Ecosyste.ms: Timeline

Browse the timeline of events for every public repo on GitHub. Data updated hourly from GH Archive.

Velocidex/velociraptor

misje opened an issue on Velocidex/velociraptor
Compact column buttons are offset and unreachable in very wide tables
If a table is large and cannot fit, the new compact/expand buttons are placed with a huge offset once the table is scrolled horizontally. This is hard to screenshot: ![2024-10-27_22-18_1](https:...
misje opened a pull request on Velocidex/velociraptor
Replace hard-coded timestamps with the vars. StartTime/EndTime
The Generic.Client.Stats plotting VQL suggestion uses two hard-coded timestamps and thus no longer works (especially since the timestamps are both a long time ago in the past). Instead, use the Sta...
misje created a comment on an issue on Velocidex/velociraptor
Here is a very simple reproducible Markdown cell: `{{ Query "SELECT timestamp(epoch=now()) AS Ts FROM scope()" | LineChart }}`

View on GitHub

scudette created a comment on an issue on Velocidex/velociraptor
Timestamps are now always strings in ISO format with a timezone. You might need to change your elastic schema or drop the index to have it recreate the schema.

View on GitHub

D-V-W opened an issue on Velocidex/velociraptor
Windows.Hayabusa.Rules Upload to elastic is broken
after the 01/10/24 update to the Windows.Hayabusa.Rules artifact that added timestamp(epoch=System.TimeCreated.SystemTime) AS Timestamp to every select and to the where clause query. the ability to...
Kirill51857 starred Velocidex/velociraptor
FelixOhlhof starred Velocidex/velociraptor
scudette deleted a branch Velocidex/velociraptor

temporal

scudette pushed 1 commit to master Velocidex/velociraptor
  • Added temporal correlation type. (#3855) 8c0ff2e

View on GitHub

scudette closed a pull request on Velocidex/velociraptor
Added temporal correlation type.
scudette pushed 1 commit to temporal Velocidex/velociraptor

View on GitHub

scudette opened a pull request on Velocidex/velociraptor
Added temporal correlation type.
scudette created a branch on Velocidex/velociraptor

temporal - Digging Deeper....

scudette created a comment on an issue on Velocidex/velociraptor
The javascript is minidied so it makes it hard to know where the error occurs. Can you please click on the link in the top right and the pretty print icon (looks like `{}` ) and attach the screens...

View on GitHub

misje created a comment on an issue on Velocidex/velociraptor
![2024-10-26_13-27](https://github.com/user-attachments/assets/d84bfa1b-674c-4822-bce1-7b19ef1f5256)

View on GitHub

misje created a comment on an issue on Velocidex/velociraptor
I don't have the same dataset and cannot reproduce it any more, but I remember from the console output that there was a NaN exception of some sort. Definitely related to the plot, as it only crashe...

View on GitHub

scudette created a comment on an issue on Velocidex/velociraptor
Can you please check the JavaScript console for any exceptions? The interfaced should not be crashing

View on GitHub

misje opened an issue on Velocidex/velociraptor
Impossible to delete "broken" event artifact notebook
In order to delete a event artifact notebook, you need to first navigate to the notebook tab in the events viewer, then click the delete button: ![2024-10-26_12-56](https://github.com/user-attac...
markfsanderson starred Velocidex/velociraptor
guan4tou2 starred Velocidex/velociraptor
scudette pushed 1 commit to master Velocidex/velociraptor
  • Initial implementation of Sigma correlations (#3853) 65d6af8

View on GitHub

scudette created a branch on Velocidex/velociraptor

correlations - Digging Deeper....

misje created a comment on an issue on Velocidex/velociraptor
I'm a bit slow; I found the variables. That solves my issue for now, although I still think `SELECT * FROM source()` possibly returning nothing will be confusing for users and might raise bug repor...

View on GitHub

misje closed an issue on Velocidex/velociraptor
source() without an end_time argument no longer works in event artifact notebooks
In the latest build/release, simply running `SELECT * FROM source()` in an event artifact notebook no longer works (I get no results). It works if I add `end_time`, say `source(end_time=now())`.
scudette created a comment on an issue on Velocidex/velociraptor
It is working as intended for this release - we are discussing how to fix the user interface for the next release. The env variables should be visible in your VQL as they are set by the GUI whe...

View on GitHub

misje created a comment on an issue on Velocidex/velociraptor
What is the quick fix or workaround for this at the moment? For writing vql_suggesstions, for instance. Do I just add an end_time with a random future timestamp to get anything to show up? A notebo...

View on GitHub

scudette created a comment on an issue on Velocidex/velociraptor
The timeline viewer is used for quick preview but in the notebooks we want to have a feature that we can use to update parameters. So for this use case we will have start time and end time as tim...

View on GitHub

Load more