Releases: splunk/attack_range
Releases · splunk/attack_range
v4.0.0
Splunk Attack Range v4.0 Release Notes
The Splunk Threat Research Team (STRT) is happy to release v4.0 of the Splunk Attack Range.
Release Blog
Major Changes
- SnapAttack CapAttack Integration - Added PowerShell capture agent that packages attacks with system logs, keystrokes, PCAP, and video for comprehensive attack analysis
- GCP Support - Extended cloud platform support to include Google Cloud Platform alongside existing AWS and Azure deployments
- Automated Splunk Apps Update Through CI/CD - Implemented automatic updates for all integrated Splunk Apps to ensure detection engineers work with current versions
- Improved Caldera Integration - Enhanced deployment and configuration of MITRE's Caldera adversary emulation platform with better reliability and accessibility
- Version-Tagged Docker Containers - Introduced specific version tags on DockerHub for greater stability and reproducibility in testing environments
- Deprecate Splunk Attack Range Local - Discontinued local deployment support due to VirtualBox/Vagrant challenges; recommend Ludus for local range needs
Updates
- Added CapAttack capture workflow to integrate with SnapAttack data collection
- Improved Caldera interface reliability with port 8888 access
- Updated Technical Add-ons (TAs) through automated CI/CD pipeline
- Fixed various bugs in Caldera integration
- Added replay file path functionality
- Improved documentation and configuration guides
v3.3.0
v3.2.0
v3.1.1
v3.1.0
v3.0.0
The Splunk Threat Research Team (STRT) is happy to release v3.0 of the Splunk Attack Range.
Release Blog
Check out the demo video!
Major Changes
- New configurations
- New documentation
- Added pre-built images with packer for faster deployments
- Added support for local deployments
- Added support for cloud deployments
- Added support for CrowdStrike EDR
- Added support for VMware CarbonBlack EDR
- Added support for Guacamole
Updates
- Fixed CI jobs
- Add support for terraforms remote backends
v2.0.0
Merge pull request #629 from splunk/haag_fixes Spacing and Kali Update