Releases: cado-security/cloudgrep
v1.0.5
- Output in JSON Format
You can now output in JSON format, making it easier to integrate cloudgrep with other tooling and data-pipelines:
cloudgrep -b my-bucket -q "search query" -jo > output.json
Here, -b my-bucket specifies the bucket, -q "search query" is the search query, and -jo (or –json_output) enables JSON output, storing the output in the file “output.json”.
Many thanks to Daniel and Andi from Permiso for this additional functionality.
- Parsing Custom Format Logs
CloudGrep now supports parsing custom format logs, such as CloudTrail logs.
Command-Line Example:
cloudgrep.py -b my-bucket -q "search query" -lt cloudtrail
This command searches in my-bucket, where -q "search query" is the query, -lt (or –log_type) cloudtrail tells cloudgrep to parse the matching files as cloudtrail.
Many thanks to Daniel and Andi from Permiso for this additional functionality too.
v1.0.4
⚡Release Highlights⚡
You can now scan AWS S3, GCP Storage and Azure Storage using Yara Rules:
- e.g. python3 cloudgrep.py --bucket test-s3-access-logs --yara ./tests/data/yara.rule
Fixes a couple of minor bugs.
See the ReadMe for more:
v1.0.3
- Fixes issues with compiled osx
v1.0.2
⚡Release Highlights⚡
- You can now install with "python3 setup.py install" and call "cloudgrep" on the Command Line anywhere (thank-you toloco !)
- You can now select which AWS profile to use with "--profile" (thank-you fdx0 !)
cloudgrep is grep for cloud storage.
It currently supports searching log files, optionally compressed with gzip (.gz) or zip (.zip), in AWS S3, GCP or Azure storage.
e.g. python3 cloudgrep.py --bucket test-s3-access-logs --query 9RXXKPREHHTFQD77
See the ReadMe for more:
v1.0.1
⚡Release Highlights⚡
- Adds support to search Azure Storage
- Adds support to search Google Cloud Storage
cloudgrep is grep for cloud storage.
It currently supports searching log files, optionally compressed with gzip (.gz) or zip (.zip), in AWS S3, GCP or Azure storage.
e.g. python3 cloudgrep.py --bucket test-s3-access-logs --query 9RXXKPREHHTFQD77
See the ReadMe for more: