Version 1.14.0

Hello dear community! The OpenBAS 1.14.0 is out ! Hope you will enjoy it! 🎉

🦾 Ability to install OpenBAS Agent as a user

You asked for it, you got it ! OpenBAS agent logic has been upgraded to let you install the agent as your own account but also as a chosen user, giving you more capacity to execute payloads as system like before but also as session user. In addition to this, you can also now install multiple agent on one endpoint.

Find the related documentation: https://docs.openbas.io/latest/usage/openbas-agent/

🔎 Telemetry

In order to better understand how our platform is used, we are starting to monitor OpenBAS instances. All data collected is very high level, like number of instances running in the wild, number of users per instance and so on. Everything is anonymized. We do not and will not collect personal data and knowledge data.

Find the related documentation:

https://docs.openbas.io/latest/reference/deployment/telemetry/

📔 Documentation

The development and product teams have dedicated significant effort to creating thorough and comprehensive documentation to ensure clarity, ease of use, and seamless understanding for all you!

Here are all topics that have been tackled:

• [Agent installation](https://docs.openbas.io/latest/usage/openbas-agent/)
• [Nmap injector](https://docs.openbas.io/latest/usage/assets/findings)
• [Findings](https://docs.openbas.io/latest/usage/assets/findings)
• [Import/export of injects](https://docs.openbas.io/latest/usage/assets/)
• [Telemetry](https://docs.openbas.io/latest/reference/deployment/telemetry/)

As always, your feedbacks are most welcome ! You can reach me or the Filigran team to let us know what would be a game changer for you and your team 😁

Enhancements:

• #2070 Translation Automation
• #1860 I can choose the level of privilege of my agent
• #1829 Manage asset group expectations in the same way as team expectations

Bug Fixes:

• #2672 CrowdStrike executor is broken in an instance, with a stack trace preventing it to run properly
• #2614 Inject stay in pending
• #2599 UI Payload Creation Stepper doesnt work
• #2583 Missing FKs in join tables linked to Tags
• #2575 Status of inject is still incorrect in some cases
• #2573 Wrong order in the menu for atomic testing
• #2568 In the endpoint view, agent logos are truncated
• #2532 In the left menu, active marker is not working in assets / people / components
• #2522 Wrong display of payload when using injector that does not require executor / neither payload
• #2477 Injects in a report are not ordered chronologically
• #2464 Theming options forms is not correct
• #2417 Incorrect height / vertical alignement of the organization field (certainly due to the "+" button)
• #2339 Use parent process name signature for Caldera Implant
• #2316 When I create a technical inject in a simulation and I remove the expectation, expectations still there
• #1667 Useless / not working bullet points in execution overview

Pull Requests:

• [frontend] align last execution date on inject by @MarineLeM in #2582
• [backend] clean trace from openTelemetry by @MarineLeM in #2581
• [backend] add openbas.xtm.opencti.api_url by @MarineLeM in #2586
• [frontend/backend] add metrics from opentelemetry by @MarineLeM in #2553
• [frontend]sorting inject list in reports by execution date Issue/2477 by @heditar in #2554
• [frontend] Fix ordre of the popover options by @savacano28 in #2584
• [frontend] in left menu active marker on submenu if navbar is close by @MarineLeM in #2611
• [frontend] Update dependency @stylistic/eslint-plugin to v4.2.0 (release/current) by @renovate in #2591
• [frontend] Update typescript-eslint monorepo to v8.26.0 (release/current) by @renovate in #2596
• [frontend] Update dependency @types/node to v22.13.9 (release/current) by @renovate in #2597
• [frontend] Update Yarn to v4.7.0 (release/current) by @renovate in #2590
• [frontend] Update fontsource monorepo to v5.2.5 (release/current) by @renovate in #2595
• [backend] feature flag telemetry by @MarineLeM in #2620
• [frontend] Update dependency typescript to v5.8.2 (release/current) by @renovate in #2594
• [frontend] Update dependency axios to v1.8.1 (release/current) by @renovate in #2592
• [frontend] Update dependency cronstrue to v2.56.0 (release/current) by @renovate in #2593
• [tool] Improve & clean renovate config by @guillaumejparis in #2612
• [backend] Fix warnings at backend start by @guillaumejparis in #2601
• [frontend/backend] Display payload info tab only when we have a payload by @guillaumejparis in #2550
• Change on the exception raised to bring clearer error by @Dimfacion in #2624
• [backend] Add parent process name for caldera and cs detection by @savacano28 in #2508
• Improve release workflow by @Dimfacion in #2438
• [frontend] Update dependency @faker-js/faker to v9.6.0 (release/current) by @renovate in #2627
• [frontend] Update dependency @playwright/test to v1.51.0 (release/current) by @renovate in #2628
• [frontend] Update dependency ckeditor5 to v44.3.0 (release/current) by @renovate in #2629
• [frontend] Show Default value for settings by @savacano28 in #2625
• [frontend] Update dependency react-router to v7.3.0 (release/current) by @renovate in #2630
• [backend] Add fk for jointure tables by @savacano28 in #2640
• [backend] Update logback monorepo to v1.5.17 (release/current) by @renovate in #2632
• [frontend] Update eslint monorepo to v9.22.0 (release/current) by @renovate in #2631
• [frontend] Update dependency axios to v1.8.2 (release/current) by @renovate in #2633
• [backend] avoid two threads to execute in same time implant callback by @MarineLeM in #2616
• [frontend] Update dependency rxjs to v7.8.2 (release/current) by @renovate in #2634
• [frontend] Update material-ui monorepo (release/current) by @renovate in #2635
• [backend] Update dependency io.opentelemetry:opentelemetry-bom to v1.48.0 (release/current) by @renovate in #2626
• [frontend] Translation automation (#2070) by @johanah29 in #2227
• [backend] Update dependency io.swagger.core.v3:swagger-annotations-jakarta to v2.2.29 (release/current) by @renovate in #2645
• [backend] Update dependency io.hypersistence:hypersistence-utils-hibernate-63 to v3.9.3 (release/current) by @renovate in #2644
• [backend] Update dependency io.hypersistence:hypersistence-utils-hibernate-63 to v3.9.4 (release/current) by @renovate in #2647
• [frontend] Update dependency eslint-import-resolver-oxc to v0.13.0 (release/current) - autoclosed by @renovate in #2646
• [frontend] Update dependency @types/node to v22.13.10 (release/current) by @renovate in #2648
• [frontend] Update dependency @vitest/eslint-plugin to v1.1.37 (release/current) by @renovate in #2649
• [backend] Update dependency io.hypersistence:hypersistence-utils-hibernate-63 to v3.9.5 (release/current) by @renovate in #2650
• [frontend] Update dependency @xyflow/react to v12.4.4 (release/current) by @renovate in #2651
• [backend/frontend] Add UI installation steppers by @savacano28 in #2466
• [backend] lock implant callback thread by inject id by @MarineLeM in #2655
• [frontend] Update dependency i18n-auto-translation to v1.10.1 (release/current) by @renovate in #2669
• [frontend] Update dependency eslint-import-resolver-oxc to v0.13.1 (release/current) by @renovate in #2668
• [frontend] Update dependency esbuild to v0.25.1 (release/current) by @renovate in #2667
• [frontend] Update dependency axios to v1.8.3 (release/current) by @renovate in #2666
• [frontend] Update typescript-eslint monorepo to v8.26.1 (release/current) by @renovate in #2676
• [frontend] Update dependency monocart-coverage-reports to v2.12.3 (release/current) by @renovate in #2673
• [frontend] Update dependency vite to v6.2.2 (release/current) by @renovate in #2675
• [frontend] Update dependency monocart-reporter to v2.9.16 (release/current) by @renovate in #2674
• [frontend] Update dependency globals to v16 (release/current) by @renovate in #2636
• [backend] Add component annotation on migration by @savacano28 in #2677
• [frontend] Update dependency @playwright/test to v1.51.1 (release/current) by @renovate in #2694
• [frontend] Update dependency @types/react to v19.0.11 (release/current) by @renovate in #2695
• [backend] Fix Crowdstrike agent registered by @damgouj in #2678
• [backend] Removing FF on telemetry and changing the url (#656) by @Dimfacion in #2692
• [frontend] Update dependency @vitest/eslint-plugin to v1.1.38 (release/current) by @renovate in #2703
• [backend] Update logback monorepo to v1.5.18 (release/current) by @renovate in #2702
• [frontend] Fix injector contract paylaod null by @savacano28 in #2700
• [backend] Fix missing parent reference for the asset expectations by @savacano28 in #2613
• [frontend] Deduplicated expectation frontend by @savacano28 in #2683

Full Changelog: 1.13.1...1.14.0