Skip to content

Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.

0.3.0

Added

  • completion command for generating and installing shell completions (bash, zsh, fish)
  • --all flag for images command to fetch images from all configured sandboxes
  • --suspicious flag for report command to include suspicious detects
  • --open-browser flag for scan, scan-new and re-scan commands
  • --preserve-filename flag for scan-new to keep the original filename during analysis
  • --wait-timeout option for scan-new (useful for heavy samples)
  • --timeout option for re-scan (response waiting time for large traces)
  • --amsi and --dex download options for scan, scan-new and download commands
  • --concurrency and --read-timeout options for download command
  • --query and --count options for download command to search and download tasks
  • --unimon-hooks, --fileextractor-excludes, --no-procdumps-on-finish, --disable-lightweight-dumps and --file-type-as-ext options for scan-new
  • --debug download option for re-scan
  • description field in sandbox config
  • rules-path config option for specifying a base path to the rules directory
  • Support for task links in download command
  • Support for wildcard scan files on Windows

Changed

  • Breaking: --procdump-new-processes-on-finish renamed to --no-procdumps-on-finish (inverted semantics)
  • Breaking: --latest flag removed from report command
  • email command description changed from "Send an email" to "Upload an email"
  • --rules now accepts platform aliases (windows, linux) in addition to paths
  • --crashdumps short flag changed from -c to -C in download command
  • report command now supports download output without scan_config.json
  • report --key is now used only for link generation when scan_config.json is missing
  • CLI startup optimized via lazy command registration
  • Internal architecture refactored: utils/ → services/, internal/ → core/, split _common.py into focused modules

Fixed

  • Download race condition where concurrent downloads could overwrite files with the same name
  • Various typos in help texts and comments

0.2.50

Fixed

  • Don't clean last line in scanner output (was overriding results)
  • Resolve mypy type issues

0.2.49

Added

  • New parameter to fine-tune the scan (--disable-lightweight-dumps)

0.2.48

Added

  • New artifact types for download from sandbox (AMSI dumps, DEX dumps)
  • Wildcard support for scan files on Windows

0.2.47

Added

  • Internal improvements

0.2.46

Added

  • Save debug files on rescan
  • Remove "safe" suffix from the analysis filename

0.2.45

Added

  • Option to pass fileextractor excludes (--fileextractor-excludes)

0.2.44

Added

  • New scanner options (--unimon-hooks, --no-procdumps-on-finish, --file-type-as-ext)

0.2.43

Added

  • Shell completion command (sandbox-cli completion)

Changed

  • Refactor file names in unpack output

0.2.42

Added

  • Download any unknown artifact types

Fixed

  • Missing sandbox link in md report output

0.2.41

Added

  • Wait timeout option for scans (--wait-timeout)
  • Support for task links in download command

0.2.40

Fixed

  • Incorrect task parsing in download command

0.2.39

Added

  • Option to show suspicious detects in report (--suspicious)
  • Show elapsed time when scan is done
  • Show malware detects always on top

Fixed

  • Handle socket timeout error while downloading files

0.2.38

Added

  • Correct handling of the timeout that occurred during scan and re-scan

0.2.34

Added

  • Options for downloading all tasks from the sandbox (requires a key with a special permission and support for the new API)

0.2.33

Added

  • Option for managing the timeout when creating a task on re-scan

0.2.32

Added

  • Add option to specifying outbound connections when scanning

0.2.31

Added

  • Add option to specify custom browser in config #9

0.2.30

Added

  • Add new command browser to open old reports in browser #8
  • Add option to automatically open analysis link in browser #7

Fixed

  • Default python module webbrowser doesn't work correctly by default in some systems (e.g. MacOS) #9
  • Fix rewriting files with the same name when downloading artifacts #6
  • Fix encoding issues when unpacking logs #5

0.2.29

Fixed

  • Fixed bug in path resolving

0.2.28

Added

  • Installing the package using Nix and documentation #4

0.2.27

Added

  • Specifying the base path to the rules using the config #2

Fixed

  • Problem with spaces in paths when saving files #3

0.2.26

Added

  • Project documentation in mkdocs format
  • Project logos

Changed

  • Rename compiler option to rules
  • Refactoring of the internal code base before the public release

0.2.25

Added

Internal development