12 lines
1.7 KiB
Markdown
12 lines
1.7 KiB
Markdown
# Outbound request audit privacy
|
|
|
|
Generic request bodies may contain passwords, tokens and binary credential envelopes. SafetyNet audits their byte count and detected type under `request`, without a body hash. This applies even to binary and multipart bodies; merely detecting a binary type does not prove a payload is a safe independent file. DLP classification, YARA, local parsing and required ICAP run as before.
|
|
|
|
Actual download files continue to use file facts with size, magic-byte detected type and SHA-256. These remain valuable for malware investigations. Generic upload request facts are deliberately separate from file evidence.
|
|
|
|
Encrypted browser event queues from older versions are scrubbed before replay, preserving event identities and decisions. Central event ingestion accepts old upload file facts and normalizes them to hash-free request facts before storage. The strict request schema rejects hashes and arbitrary content. ECS/CEF exports suppress hashes from historical upload file facts while preserving byte counts and detected type. Legacy download hashes are unchanged.
|
|
|
|
Previously committed central audit rows are immutable and are not rewritten by this migration. Their original hashes can remain visible to authorized reviewers in raw event views until normal approved retention applies. Previously delivered SIEM copies, backups and archives have their own retention. This change prevents future body-hash collection and further SIEM disclosure; it does not claim historical erasure.
|
|
|
|
The current Electron upload boundary still blocks file/data-pipe paths whose scanned bytes cannot be bound to transmitted bytes. The metadata fix does not expand upload support or bypass that enforcement.
|