Changed

All New User Interface

• Brand new look and feel across the entire platform.
• AlpineJS has replaced JQuery as our front-end framework.
• Bulma is our CSS framework of choice, which makes styling our templates a breeze.
• Core pages like operations, adversaries, and agents have been completely revamped to make them more powerful, insightful, and robust.

Operations Page

• Made more use of screen real estate.
• Adding a potential link now gives you the ability to edit the command before it's added.
• You can select fact values for all fact templates in a potential link, either ones from a fact source or ones collected from the operation.

Training Plugin

• UI has been refreshed to match the new UI in core CALDERA.
• Gameboard badge has been removed.
• Solution guides have been updated to reflect the changes in the new interface.

Sandcat

• Can update executors mid-operation
• New "proc" executor that directly spawns desired processes
• New "native" executor that performs various TTPs through pure Golang.
• Now provides command output for timed-out links
• New C2 channels and capabilities: SSH tunneling, FTP, Slack

Other

• REST API v2 with associated API Swagger Docs
• New open-source abilities and adversary profiles, including new collection and exfiltration capabilities.
• Timestamps in sandcat are now UTC instead of local time
• Automatic deletion of payloads is now optional
• Better storage of exfiltrated files to prevent overwriting
• More back end tests have been added
• General bug squashing and improvements

v5.0

We've begun working on v5 and are excited to bring capabilities not currently seen by automated cyber operation platforms

New Contributors

• @emmanvg made their first contribution in [VIRTS-2188] Change Rule action to a dropdown selection instead of textbox #2157
• @dependabot made their first contribution in Bump websockets from 8.1 to 9.1 #2179
• @bleepbop made their first contribution in [VIRTS-2000] Obfuscators v2 API #2188
• @neptunia made their first contribution in Caldera slack c2 final #2224
• @Sloane4 made their first contribution in Ftp c2 #2211
• @CDJellen made their first contribution in Possible fix to Issue #2315 (affects templates/abilities.html) #2321
• @cyber-arsenull made their first contribution in Change addPotentialLink to have ability: link in response. #2346
• @heatonk made their first contribution in Fix event_logs download functionality #2373
• @bernsteinj made their first contribution in Update health_api.py #2411
• @aapplebaum made their first contribution in Update health_api.py #2412
• @BCHarrell made their first contribution in Virts 3239 #2415
• @yee-jonathan made their first contribution in VIRTS-3151 Agents HEAD/GET/POST documentation #2398
• @djlawren made their first contribution in Documentation for /operations/{id}/potential-links and /operations/{i… #2404
• @damionmounts made their first contribution in Add API documentation for /contacts/{name} #2424
• @zacharylc-mitre made their first contribution in Add API documentation for the /objectives/{id} #2418
• @cmagone made their first contribution in add obfuscator api documentation #2440
• @mshkolnik22 made their first contribution in Consolidated Red and Blue templates #2536
• @ZacharyLPalmer made their first contribution in Handle Undefined Ability in Adversary Profile #2574

Full Changelog: 3.1.0...4.0.0

---

This discussion was created from the release 4.0.0.