Commit Graph

Select branches

Hide Pull Requests

chore/use-sys-exit

fix/map-script-error-exits

fix/output-client-close-on-reload

google-secops-parser

master

#100

#106

#11

#11

#119

#120

#122

#13

#13

#132

#135

#14

#145

#146

#150

#151

#157

#160

#161

#164

#165

#170

#182

#183

#186

#188

#190

#191

#199

#2

#207

#21

#210

#212

#214

#216

#217

#220

#222

#223

#224

#225

#230

#232

#236

#237

#239

#241

#244

#245

#247

#248

#25

#252

#254

#263

#264

#265

#274

#276

#278

#281

#284

#285

#294

#297

#30

#301

#306

#307

#308

#313

#316

#32

#320

#322

#324

#326

#327

#328

#331

#334

#335

#341

#342

#343

#344

#349

#352

#353

#360

#361

#363

#364

#366

#368

#369

#375

#376

#377

#383

#384

#385

#386

#394

#395

#398

#404

#405

#406

#407

#408

#411

#413

#414

#415

#417

#42

#420

#427

#43

#430

#432

#433

#434

#436

#443

#444

#445

#446

#449

#450

#451

#453

#456

#458

#459

#460

#462

#465

#466

#467

#468

#469

#470

#471

#477

#481

#482

#491

#492

#494

#496

#497

#50

#501

#504

#508

#509

#510

#511

#513

#514

#515

#516

#517

#518

#519

#520

#522

#524

#526

#527

#529

#530

#531

#532

#536

#537

#546

#547

#548

#550

#552

#553

#555

#558

#562

#566

#567

#569

#571

#578

#585

#586

#587

#589

#59

#590

#594

#596

#597

#598

#603

#604

#606

#61

#613

#617

#618

#62

#620

#622

#623

#627

#628

#629

#63

#630

#631

#632

#633

#634

#635

#639

#640

#642

#644

#645

#646

#647

#648

#649

#650

#652

#654

#656

#657

#658

#659

#660

#661

#662

#664

#666

#667

#668

#669

#670

#671

#672

#673

#676

#677

#678

#679

#680

#685

#686

#687

#688

#689

#691

#692

#693

#694

#695

#696

#697

#698

#699

#700

#701

#702

#703

#704

#705

#706

#708

#709

#710

#711

#712

#713

#714

#715

#716

#717

#718

#719

#720

#721

#722

#723

#724

#725

#726

#727

#728

#729

#730

#731

#732

#733

#734

#735

#736

#737

#738

#739

#740

#741

#743

#744

#745

#746

#747

#748

#749

#750

#751

#752

#753

#754

#755

#756

#757

#758

#759

#760

#761

#762

#763

#764

#765

#766

#767

#768

#769

#770

#771

#772

#773

#774

#775

#776

#777

#778

#779

#780

#781

#783

#784

#785

#786

#787

#788

#790

#790

#791

#793

#794

#796

#797

#798

#799

#8

#800

#801

#802

#803

#804

#805

#807

#809

#812

#813

#815

#816

#817

#818

#820

#821

#822

#823

#824

#825

#826

#827

#829

#830

#831

#832

#834

#835

#836

#837

#839

#840

#841

#843

#844

#845

#846

#847

#848

#849

#850

#851

#852

#853

#855

#856

#857

#858

#859

#860

#861

#862

#863

#864

#865

#866

#867

#869

#870

#871

#872

#873

#874

#875

#876

#877

#878

#879

#881

#884

#885

#886

#887

#888

#889

#890

#891

#892

#893

#894

#895

#896

#897

#898

#899

#900

#902

#903

#97

#98

10.0.0

10.0.3

10.0.4

10.1.0

10.1.1

10.2.0

10.2.1

10.2.2

10.2.4

10.3.0

10.4.0

10.4.1

10.4.2

10.4.3

10.5.0

11.0.0

11.0.1

5.16.0

5.17.0

8.15.1

8.15.2

8.15.4

8.16.0

8.16.1

8.17.0

8.18.1

8.18.2

8.18.3

8.18.4

8.18.5

8.18.6

8.18.7

8.19.0

8.19.1

9.0.10

9.0.2

9.0.3

9.0.6

9.0.7

9.1.1

9.1.2

9.10.0

9.10.1

9.10.2

9.10.3

9.11.0

9.11.1

9.11.2

9.2.0

9.2.1

9.3.0

9.3.1

9.4.0

9.5.0

9.5.1

9.5.2

9.5.3

9.5.4

9.5.5

9.6.0

9.7.0

9.7.1

9.8.0

9.9.0

Mono Color

• 0f3b973be5 fix: close the search client a handle owns, not the default alias (#902) master Sean WhalenandClaude Opus 5 2026-09-09 19:07:29 -04:00
• 3d387c29e8 fix: close the search client a handle owns, not the default alias fix/output-client-close-on-reload Sean WhalenandClaude Opus 5 2026-09-09 15:00:07 -04:00
• 77045c2df0 chore: address CodeQL code-quality findings (no behavior change) (#900) Sean WhalenandClaude Opus 5 2026-09-09 19:06:34 -04:00
• d185bd0526 Fix file descriptor leak in parse_report_file (CodeQL py/file-not-closed) (#899) Sean WhalenandClaude Opus 5 2026-09-09 18:44:38 -04:00
• 95ddc8a323 Fix missing-file error paths falling through in find_unknown_base_reverse_dns.py (#903) Sean WhalenandClaude Opus 5 2026-09-09 18:44:15 -04:00
• 4298603713 Fix CodeQL findings: use sys.exit(), remove dead index_date stores (#898) Sean WhalenandClaude Opus 5 2026-09-09 18:44:15 -04:00
• 479249040d Fix missing-file error paths falling through in find_unknown_base_reverse_dns.py fix/map-script-error-exits Sean WhalenandClaude Opus 5 2026-09-09 14:51:52 -04:00
• 9ab432e7d3 Fix CodeQL findings: use sys.exit(), remove dead index_date stores chore/use-sys-exit Sean WhalenandClaude Opus 5 2026-09-09 14:21:26 -04:00
• e1c2e42d5d Dockerfile: bind-mount the wheel so it stops shipping in every published image (#893) 4 people 2026-09-09 19:10:37 +02:00
• de88cd893f chore: update IPinfo Lite MMDB (#896) github-actions[bot]andseanthegeek 2026-09-08 12:02:41 -04:00
• 09c88ca2a3 11.0.1 release: harden failure-report sample filenames and cap decompressed report size (#895) 11.0.1 Sean WhalenandClaude Fable 5.1 2026-09-03 15:51:44 -04:00
• 823b0a1811 chore: update IPinfo Lite MMDB (#894) github-actions[bot]andseanthegeek 2026-09-01 18:30:07 -04:00
• 15e7db1811 11.0.0 release: bump version and finalize changelog (#892) 11.0.0 Sean WhalenandClaude Fable 5 2026-08-28 22:50:46 -04:00
• 0d832ff682 Make dashboard-dev-bootstrap.sh work with Docker or Podman (#891) Sean WhalenandClaude Fable 5 2026-08-28 22:47:00 -04:00
• 07b00a931b Warn on unmatched CLI paths; send Kafka failure/SMTP TLS reports per-report (#890) Sean WhalenandClaude Fable 5 2026-08-28 18:23:07 -04:00
• 2d76de9ca6 Fix ignored number_of_replicas and add a --dns-timeout alias (#889) Sean WhalenandClaude Fable 5 2026-08-28 17:56:14 -04:00
• 07bca1ad28 Make the output and mailbox integrations optional extras (#888) 3 people 2026-08-28 17:33:18 -04:00
• 52be8850b2 10.5.0 release: bump version and finalize changelog (#887) 10.5.0 Sean WhalenandClaude Fable 5 2026-08-28 15:16:48 -04:00
• cd864f4cfc Add DNS over HTTPS and DNS over TLS support via the nameservers option (#886) Sean WhalenandClaude Fable 5 2026-08-28 15:03:51 -04:00
• ffdb220af9 Import optional mailbox connections lazily in parsedmarc.mail (#884) 4 people 2026-08-28 20:16:08 +03:00
• 758d1ffe49 Decode failure report MIME parts per their Content-Transfer-Encoding (#885) Sean WhalenandClaude Fable 5 2026-08-28 12:14:07 -04:00
• d52fca130d chore: update IPinfo Lite MMDB (#881) github-actions[bot]andseanthegeek 2026-08-24 09:21:30 -04:00
• 6358c36401 chore: update GitHub Actions to latest major versions (#879) Sean WhalenandClaude Fable 5 2026-08-19 09:29:17 -04:00
• 579626d6ce Don't log full event bodies when Google SecOps rejects an event google-secops-parser Sean WhalenandClaude Fable 5 2026-08-18 17:57:13 -04:00
• f15d4a309a Merge master into google-secops-parser Sean WhalenandClaude Fable 5 2026-08-18 17:56:45 -04:00
• e48521bb47 CI: replace deprecated codecov/test-results-action with codecov-action@v5 (#877) Sean WhalenandClaude Fable 5 2026-08-18 17:46:56 -04:00
• 8e200181e7 10.4.3 release: bump mailsuite floor to >=2.3.1 (#876) 10.4.3 Sean WhalenandClaude Fable 5 2026-08-18 13:55:51 -04:00
• 2352603eda 10.4.2 release (#875) 10.4.2 Sean WhalenandClaude Fable 5 2026-08-17 18:47:26 -04:00
• 400f3d319c Automate releases and docs deployment (#874) Sean WhalenandClaude Fable 5 2026-08-17 18:22:12 -04:00
• 7acfaa0cea chore: update IPinfo Lite MMDB (#873) github-actions[bot]andseanthegeek 2026-08-17 14:00:59 -04:00
• c730a1aefa Correcting the incorrect interval name (#872) ericericsw 2026-08-17 01:51:53 +08:00
• 5b2dfa7d1a chore: update IPinfo Lite MMDB (#871) github-actions[bot]andseanthegeek 2026-08-10 09:15:05 -04:00
• 6f56b92c44 chore: update IPinfo Lite MMDB (#870) github-actions[bot]andseanthegeek 2026-08-03 18:47:52 -04:00
• b304cf8639 Cover index_prefix_domain_map and index_suffix in index migrations (#868) (#869) 10.4.1 Sean WhalenandClaude Opus 5 2026-07-27 20:48:00 -04:00
• 7500d48c9e chore: update IPinfo Lite MMDB (#867) github-actions[bot]andseanthegeek 2026-07-27 08:48:13 -04:00
• 5c7f4ba048 Clear shared IP cache in parallel test setUp for isolation (#866) 10.4.0 Sean WhalenandClaude Fable 5 2026-07-26 18:41:08 -04:00
• 483ae8112d 10.4.0 release Sean Whalen 2026-07-26 18:16:30 -04:00
• a5a5b45a50 Unify DMARC pass/fail chart naming on "DMARC compliance" (#865) Sean WhalenandClaude Fable 5 2026-07-26 18:13:06 -04:00
• 641c64ad02 Add PR #863 review lessons to AGENTS.md (#864) Sean WhalenandClaude Fable 5 2026-07-26 17:09:26 -04:00
• 35e51218b9 Don't archive/delete mailbox messages until output destinations confirm the save (#863) Sean WhalenandClaude Fable 5 2026-07-26 17:07:03 -04:00
• f1f31542ad Prune obsolete permission allowlist entries (#862) Sean WhalenandClaude Fable 5 2026-07-26 14:53:44 -04:00
• a03b5074ee Allowlist the current test/lint/type-check command forms (#861) Sean WhalenandClaude Fable 5 2026-07-26 14:42:25 -04:00
• dbfc8a0a11 Remove the inert enter-auto-mode clause from the model split (#860) Sean WhalenandClaude Fable 5 2026-07-26 14:37:09 -04:00
• 29a4dd5149 Consolidate AGENTS.md review lessons thematically (#859) Sean WhalenandClaude Fable 5 2026-07-26 14:11:39 -04:00
• ae5f4c7915 Add per-report-type mailbox delete options (#858) Sean WhalenandClaude Fable 5 2026-07-26 13:31:37 -04:00
• 264b9a4556 Add [general] archive_directory to archive processed local files (#570) (#856) Sean WhalenandClaude Fable 5 2026-07-26 11:56:01 -04:00
• f3689c3125 Use Opus for large implementations in the CLAUDE.md model split (#857) Sean WhalenandClaude Fable 5 2026-07-26 11:42:47 -04:00
• a421747a79 Add a Domain policy dropdown filter to the Splunk aggregate dashboard (#854) (#855) Sean WhalenandClaude Fable 5 2026-07-25 20:48:44 -04:00
• b02a7972b5 Clarify the two-directory code span in the #851 verification lesson (#853) Sean WhalenandClaude Fable 5 2026-07-25 19:36:31 -04:00
• 2084e5d162 Document the review lessons from PR #851's review cycle (#852) Sean WhalenandClaude Fable 5 2026-07-25 19:31:56 -04:00
• 4e80047e68 Centralize configuration handling with ParserConfig (#503) (#851) Sean WhalenandClaude Fable 5 2026-07-25 19:27:09 -04:00
• 4f4733003c Document the review lessons from PR #849's review cycle (#850) Sean WhalenandClaude Fable 5 2026-07-25 17:42:59 -04:00
• 48445c639e Extend n_procs parallel parsing to mbox and mailbox sources (#147) (#849) Sean WhalenandClaude Fable 5 2026-07-25 17:14:40 -04:00
• c95d4666dc Release 10.3.0 (#848) 10.3.0 Sean WhalenandClaude Fable 5 2026-07-25 13:51:20 -04:00
• 0a95a0ceb2 Upgrade ruff to 0.16.0 and pyright to 1.1.411; convert to f-strings (#847) Sean WhalenandClaude Fable 5 2026-07-25 13:46:36 -04:00
• df086e7242 Fix mbox-run progress display and document n_procs scope (#147) (#846) Sean WhalenandClaude Fable 5 2026-07-25 13:11:54 -04:00
• 03dc92519a Document the seam-review lesson from PR #839's review cycle (#845) Sean WhalenandClaude Fable 5 2026-07-25 12:41:33 -04:00
• 23c5ea9ad6 Fix DKIM/SPF and SMTP TLS detail-table cross-products in dashboards (#169) (#839) Sean WhalenandClaude Fable 5 2026-07-25 12:29:40 -04:00
• 14d881ef74 Stop seeding the large synthetic report into the dev dashboards (#844) Sean WhalenandClaude Fable 5 2026-07-25 12:24:01 -04:00
• 864f11e2be Accept directory paths as file_path arguments, add -r/--recursive (#843) Sean WhalenandClaude Fable 5 2026-07-25 12:09:42 -04:00
• cdd7870984 Fix blank below-fold panels in Grafana full-dashboard screenshots (#841) Sean WhalenandClaude Fable 5 2026-07-24 22:17:10 -04:00
• 72bece4686 Add dashboard screenshot harness to the dev tooling (#840) Sean WhalenandClaude Fable 5 2026-07-22 17:01:07 -04:00
• 4fa8cfb1e7 Skip the results email when no reports were parsed (#837) Sean WhalenandClaude Fable 5 2026-07-21 20:49:41 -04:00
• e98e12acb0 Normalize aggregate result words to lowercase (#835) 3 people 2026-07-21 17:02:24 -07:00
• 6acacd01d1 Address post-merge Copilot findings from #834 (#836) Sean WhalenandClaude Fable 5 2026-07-21 19:29:28 -04:00
• 62514bd72a Add per-domain DMARC compliance percentage to all aggregate dashboards (#834) Sean WhalenandClaude Fable 5 2026-07-21 19:23:55 -04:00
• 855d267650 Bump version to 10.2.4 and update changelog 10.2.4 Sean Whalen 2026-07-20 19:51:15 -04:00
• d9f6532841 Default missing Feedback-Type and Authentication-Results in failure reports (#332) (#831) supaeasy 2026-07-20 21:21:55 +02:00
• 5dc83613e6 chore: update IPinfo Lite MMDB (#832) github-actions[bot]andseanthegeek 2026-07-20 15:15:19 -04:00
• 1986835f51 Fix daily-cadence charts defaulting to sub-day time buckets (#828) (#830) Sean WhalenandClaude Sonnet 5 2026-07-16 20:17:57 -04:00
• 3b53f836a6 Map two domain batches: MMDB ASN-coverage gap and uncategorized-sources export Sean WhalenandClaude Sonnet 5 2026-07-16 19:29:21 -04:00
• 7d87ba18be Ingest uncategorized-sources exports and add MMDB coverage scan with anti-poisoning guards (#829) Sean WhalenandClaude Fable 5 2026-07-16 18:21:47 -04:00
• 64ddb13f18 Clarify introductory guidance in AGENTS.md by removing redundant phrasing Sean Whalen 2026-07-16 17:10:15 -04:00
• 51cd3bfa45 Fix file path reference in AGENTS.md for clarity Sean Whalen 2026-07-16 17:09:37 -04:00
• 1f1a0f0a0e Refactor AGENTS.md to remove redundant file paths for clarity Sean Whalen 2026-07-16 16:54:55 -04:00
• eb7f11798b Remove examples in privacy rule regarding full IPv4 addresses in AGENTS.md Sean Whalen 2026-07-16 16:48:31 -04:00
• 0e31dcc0b8 Extract reverse-DNS map guidance to a nested AGENTS.md Sean WhalenandClaude Fable 5 2026-07-16 16:42:59 -04:00
• df9bf82e04 Post-review follow-ups for Graph send (#825/#826) and requests-to-httpx migration (#827) Sean WhalenandClaude Fable 5 2026-07-14 16:11:47 -04:00
• 31c928d6fc Refresh Microsoft Graph docs: national clouds, examples, troubleshooting (#826) KiliandClaude Sonnet 5 2026-07-14 19:34:56 +02:00
• 40509f801b Migrate Elasticsearch output to the elasticsearch-py 8.x client (#822) Sean WhalenandClaude Fable 5 2026-07-13 13:50:25 -04:00
• a1fd66de04 Bump version to 10.2.2 10.2.2 Sean Whalen 2026-07-13 10:08:51 -04:00
• 01b85ab7de Fix aggregate-report timestamp skew on non-UTC hosts (#819) (#821) Sean WhalenandClaude Sonnet 5 2026-07-13 09:59:35 -04:00
• f33951c0bb Fix host-dependent flakiness in testMissingEverythingRaisesFileNotFoundError (#820) 3 people 2026-07-13 15:32:32 +02:00
• 547e6d7113 chore: update IPinfo Lite MMDB (#818) github-actions[bot]andseanthegeek 2026-07-13 09:17:41 -04:00
• 18b38c991d Add verify skill and document model roles in CLAUDE.md (#817) Sean WhalenandClaude Sonnet 5 2026-07-12 09:33:57 -04:00
• 746da77de5 Raise test coverage: utils.py, elastic.py, and opensearch.py to 100% (#816) Sean WhalenandClaude Fable 5 2026-07-11 18:21:04 -04:00
• ae5a5043ab Cover the remaining gsecops.py branches with sample-driven tests Sean WhalenandClaude Fable 5 2026-07-11 16:45:56 -04:00
• 7ce8b63688 Ensure aggregate report output always has an xml_schema value Sean WhalenandClaude Fable 5 2026-07-11 15:52:47 -04:00
• 8935e733cf Revert overanalyzed changes Sean Whalen 2026-07-11 16:14:20 -04:00
• 84848418f9 Disambiguate "aggregate rows" in the xml_schema changelog entry Sean WhalenandClaude Fable 5 2026-07-11 16:04:03 -04:00
• cd2785d440 Frame aggregate detection accurately: <feedback> is the detector Sean WhalenandClaude Fable 5 2026-07-11 15:57:29 -04:00
• 571bbf741b Guarantee non-empty xml_schema: <feedback> identifies the report, not <version> Sean WhalenandClaude Fable 5 2026-07-11 15:52:47 -04:00
• a131fa937b Explain the actual language constraint behind the 1b boolean conversion Sean WhalenandClaude Fable 5 2026-07-11 15:42:48 -04:00
• 4590c0b10c Fix stale boolean-storage comments missed in the bool_value change Sean WhalenandClaude Fable 5 2026-07-11 15:38:21 -04:00
• c8e8cb54c0 Store CBN parser booleans as typed bool_value Sean WhalenandClaude Fable 5 2026-07-11 15:32:12 -04:00
• fba083f351 Add Google SecOps (Chronicle) output via the v1 events.import API Sean WhalenandClaude Fable 5 2026-07-11 15:08:31 -04:00
• 95e881bdb3 Fix SecOps parser review findings Sean WhalenandClaude Fable 5 2026-07-11 14:10:29 -04:00
• 0e3f5f37bc Include policy identity on SMTP TLS failure-detail rows Sean WhalenandClaude Fable 5 2026-07-11 14:10:05 -04:00
• e52e6abbe5 Tag drop{} statements per content-hub convention Sean WhalenandClaude Opus 4.8 2026-06-04 12:15:05 -04:00
• 53402c28fe Store numbers as number_value; fix conditional guards to != "" Sean WhalenandClaude Opus 4.8 2026-06-04 12:08:10 -04:00