Commit Graph

Select branches

Hide Pull Requests

chore/update-ipinfo-mmdb

copilot/add-google-secops-output-module

copilot/create-google-secops-parser

dashboard-compliance-percent

dashboard-review-followups

elasticsearch-8-client

fix-169-dkim-alignment-cross-product

fix-819-aggregate-timestamp-utc-skew

fix-empty-results-email-200

fix/dashboard-daily-interval-828

gh-pages

google-secops-parser

improve-test-coverage

master

msgraph-review-followups

uncategorized-sources-input

#100

#106

#11

#11

#119

#120

#122

#13

#13

#132

#135

#14

#145

#146

#150

#151

#157

#160

#161

#164

#165

#170

#182

#183

#186

#188

#190

#191

#199

#2

#207

#21

#210

#212

#214

#216

#217

#220

#222

#223

#224

#225

#230

#232

#236

#237

#239

#241

#244

#245

#247

#248

#25

#252

#254

#263

#264

#265

#274

#276

#278

#281

#284

#285

#294

#297

#30

#301

#306

#307

#308

#313

#316

#32

#320

#322

#324

#326

#327

#328

#331

#334

#335

#341

#342

#343

#344

#349

#352

#353

#360

#361

#363

#364

#366

#368

#369

#375

#376

#377

#383

#384

#385

#386

#394

#395

#398

#404

#405

#406

#407

#408

#411

#413

#414

#415

#417

#42

#420

#427

#43

#430

#432

#433

#434

#436

#443

#444

#445

#446

#449

#450

#451

#453

#456

#458

#459

#460

#462

#465

#466

#467

#468

#469

#470

#471

#477

#481

#482

#491

#492

#494

#496

#497

#50

#501

#504

#508

#509

#510

#511

#513

#514

#515

#516

#517

#518

#519

#520

#522

#524

#526

#527

#529

#530

#531

#532

#536

#537

#546

#547

#548

#550

#552

#553

#555

#558

#562

#566

#567

#569

#571

#578

#585

#586

#587

#589

#59

#590

#594

#596

#597

#598

#603

#604

#606

#61

#613

#617

#618

#62

#620

#622

#623

#627

#628

#629

#63

#630

#631

#632

#633

#634

#635

#639

#640

#642

#644

#645

#646

#647

#648

#649

#650

#652

#654

#656

#657

#658

#659

#660

#661

#662

#664

#666

#667

#668

#669

#670

#671

#672

#673

#676

#677

#678

#679

#680

#685

#686

#687

#688

#689

#691

#692

#693

#694

#695

#696

#697

#698

#699

#700

#701

#702

#703

#704

#705

#706

#708

#709

#710

#711

#712

#713

#714

#715

#716

#717

#718

#719

#720

#721

#722

#723

#724

#725

#726

#727

#728

#729

#730

#731

#732

#733

#734

#735

#736

#737

#738

#739

#740

#741

#743

#744

#745

#746

#747

#748

#749

#750

#751

#752

#753

#754

#755

#756

#757

#758

#759

#760

#761

#762

#763

#764

#765

#766

#767

#768

#769

#770

#771

#772

#773

#774

#775

#776

#777

#778

#779

#780

#781

#783

#784

#785

#786

#787

#788

#790

#790

#791

#793

#794

#796

#797

#798

#799

#8

#800

#801

#802

#803

#804

#805

#807

#809

#812

#813

#815

#816

#817

#818

#820

#821

#822

#823

#824

#825

#826

#827

#829

#830

#831

#832

#834

#835

#836

#837

#839

#839

#97

#98

10.0.0

10.0.3

10.0.4

10.1.0

10.1.1

10.2.0

10.2.1

10.2.2

10.2.4

5.16.0

5.17.0

8.15.1

8.15.2

8.15.4

8.16.0

8.16.1

8.17.0

8.18.1

8.18.2

8.18.3

8.18.4

8.18.5

8.18.6

8.18.7

8.19.0

8.19.1

9.0.10

9.0.2

9.0.3

9.0.6

9.0.7

9.1.1

9.1.2

9.10.0

9.10.1

9.10.2

9.10.3

9.11.0

9.11.1

9.11.2

9.2.0

9.2.1

9.3.0

9.3.1

9.4.0

9.5.0

9.5.1

9.5.2

9.5.3

9.5.4

9.5.5

9.6.0

9.7.0

9.7.1

9.8.0

9.9.0

Mono Color

• bbee148d2a Backfill combined DKIM/SPF fields automatically at startup fix-169-dkim-alignment-cross-product Sean WhalenandClaude Fable 5 2026-07-22 09:14:59 -04:00
• e892de794b Address Copilot round-4 findings on dashboards Sean WhalenandClaude Fable 5 2026-07-21 22:35:48 -04:00
• 2ebe26681e Document per-signature row semantics in the alignment tables Sean WhalenandClaude Fable 5 2026-07-21 22:20:41 -04:00
• 99836f3bf0 Rename Overview combined-result column labels (Copilot round 3) Sean WhalenandClaude Fable 5 2026-07-21 22:17:08 -04:00
• 2b603d926e Extend the hunk-proofreading rule with rendered-text wraps Sean WhalenandClaude Fable 5 2026-07-21 22:07:55 -04:00
• 8219f44659 Reflow create_indexes comments flagged by Copilot Sean WhalenandClaude Fable 5 2026-07-21 22:06:22 -04:00
• 0ffc804ea0 Add PR #839 review lessons to AGENTS.md Sean WhalenandClaude Fable 5 2026-07-21 22:04:22 -04:00
• 9edfef9e70 Address Copilot review findings on #839 Sean WhalenandClaude Fable 5 2026-07-21 22:00:56 -04:00
• 6148002a43 Fix DKIM/SPF alignment detail cross-product in dashboards (#169) Sean WhalenandClaude Fable 5 2026-07-21 21:52:19 -04:00
• f7518b43d2 Update docs gh-pages Sean Whalen 2026-07-21 21:20:15 -04:00
• 4fa8cfb1e7 Skip the results email when no reports were parsed (#837) master 3 people 2026-07-21 20:49:41 -04:00
• b15e3003df Add Graph-path regression test for the empty-run email guard fix-empty-results-email-200 Sean WhalenandClaude Fable 5 2026-07-21 20:43:35 -04:00
• 5a6737485f Skip the results email when no reports were parsed (#200) Sean WhalenandClaude Fable 5 2026-07-21 20:24:30 -04:00
• e98e12acb0 Normalize aggregate result words to lowercase (#835) 4 people 2026-07-21 17:02:24 -07:00
• 6acacd01d1 Address post-merge Copilot findings from #834 (#836) 3 people 2026-07-21 19:29:28 -04:00
• af599a82b4 Address post-merge Copilot findings from #834 dashboard-review-followups Sean WhalenandClaude Fable 5 2026-07-21 19:27:01 -04:00
• 62514bd72a Add per-domain DMARC compliance percentage to all aggregate dashboards (#834) 3 people 2026-07-21 19:23:55 -04:00
• aa30792791 Address second round of Copilot review comments dashboard-compliance-percent Sean WhalenandClaude Fable 5 2026-07-21 19:19:40 -04:00
• 32094a1460 AGENTS.md: reviews must cover prose and hunk context, not just function Sean WhalenandClaude Fable 5 2026-07-21 19:15:55 -04:00
• 32d80e4289 Address Copilot review comments on PR #834 Sean WhalenandClaude Fable 5 2026-07-21 19:11:28 -04:00
• b99d363a6d Fix over-time charts double-counting reports via multi-valued date_range Sean WhalenandClaude Fable 5 2026-07-21 19:01:54 -04:00
• 47fb50e76a Add per-domain DMARC compliance percentage to all aggregate dashboards (#112) Sean WhalenandClaude Fable 5 2026-07-20 21:25:00 -04:00
• d3dee042cc Update docs Sean Whalen 2026-07-20 19:53:46 -04:00
• 855d267650 Bump version to 10.2.4 and update changelog 10.2.4 Sean Whalen 2026-07-20 19:51:15 -04:00
• d9f6532841 Default missing Feedback-Type and Authentication-Results in failure reports (#332) (#831) supaeasyandGitHub 2026-07-20 21:21:55 +02:00
• 5dc83613e6 chore: update IPinfo Lite MMDB (#832) 3 people 2026-07-20 15:15:19 -04:00
• 2100acf55b chore: update IPinfo Lite MMDB chore/update-ipinfo-mmdb seanthegeekandgithub-actions[bot] 2026-07-20 09:22:40 +00:00
• 1986835f51 Fix daily-cadence charts defaulting to sub-day time buckets (#828) (#830) 3 people 2026-07-16 20:17:57 -04:00
• b9f9cb0669 Fix daily-cadence charts defaulting to sub-day time buckets (#828) fix/dashboard-daily-interval-828 Sean WhalenandClaude Sonnet 5 2026-07-16 20:11:58 -04:00
• 3b53f836a6 Map two domain batches: MMDB ASN-coverage gap and uncategorized-sources export Sean WhalenandClaude Sonnet 5 2026-07-16 19:29:21 -04:00
• 7d87ba18be Ingest uncategorized-sources exports and add MMDB coverage scan with anti-poisoning guards (#829) 3 people 2026-07-16 18:21:47 -04:00
• 5522641727 Codify triage flagging for identified operators with no fitting type uncategorized-sources-input Sean WhalenandClaude Fable 5 2026-07-16 18:14:16 -04:00
• ba8bc55267 Enhance planning guidance in CLAUDE.md by specifying auto mode activation after user approval Sean Whalen 2026-07-16 18:08:30 -04:00
• 387764a716 Add MMDB coverage scan script with anti-poisoning guards Sean WhalenandClaude Fable 5 2026-07-16 18:06:58 -04:00
• cd2029f5c7 Accept plain-text uncategorized-sources lists in find_unknown_base_reverse_dns.py Sean WhalenandClaude Fable 5 2026-07-16 17:35:54 -04:00
• 64ddb13f18 Clarify introductory guidance in AGENTS.md by removing redundant phrasing Sean Whalen 2026-07-16 17:10:15 -04:00
• 51cd3bfa45 Fix file path reference in AGENTS.md for clarity Sean Whalen 2026-07-16 17:09:37 -04:00
• 1f1a0f0a0e Refactor AGENTS.md to remove redundant file paths for clarity Sean Whalen 2026-07-16 16:54:55 -04:00
• eb7f11798b Remove examples in privacy rule regarding full IPv4 addresses in AGENTS.md Sean Whalen 2026-07-16 16:48:31 -04:00
• 0e31dcc0b8 Extract reverse-DNS map guidance to a nested AGENTS.md Sean WhalenandClaude Fable 5 2026-07-16 16:42:59 -04:00
• df9bf82e04 Post-review follow-ups for Graph send (#825/#826) and requests-to-httpx migration (#827) 3 people 2026-07-14 16:11:47 -04:00
• f1e9ac7c52 Post-review follow-ups for Graph send (#825/#826) and requests-to-httpx migration msgraph-review-followups Sean WhalenandClaude Fable 5 2026-07-14 15:56:31 -04:00
• 31c928d6fc Refresh Microsoft Graph docs: national clouds, examples, troubleshooting (#826) 3 people 2026-07-14 19:34:56 +02:00
• 40509f801b Migrate Elasticsearch output to the elasticsearch-py 8.x client (#822) 3 people 2026-07-13 13:50:25 -04:00
• 5367fc6d86 Use pass instead of ... in TYPE_CHECKING __init__ stubs elasticsearch-8-client Sean WhalenandClaude Fable 5 2026-07-13 13:41:33 -04:00
• 9a99b0f43c Migrate Elasticsearch output to the elasticsearch-py 8.x client (#806) Sean WhalenandClaude Fable 5 2026-07-13 11:29:39 -04:00
• 759ea2b815 Update docs Sean Whalen 2026-07-13 10:15:57 -04:00
• a1fd66de04 Bump version to 10.2.2 10.2.2 Sean Whalen 2026-07-13 10:08:51 -04:00
• 01b85ab7de Fix aggregate-report timestamp skew on non-UTC hosts (#819) (#821) 3 people 2026-07-13 09:59:35 -04:00
• 48588440f7 Fix aggregate-report timestamp skew on non-UTC hosts (#819) fix-819-aggregate-timestamp-utc-skew Sean WhalenandClaude Sonnet 5 2026-07-13 09:49:10 -04:00
• f33951c0bb Fix host-dependent flakiness in testMissingEverythingRaisesFileNotFoundError (#820) 4 people 2026-07-13 15:32:32 +02:00
• 547e6d7113 chore: update IPinfo Lite MMDB (#818) 3 people 2026-07-13 09:17:41 -04:00
• 18b38c991d Add verify skill and document model roles in CLAUDE.md (#817) 3 people 2026-07-12 09:33:57 -04:00
• 0d50cff388 Document model roles for feature work in CLAUDE.md improve-test-coverage Sean WhalenandClaude Sonnet 5 2026-07-12 09:31:23 -04:00
• 42059db935 Add verification claude skill for parsedmarc CLI usage and sample inputs Sean Whalen 2026-07-12 09:20:19 -04:00
• 746da77de5 Raise test coverage: utils.py, elastic.py, and opensearch.py to 100% (#816) 3 people 2026-07-11 18:21:04 -04:00
• c7854e0906 Use assertGreater for the reverse-DNS-map fallback size check Sean WhalenandClaude Fable 5 2026-07-11 18:14:34 -04:00
• db967634f6 Raise test coverage: utils, elastic, and opensearch to 100% Sean WhalenandClaude Fable 5 2026-07-11 17:19:34 -04:00
• ae5a5043ab Cover the remaining gsecops.py branches with sample-driven tests google-secops-parser Sean WhalenandClaude Fable 5 2026-07-11 16:45:56 -04:00
• 7ce8b63688 Ensure aggregate report output always has an xml_schema value Sean WhalenandClaude Fable 5 2026-07-11 15:52:47 -04:00
• 8935e733cf Revert overanalyzed changes Sean Whalen 2026-07-11 16:14:20 -04:00
• 84848418f9 Disambiguate "aggregate rows" in the xml_schema changelog entry Sean WhalenandClaude Fable 5 2026-07-11 16:04:03 -04:00
• cd2785d440 Frame aggregate detection accurately: <feedback> is the detector Sean WhalenandClaude Fable 5 2026-07-11 15:57:29 -04:00
• 571bbf741b Guarantee non-empty xml_schema: <feedback> identifies the report, not <version> Sean WhalenandClaude Fable 5 2026-07-11 15:52:47 -04:00
• a131fa937b Explain the actual language constraint behind the 1b boolean conversion Sean WhalenandClaude Fable 5 2026-07-11 15:42:48 -04:00
• 4590c0b10c Fix stale boolean-storage comments missed in the bool_value change Sean WhalenandClaude Fable 5 2026-07-11 15:38:21 -04:00
• c8e8cb54c0 Store CBN parser booleans as typed bool_value Sean WhalenandClaude Fable 5 2026-07-11 15:32:12 -04:00
• fba083f351 Add Google SecOps (Chronicle) output via the v1 events.import API Sean WhalenandClaude Fable 5 2026-07-11 15:08:31 -04:00
• 95e881bdb3 Fix SecOps parser review findings Sean WhalenandClaude Fable 5 2026-07-11 14:10:29 -04:00
• 0e3f5f37bc Include policy identity on SMTP TLS failure-detail rows Sean WhalenandClaude Fable 5 2026-07-11 14:10:05 -04:00
• e52e6abbe5 Tag drop{} statements per content-hub convention Sean WhalenandClaude Opus 4.8 2026-06-04 12:15:05 -04:00
• 53402c28fe Store numbers as number_value; fix conditional guards to != "" Sean WhalenandClaude Opus 4.8 2026-06-04 12:08:10 -04:00
• d8b8186328 Cite the official Chronicle content-hub parser repo Sean WhalenandClaude Opus 4.8 2026-06-04 11:27:38 -04:00
• 091ba3dfb4 Define CBN up front for new SecOps users Sean WhalenandClaude Opus 4.8 2026-06-04 11:13:03 -04:00
• 16082c046b Expand README references with the sources used Sean WhalenandClaude Opus 4.8 2026-06-04 11:09:58 -04:00
• 3fd371617a Detect aggregate reports by "xml_schema" instead of "domain" Sean WhalenandClaude Opus 4.8 2026-06-04 10:36:49 -04:00
• 319986f5fd Fix JSON type handling and pre-json field init in SecOps parser Sean WhalenandClaude Opus 4.8 2026-06-04 10:22:02 -04:00
• 7d9d693c05 Detect aggregate reports by "domain" instead of "adkim" Sean WhalenandClaude Opus 4.8 2026-06-04 09:42:28 -04:00
• cf601b6d01 Add Google SecOps (Chronicle) UDM parser for syslog output Sean WhalenandClaude Opus 4.8 2026-06-04 09:24:20 -04:00
• a1da7b3420 Bump version to 10.2.1 10.2.1 Sean Whalen 2026-07-09 20:50:45 -04:00
• 3fda55d385 Make Microsoft Graph connection activity observable (#815) 5 people 2026-07-10 02:46:39 +02:00
• 7fed72798a Stop system GeoIP files from shadowing the bundled IPinfo database (#813) 5 people 2026-07-10 02:07:00 +02:00
• cdda5dae62 Fix failure-report timestamp skew on non-UTC hosts in ES/OpenSearch/Splunk outputs (#812) 5 people 2026-07-10 01:45:34 +02:00
• 15dd69cc28 fix: update virtual environment setup to use python3 -m venv Sean Whalen 2026-07-09 19:42:10 -04:00
• fa8faa6b39 MS Graph: case-insensitive auth_method + ClientAssertion support (#809) 4 people 2026-07-09 19:46:36 +02:00
• 9a5f2d90da Update docs Sean Whalen 2026-07-06 09:40:01 -04:00
• a6241d537e Fix grammatical error in project maintenance note (#805) Ivan The GeekandGitHub 2026-07-06 09:33:14 -04:00
• 25638cc3cd chore: update IPinfo Lite MMDB (#807) 3 people 2026-07-06 09:29:52 -04:00
• 2547422f40 chore: update IPinfo Lite MMDB (#804) 3 people 2026-06-29 12:54:42 -04:00
• 862312526e Update docs Sean Whalen 2026-06-25 15:26:04 -04:00
• c423b8dfff Modernize type hints to PEP 585 / PEP 604 syntax (#803) 10.2.0 Sean WhalenandGitHub 2026-06-25 15:21:48 -04:00
• d13eb86782 Advertise supported Python versions via trove classifiers Sean WhalenandClaude Opus 4.8 2026-06-25 15:07:50 -04:00
• 31e0eeba4c Update docs Sean Whalen 2026-06-25 15:02:17 -04:00
• a67e8d3ebc 10.2.0 - Explain why a report is invalid instead of "Not a valid report" (#802) 3 people 2026-06-25 14:53:56 -04:00
• bc17e6afb2 chore: update IPinfo Lite MMDB (#801) 3 people 2026-06-23 13:46:35 -04:00
• d40447ea91 chore: update IPinfo Lite MMDB (#800) 3 people 2026-06-15 08:54:43 -04:00
• 8275665e11 10.1.1 10.1.1 Sean Whalen 2026-06-13 20:46:57 -04:00
• b0da277f0a Update docs Sean Whalen 2026-06-13 20:45:07 -04:00
• f00601f1b4 Update docs Sean Whalen 2026-06-12 21:56:08 -04:00
• 8337b67351 Cover both arms of the optional psycopg import in postgres.py (#799) 10.1.0 3 people 2026-06-12 21:48:20 -04:00