Commit Graph

1324 Commits

Author SHA1 Message Date
Sean Whalen 67fe009145 Add sources my name table to the Kibana DMARC Summary dashboard
This matches the table in the Splunk DMARC  Aggregate reports dashboard
2025-11-30 19:43:14 -05:00
Sean Whalen e405e8fa53 Update changelog to correct timespan threshold for DMARC report normalization 2025-11-30 16:17:07 -05:00
Sean Whalen a72d08ceb7 Refactor configuration loading for normalize_timespan_threshold_hours 2025-11-30 16:16:32 -05:00
Sean Whalen 2785e3df34 More fixes for normalize_timespan_threshold_hours: 2025-11-30 13:56:50 -05:00
Sean Whalen f4470a7dd2 Fix normalize_timespan_threshold_hours 2025-11-30 13:46:21 -05:00
Sean Whalen 18b9894a1f Code formatting 2025-11-30 12:40:09 -05:00
Sean Whalen d1791a97d3 Make timespan normalization hours configurable, with a 24.0 default 2025-11-30 12:23:38 -05:00
Sean Whalen 47ca6561c1 Fix changelog version 2025-11-30 10:46:48 -05:00
Sean Whalen a0e18206ce Bump version to 9.0.0 2025-11-29 23:01:04 -05:00
Sean Whalen 9e4ffdd54c Add interval_begin, interval_end, and normalized_timespan to the Splunk report 2025-11-29 21:32:33 -05:00
Sean Whalen 434bd49eb3 Fix normalized_timespan in CSV output for aggregate reports 2025-11-29 21:23:39 -05:00
Sean Whalen 589038d2c9 Add normalized_timespan to CSV output for aggregate reports 2025-11-29 21:17:27 -05:00
Sean Whalen c558224671 Rename normalized_timespan to timespan_requires_normalization and include interval_begin and interval_end in CSV output 2025-11-29 21:16:30 -05:00
Sean Whalen 044aa9e9a0 Include interval_begin in splunk output for accurate timestamping 2025-11-29 20:50:13 -05:00
Sean Whalen 6270468d30 Remove unneeded fields 2025-11-29 17:13:24 -05:00
Sean Whalen 832be7cfa3 Clean up imports 2025-11-29 16:56:12 -05:00
Sean Whalen 04dd11cf54 Fix formatting 2025-11-29 16:51:57 -05:00
Sean Whalen 0b41942916 Always include interval_begin and interval_end in records 2025-11-29 16:46:03 -05:00
Sean Whalen f14a34202f Add morse type hints 2025-11-29 16:33:40 -05:00
Sean Whalen daa6653c29 Bump version to 8.20.0 and update changelog for new report volume normalization 2025-11-29 15:26:25 -05:00
Sean Whalen 45d1093a99 Normalize report volumes when a report timespan exceed 24 hours 2025-11-29 14:52:57 -05:00
Sean Whalen c1a757ca29 Remove outdated launch config 2025-11-29 14:45:21 -05:00
Sean Whalen 69b9d25a99 Revert code formatting 2025-11-29 14:14:54 -05:00
Sean Whalen 94d65f979d Code formatting 2025-11-29 14:04:20 -05:00
Sean Whalen 98342ecac6 8.19.1 (#627)
- Ignore HTML content type in report email parsing (#626)
8.19.1
2025-11-29 11:37:31 -05:00
Sean Whalen 38a3d4eaae Code formatting 8.19.0 8.18.7 2025-11-28 12:48:55 -05:00
Sean Whalen a05c230152 8.19.0 (#622)
8.19.0

- Add multi-tenant support via an index-prefix domain mapping file
- PSL overrides so that services like AWS are correctly identified
- Additional improvements to report type detection
- Fix webhook timeout parsing (PR #623)
- Output to STDOUT when the new general config boolean `silent` is set to `False` (Close #614)
- Additional services added to `base_reverse_dns_map.csv`

---------

Co-authored-by: Sean Whalen <seanthegeek@users.noreply.github.com>
Co-authored-by: Félix <felix.debloisbeaucage@gmail.com>
2025-11-28 12:47:00 -05:00
Sean Whalen 17bdc3a134 More tests cleanup 2025-11-21 09:10:59 -05:00
Sean Whalen 858be00f22 Fix badge links and update image source branch 2025-11-21 09:03:04 -05:00
Sean Whalen 597ca64f9f Clean up tests 2025-11-21 00:09:28 -05:00
Sean Whalen c5dbe2c4dc 8.10.9
- Complete fix for #687 and more robust report type detection
2025-11-20 23:50:42 -05:00
Sean Whalen 082b3d355f 8.18.8
- Fix parsing emails with an uncompressed aggregate report attachment (Closes #607)
- Add `--no-prettify-json` CLI option (PR #617)
2025-11-20 20:47:57 -05:00
Sean Whalen 2a7ce47bb1 Update code coverage badge link to main branch 2025-11-20 20:28:10 -05:00
daminoux 9882405d96 Update README.md fix url screenshot (#620)
the url of screenshot is broken
2025-11-20 20:27:15 -05:00
Andrew fce84763b9 add --no-prettify-json CLI option (#617)
* updates process_reports to respect newly added prettify_json option

* removes duplicate definition

* removes redundant option

* fixes typo
2025-11-02 15:54:59 -05:00
Rowan 8a299b8600 Updated default python docker base image to 3.13-slim (#618)
* Updated default python docker base image to 3.13-slim

* Added python 3.13 to tests
2025-10-29 22:34:06 -04:00
jandr b4c2b21547 Sorted usage of TLS on SMTP (#613)
Added a line for the `email_results` function to take into account the smtp_ssl setting.
2025-08-25 13:51:10 -04:00
Sean Whalen 865c249437 Update features list 2025-08-24 13:39:50 -04:00
Sean Whalen 013859f10e Fix find_unknown_base_reverse_dns.py 2025-08-19 21:18:14 -04:00
Sean Whalen 6d4a31a120 Fix find_unknown_base_reverse_dns.py and sortlist.py 2025-08-19 20:59:42 -04:00
Sean Whalen 45d3dc3b2e Fiz sortlists.py 2025-08-19 20:23:55 -04:00
Sean Whalen 4bbd97dbaa Improve list verification 2025-08-19 20:02:55 -04:00
Sean Whalen 5df152d469 Refactor find_unknown_base_reverse_dns.py 2025-08-18 12:59:54 -04:00
Sean Whalen d990bef342 Use \n here too 2025-08-17 21:08:28 -04:00
Sean Whalen caf77ca6d4 Use \n when writing CSVs 2025-08-17 21:01:07 -04:00
Sean Whalen 4b3d32c5a6 Actual, actual Actual 6.18.7 release
Revert back to using python csv instead of pandas to avoid conflicts with numpy in elasticsearch
2025-08-17 20:36:15 -04:00
Sean Whalen 5df5c10f80 Pin pandas an numpy versions 2025-08-17 19:59:53 -04:00
Sean Whalen 308d4657ab Make sort_csv function more flexible 2025-08-17 19:43:19 -04:00
Sean Whalen 0f74e33094 Fix typo 2025-08-17 19:35:16 -04:00
Sean Whalen 9f339e11f5 Actual 6.18.7 release 2025-08-17 19:34:14 -04:00