Sean Whalen
67fe009145
Add sources my name table to the Kibana DMARC Summary dashboard
...
This matches the table in the Splunk DMARC Aggregate reports dashboard
2025-11-30 19:43:14 -05:00
Sean Whalen
e405e8fa53
Update changelog to correct timespan threshold for DMARC report normalization
2025-11-30 16:17:07 -05:00
Sean Whalen
a72d08ceb7
Refactor configuration loading for normalize_timespan_threshold_hours
2025-11-30 16:16:32 -05:00
Sean Whalen
2785e3df34
More fixes for normalize_timespan_threshold_hours:
2025-11-30 13:56:50 -05:00
Sean Whalen
f4470a7dd2
Fix normalize_timespan_threshold_hours
2025-11-30 13:46:21 -05:00
Sean Whalen
18b9894a1f
Code formatting
2025-11-30 12:40:09 -05:00
Sean Whalen
d1791a97d3
Make timespan normalization hours configurable, with a 24.0 default
2025-11-30 12:23:38 -05:00
Sean Whalen
47ca6561c1
Fix changelog version
2025-11-30 10:46:48 -05:00
Sean Whalen
a0e18206ce
Bump version to 9.0.0
2025-11-29 23:01:04 -05:00
Sean Whalen
9e4ffdd54c
Add interval_begin, interval_end, and normalized_timespan to the Splunk report
2025-11-29 21:32:33 -05:00
Sean Whalen
434bd49eb3
Fix normalized_timespan in CSV output for aggregate reports
2025-11-29 21:23:39 -05:00
Sean Whalen
589038d2c9
Add normalized_timespan to CSV output for aggregate reports
2025-11-29 21:17:27 -05:00
Sean Whalen
c558224671
Rename normalized_timespan to timespan_requires_normalization and include interval_begin and interval_end in CSV output
2025-11-29 21:16:30 -05:00
Sean Whalen
044aa9e9a0
Include interval_begin in splunk output for accurate timestamping
2025-11-29 20:50:13 -05:00
Sean Whalen
6270468d30
Remove unneeded fields
2025-11-29 17:13:24 -05:00
Sean Whalen
832be7cfa3
Clean up imports
2025-11-29 16:56:12 -05:00
Sean Whalen
04dd11cf54
Fix formatting
2025-11-29 16:51:57 -05:00
Sean Whalen
0b41942916
Always include interval_begin and interval_end in records
2025-11-29 16:46:03 -05:00
Sean Whalen
f14a34202f
Add morse type hints
2025-11-29 16:33:40 -05:00
Sean Whalen
daa6653c29
Bump version to 8.20.0 and update changelog for new report volume normalization
2025-11-29 15:26:25 -05:00
Sean Whalen
45d1093a99
Normalize report volumes when a report timespan exceed 24 hours
2025-11-29 14:52:57 -05:00
Sean Whalen
c1a757ca29
Remove outdated launch config
2025-11-29 14:45:21 -05:00
Sean Whalen
69b9d25a99
Revert code formatting
2025-11-29 14:14:54 -05:00
Sean Whalen
94d65f979d
Code formatting
2025-11-29 14:04:20 -05:00
Sean Whalen
98342ecac6
8.19.1 ( #627 )
...
- Ignore HTML content type in report email parsing (#626 )
2025-11-29 11:37:31 -05:00
Sean Whalen
38a3d4eaae
Code formatting
2025-11-28 12:48:55 -05:00
Sean Whalen
a05c230152
8.19.0 ( #622 )
...
8.19.0
- Add multi-tenant support via an index-prefix domain mapping file
- PSL overrides so that services like AWS are correctly identified
- Additional improvements to report type detection
- Fix webhook timeout parsing (PR #623 )
- Output to STDOUT when the new general config boolean `silent` is set to `False` (Close #614 )
- Additional services added to `base_reverse_dns_map.csv`
---------
Co-authored-by: Sean Whalen <seanthegeek@users.noreply.github.com >
Co-authored-by: Félix <felix.debloisbeaucage@gmail.com >
2025-11-28 12:47:00 -05:00
Sean Whalen
17bdc3a134
More tests cleanup
2025-11-21 09:10:59 -05:00
Sean Whalen
858be00f22
Fix badge links and update image source branch
2025-11-21 09:03:04 -05:00
Sean Whalen
597ca64f9f
Clean up tests
2025-11-21 00:09:28 -05:00
Sean Whalen
c5dbe2c4dc
8.10.9
...
- Complete fix for #687 and more robust report type detection
2025-11-20 23:50:42 -05:00
Sean Whalen
082b3d355f
8.18.8
...
- Fix parsing emails with an uncompressed aggregate report attachment (Closes #607 )
- Add `--no-prettify-json` CLI option (PR #617 )
2025-11-20 20:47:57 -05:00
Sean Whalen
2a7ce47bb1
Update code coverage badge link to main branch
2025-11-20 20:28:10 -05:00
daminoux
9882405d96
Update README.md fix url screenshot ( #620 )
...
the url of screenshot is broken
2025-11-20 20:27:15 -05:00
Andrew
fce84763b9
add --no-prettify-json CLI option ( #617 )
...
* updates process_reports to respect newly added prettify_json option
* removes duplicate definition
* removes redundant option
* fixes typo
2025-11-02 15:54:59 -05:00
Rowan
8a299b8600
Updated default python docker base image to 3.13-slim ( #618 )
...
* Updated default python docker base image to 3.13-slim
* Added python 3.13 to tests
2025-10-29 22:34:06 -04:00
jandr
b4c2b21547
Sorted usage of TLS on SMTP ( #613 )
...
Added a line for the `email_results` function to take into account the smtp_ssl setting.
2025-08-25 13:51:10 -04:00
Sean Whalen
865c249437
Update features list
2025-08-24 13:39:50 -04:00
Sean Whalen
013859f10e
Fix find_unknown_base_reverse_dns.py
2025-08-19 21:18:14 -04:00
Sean Whalen
6d4a31a120
Fix find_unknown_base_reverse_dns.py and sortlist.py
2025-08-19 20:59:42 -04:00
Sean Whalen
45d3dc3b2e
Fiz sortlists.py
2025-08-19 20:23:55 -04:00
Sean Whalen
4bbd97dbaa
Improve list verification
2025-08-19 20:02:55 -04:00
Sean Whalen
5df152d469
Refactor find_unknown_base_reverse_dns.py
2025-08-18 12:59:54 -04:00
Sean Whalen
d990bef342
Use \n here too
2025-08-17 21:08:28 -04:00
Sean Whalen
caf77ca6d4
Use \n when writing CSVs
2025-08-17 21:01:07 -04:00
Sean Whalen
4b3d32c5a6
Actual, actual Actual 6.18.7 release
...
Revert back to using python csv instead of pandas to avoid conflicts with numpy in elasticsearch
2025-08-17 20:36:15 -04:00
Sean Whalen
5df5c10f80
Pin pandas an numpy versions
2025-08-17 19:59:53 -04:00
Sean Whalen
308d4657ab
Make sort_csv function more flexible
2025-08-17 19:43:19 -04:00
Sean Whalen
0f74e33094
Fix typo
2025-08-17 19:35:16 -04:00
Sean Whalen
9f339e11f5
Actual 6.18.7 release
2025-08-17 19:34:14 -04:00
