Download the server deb from here.

See release notes.

This is an off-schedule release with a fix for a client-repacking bug introduced in v3.2.3.0.

Download the server deb from here.

See release notes.

Download the server deb from here.

See release notes.

Download the server deb from here.

See release notes.

Download the server deb from here.

See release notes.

Download the server deb from here.

Please read the release notes before upgrading.

A number of features, bugfixes and improvements have been added since the last release. You can find more details in the release notes. Also note that components are now deprecated, and Rekall has been disabled by default.

This is the first 3.2.0 release candidate. Release notes

The server deb, which includes client templates, can be downloaded from here.

There are significant changes in this release. Be sure to read the release notes carefully before attempting an upgrade.

New in this release:

• Powerful API: Anything you can do in the UI you can do with the HTTP API. This enables powerful automatic collection and export possibilities.
• Chrome desktop notifications. Click a notification to go straight to an
  approval or flow results.
• UI refresh: Complete rewrite under-the-hood to AngularJS. Host information view is much more usable and you can see basic machine information without requiring an approval. Recent activity view is the default landing page.
• Hunt UI: OR conditionals. Now you can target a hunt much more precisely and cut down on situations where you previously had to run multiple hunts.
• Ability to create a hunt from a flow: test on your machine first, then run it on the fleet
• Client components: easier client customization and updating without pushing a a whole new client, currently used by rekall and chipsec.
• Download individual files from a hunt
• Build system using pip. Much simpler to set up for development or try out new releases, see the install
  instructions.
• Rekall: faster acquisition, more linux profiles
• Approval ACLs: require different approvals based on client labels
• Bigquery output plugin: fast analysis at scale
• Lots of bugfixes and perf improvements
• Tons more forensic artifacts

This is the second release candidate for 3.1.0. There's a bunch of great stuff in here, I talked about most of it in the meetup:

https://www.youtube.com/watch?v=EJAO9yWprmI#t=344

But there's even more since then:

• Ability to create a hunt from a flow: test on your machine first, then run it on the fleet.
• Chrome desktop notifications.
• Download individual files from a hunt.

I've also written some instructions for using pip:
https://github.com/google/grr-doc/blob/master/installfrompip.adoc

which is particularly handy for dev. Setting up client and server dev environments is very fast, and you can develop client or server code on Windows and Mac as well as Linux. Note that linux is still the only supported server platform for production.

A deb is available here:
https://storage.googleapis.com/releases.grr-response.com/grr-server_3.1.0-2_amd64.deb

We're aware of a few issues that need fixing before we remove the release candidate status, specifically:

• Download of very large hunt results ties up the admin ui process
• Some memory collection flows that have been obsoleted by rekall need to be removed
• Travis, docker, and the easy install script need to be updated

Once those are done we'll make a final release.

This is the 3.1.0 release candidate. It's a release candidate because we still have some work to do building a debian package and updating install scripts to use the new build system.

See the release notes for important information about this release.

New in this release:

• Components: easier client customization
• Build system: pip install grr-{server|client}
• Rekall: faster acquisition, more linux profiles
• Approval ACLs: require different approvals based on client labels
• Powerful API: automatic collection and export
• Bigquery output plugin: fast analysis at scale
• Lots of bugfixes and perf improvements
• Hunt UI: OR conditionals
• Tons more forensic artifacts