Commit Graph

699 Commits

Author SHA1 Message Date
Nodir Temirkhodjaev
eaf3a82d87 Driver: fortdev: Simplify fort_device_control_process() 2024-02-20 12:49:38 +03:00
Nodir Temirkhodjaev
f33d149ecc Driver: fortdev: Simplify fort_device_control_setconf() 2024-02-20 11:33:20 +03:00
Nodir Temirkhodjaev
ce86ac966a Driver: Enumerate processes on 1-st config
To set "apply to child" flags.
2024-02-19 19:50:57 +03:00
Nodir Temirkhodjaev
204b8d2ed7 Driver: fortpkt: Minor fix 2024-02-19 17:16:45 +03:00
Nodir Temirkhodjaev
1bef33928d Driver: Shaper: Rework packets processing, Part 2 2024-02-17 14:19:42 +03:00
Nodir Temirkhodjaev
e880ea9ae5 Driver: Shaper: Rework packets processing 2024-02-16 19:46:41 +03:00
Nodir Temirkhodjaev
1dff5f7345 UI: Prepare Rules window 2024-02-11 11:31:18 +03:00
Nodir Temirkhodjaev
d312d4db81 Driver: fortcout: Simplify ignore checks 2024-02-08 15:08:42 +03:00
Nodir Temirkhodjaev
4bcea5f848 Driver: Fix new programs ignoring for "Ignore" mode 2024-02-08 13:39:11 +03:00
Nodir Temirkhodjaev
23db9e7e39 DriverLoader: fortmm: Simpify BuildImportTableLibrary() args 2024-01-29 13:28:28 +03:00
Nodir Temirkhodjaev
5dbf21d947 DriverLoader: fortmm: Simpify InitializeModuleImage(), CopySectionTable() args 2024-01-29 12:52:20 +03:00
Nodir Temirkhodjaev
b55e1fd67b Driver: Scripts: Improve paths handling 2024-01-09 20:23:02 +03:00
Nodir Temirkhodjaev
ac5340bf6c Driver: Use "BootFilter" initial flag from service's registry key 2024-01-05 19:35:23 +03:00
Nodir Temirkhodjaev
7f36875e1d Set "NetworkProvider" group to services 2024-01-03 13:55:14 +03:00
Nodir Temirkhodjaev
c5c7c54609 UI: driver/scripts: Use \r\n; Rename "Error Code" to "Result Code" 2023-12-25 12:48:26 +03:00
Nodir Temirkhodjaev
03d8092390 Driver: fortcout: Simplify fort_callout_ale_is_zone_blocked() 2023-12-20 12:33:41 +03:00
Nodir Temirkhodjaev
e21aa986d0 Driver: fortcnf: Programs' Zones updating 2023-12-20 11:44:40 +03:00
Nodir Temirkhodjaev
d34a22f6bd Driver: fortcout: Fix Zones checking 2023-12-19 20:51:47 +03:00
Nodir Temirkhodjaev
b62807ec94 Driver: Handle accept/reject zones for programs 2023-12-19 19:25:50 +03:00
Nodir Temirkhodjaev
b1d38b5b30 Driver: fortps: Simplify fort_pstree_check_proc_conf() 2023-12-10 19:27:29 +03:00
Nodir Temirkhodjaev
576714995c Driver: fortps: Simplify fort_pstree_check_proc_conf() 2023-12-10 12:34:40 +03:00
Nodir Temirkhodjaev
5ae554a6bc Driver: Refactor process's "wildcard search" flag 2023-12-10 11:47:02 +03:00
Nodir Temirkhodjaev
0bf3ca79b3 UI: Programs: Add "Kill child processes" option 2023-12-09 19:54:43 +03:00
Nodir Temirkhodjaev
de3f99c559 Driver: Clear pending packets on device close 2023-12-04 16:48:06 +03:00
Nodir Temirkhodjaev
169a75af59 Driver: fortconf: Search by wildcard first, then by prefix 2023-12-04 16:46:17 +03:00
Nodir Temirkhodjaev
ab7ef64bba UI: AppGroup: Use "wildcard search" for "Kill Process" option 2023-11-29 12:08:17 +03:00
Nodir Temirkhodjaev
4e7143f49b UI: Fix SonarCloud warnings 2023-08-26 16:41:38 +05:00
Nodir Temirkhodjaev
56c0ebaf42 Driver: Assert that "ip6_addr_t" can't contain padding 2023-08-26 16:25:48 +05:00
Nodir Temirkhodjaev
fc95cd7f74 UI: Rename "Stop ..." to "Block ..." 2023-07-23 14:26:55 +03:00
Nodir Temirkhodjaev
45b2c7289c UI: Run scripts in minimized window 2023-07-12 16:29:24 +03:00
Nodir Temirkhodjaev
5de690a266 UI: Add "-i boot_filter" argument 2023-07-10 16:25:09 +03:00
Nodir Temirkhodjaev
230284a465 Driver: fortcnf: Simplify fort_conf_ref_exe_add_path_locked() 2023-07-09 18:48:10 +03:00
Nodir Temirkhodjaev
bacb042267 Driver: fortstat: Simplify fort_flow_context_remove_id() 2023-07-09 18:15:52 +03:00
Nodir Temirkhodjaev
812e2d32e2 Driver: fortps: Simplify fort_pstree_notify_process() 2023-07-09 17:59:28 +03:00
Nodir Temirkhodjaev
7554b735de Driver: fortcout: Check "ServiceTag" on Windows 10+ (TODO) 2023-07-09 17:50:59 +03:00
Nodir Temirkhodjaev
b9067be4ba Driver: Move "wildmatch.*" files to "3rdparty/wildmatch/" 2023-07-07 12:52:21 +03:00
Nodir Temirkhodjaev
b099e27b80 Driver: fortutl: Simplify complex conditionals 2023-07-06 13:50:46 +03:00
Nodir Temirkhodjaev
51abda843c Driver: fortprov: Simplify fort_prov_register() 2023-07-06 13:36:31 +03:00
Nodir Temirkhodjaev
a57aee92cc Driver: Check pending process count 2023-06-18 12:10:05 +03:00
Nodir Temirkhodjaev
de923fabf9 Driver: fortcout: Minor refactor 2023-06-01 11:02:26 +03:00
Nodir Temirkhodjaev
225ad1f9ae Driver: fortcout: Refactor check stack ids 2023-05-31 13:05:53 +03:00
Nodir Temirkhodjaev
bf8fad65ad Driver: fortcout: Simplify duplicate functions 2023-05-30 19:44:10 +03:00
Nodir Temirkhodjaev
e228daea19 Driver: fortcout: Simplify field indexes 2023-05-30 19:10:26 +03:00
Nodir Temirkhodjaev
b8f78d06eb Driver: Remove processes enumeration on startup 2023-05-27 16:21:29 +03:00
Nodir Temirkhodjaev
8e2c84ed20 Driver: Don't close existing connections on installation 2023-05-20 13:23:29 +03:00
Nodir Temirkhodjaev
23eeb95157 Driver: fortdev: Protect callouts reauth 2023-05-13 14:01:25 +03:00
Nodir Temirkhodjaev
a3c51262fb Driver: fortcout: Fix conf changed checks 2023-05-12 17:17:41 +03:00
Nodir Temirkhodjaev
eec20e4432 Driver: fortprov: Don't check reauth status 2023-05-12 17:15:05 +03:00
Nodir Temirkhodjaev
7e29bd622b Driver: fortmm: Simplify IsPEHeaderValid() 2023-05-09 17:10:33 +03:00
Nodir Temirkhodjaev
d086a9b8b0 Driver: fortcout: Simplify fort_callout_force_reauth_prov() 2023-05-09 16:51:18 +03:00
Nodir Temirkhodjaev
9792352f6a Driver: fortcout: Simplify fort_callout_ale_log_blocked_ip_check() 2023-05-09 16:18:07 +03:00
Nodir Temirkhodjaev
397d85b59c Driver: fortcout: Simplify fort_callout_ale_log_app_path() 2023-05-09 15:59:46 +03:00
Nodir Temirkhodjaev
a654c62af4 Driver: fortcout: Simplify fort_callout_ale_log() 2023-05-09 15:53:57 +03:00
Nodir Temirkhodjaev
680673c97a Driver: fortcout: Simplify fort_callout_ale_classify() 2023-05-09 15:38:08 +03:00
Nodir Temirkhodjaev
ce5867ec83 Driver: fortcout: Simplify fort_callout_transport_classify() 2023-05-09 15:11:20 +03:00
Nodir Temirkhodjaev
9940f16daa Driver: Always collect traffic statistics 2023-05-04 11:18:32 +03:00
Nodir Temirkhodjaev
dd9f7ee2de Driver: fortps: Simplify fort_pstree_handle_created_proc() 2023-05-01 16:56:03 +03:00
Nodir Temirkhodjaev
2a12fa3b20 Driver: Handle "Kill Process" option 2023-05-01 14:41:40 +03:00
Nodir Temirkhodjaev
efebf6b2c0 UI: Programs: Add "Kill Process" option 2023-05-01 14:03:15 +03:00
Nodir Temirkhodjaev
689422818c Driver: fortps: Fix SvcHost path checking 2023-05-01 09:17:12 +03:00
Nodir Temirkhodjaev
1fe59f5d92 Driver: fortps: Refactor processes inheritance handling, Part 4 2023-04-30 19:37:12 +03:00
Nodir Temirkhodjaev
b7632f4ad0 Driver: fortps: Refactor processes inheritance handling, Part 3 2023-04-30 18:07:22 +03:00
Nodir Temirkhodjaev
f55273c5fe Driver: fortconf: fort_conf_app_exe_find: Add context arg 2023-04-30 12:06:06 +03:00
Nodir Temirkhodjaev
2f38b81dcc Driver: fortps: Refactor processes inheritance handling, Part 2 2023-04-30 09:37:28 +03:00
Nodir Temirkhodjaev
805583c935 Driver: fortps: Refactor processes inheritance handling 2023-04-29 15:35:52 +03:00
Nodir Temirkhodjaev
af85039a83 Driver: Use assert(), not NT_ASSERT() 2023-04-29 14:39:31 +03:00
Nodir Temirkhodjaev
06a7f9700a Driver: fortps: Add comments 2023-04-29 11:49:12 +03:00
Nodir Temirkhodjaev
fa37537562 Driver: fortps: Fix processes inheritance handling 2023-04-29 11:21:16 +03:00
Nodir Temirkhodjaev
a7af945b46 Driver: fortdbg: fort_check_stack: Tweak status code 2023-04-29 09:59:25 +03:00
Nodir Temirkhodjaev
bf5d5a193f Driver: Revert debug option 2023-04-29 09:37:21 +03:00
Nodir Temirkhodjaev
85ace43982 Driver: fortdbg: Improve fort_check_stack() logging 2023-04-29 09:18:50 +03:00
Nodir Temirkhodjaev
b58a88ef44 Driver: fortdev: Force reauth via worker only 2023-04-29 09:12:19 +03:00
Nodir Temirkhodjaev
83d66ad23f Driver: fortps: Expand stack size for fort_pstree_notify() 2023-04-29 09:10:50 +03:00
Nodir Temirkhodjaev
68a3b66232 Driver: Refactor FORT_CHECK_STACK() 2023-04-29 09:09:23 +03:00
Nodir Temirkhodjaev
9f10b73aba Driver: Add FORT_CHECK_STACK() to functions 2023-04-28 20:55:43 +03:00
Nodir Temirkhodjaev
ada5f6857d Driver: Clear IRP's cancel routine before completion 2023-04-28 08:09:31 +03:00
Nodir Temirkhodjaev
f20e560ac7 Driver: fortcout: Simplify fort_callout_ale_log_blocked_ip() 2023-04-27 16:15:45 +03:00
Nodir Temirkhodjaev
9e1fe48433 Driver: Handle "Log only alerted blocked connections" flag 2023-04-27 16:09:42 +03:00
Nodir Temirkhodjaev
ea1d65f675 UI: Options: Statistics: Add "Log only alerted blocked connections" flag 2023-04-27 15:02:04 +03:00
Nodir Temirkhodjaev
8761cab4b0 Driver: fortdev: Simplify fort_device_control_app() 2023-04-27 14:43:57 +03:00
Nodir Temirkhodjaev
ef94e29c18 Driver: fortps: Fix last service's info data checking 2023-04-27 12:52:06 +03:00
Nodir Temirkhodjaev
56fa77d000 Driver: fortps: Refactor service name handling 2023-04-27 11:46:47 +03:00
Nodir Temirkhodjaev
524c28e4f6 Driver: fortps: Refactor service name length handling 2023-04-27 11:15:26 +03:00
Nodir Temirkhodjaev
8a278999c9 Driver: fortps: Improve services info data checking 2023-04-27 10:51:26 +03:00
Nodir Temirkhodjaev
c9ae50f387 Driver: fortwrk: Use fort_expand_stack() 2023-04-27 10:32:58 +03:00
Nodir Temirkhodjaev
54d6d48b20 Driver: fortdev: Enumerate processes in driver entry 2023-04-27 10:28:12 +03:00
Nodir Temirkhodjaev
d29a0eeedc Driver: fortutl: Add fort_expand_stack() 2023-04-27 10:23:12 +03:00
Nodir Temirkhodjaev
5c3af9393a Driver: fortps: Extract fort_pstree_proc_set_name() 2023-04-27 08:32:36 +03:00
Nodir Temirkhodjaev
7bca8c52b7 Driver: fortps: Update services info 2023-04-27 08:16:42 +03:00
Nodir Temirkhodjaev
3809580a73 UI: Prepare driver services info updating 2023-04-26 20:01:16 +03:00
Nodir Temirkhodjaev
519a051131 Driver: fortdev: Extract fort_device_mark_pending() 2023-04-26 17:49:45 +03:00
Nodir Temirkhodjaev
39736d2349 Driver: fortps: Remove PEB handling to track SvcHost 2023-04-26 16:31:13 +03:00
Nodir Temirkhodjaev
baaea89cf4 Driver: fort_pstree_enum_processes: Align buffer size 2023-04-26 15:54:08 +03:00
Nodir Temirkhodjaev
f4516101dc Revert "Driver: Expand kernel stack for workers"
This partially reverts commit b1a1212227.
2023-04-26 15:25:59 +03:00
Nodir Temirkhodjaev
be3e5ea0f0 Revert "Driver: Expand kernel stack for driver entry"
This reverts commit 5846e535da.
2023-04-26 15:23:11 +03:00
Nodir Temirkhodjaev
8590fe35f9 Driver: fortps: Simplify process info arg 2023-04-25 14:43:27 +03:00
Nodir Temirkhodjaev
bed81ad2e6 Driver: fortps: Simplify fort_pstree_enum_processes_loop() 2023-04-25 14:09:04 +03:00
Nodir Temirkhodjaev
5a5a41d587 Driver: fortps: Simplify fort_pstree_notify_process() 2023-04-25 14:08:31 +03:00
Nodir Temirkhodjaev
982d07d188 Driver: fortps: Call ZwQueryInformationProcess() outside of attached process 2023-04-25 12:24:33 +03:00
Nodir Temirkhodjaev
632698af80 Driver: fortps: Minor refactor of error code 2023-04-25 11:31:09 +03:00