Commit Graph

  • e6e9369b1d Tag drop{} statements per content-hub convention google-secops-parser Sean Whalen 2026-06-04 12:15:05 -04:00
  • aabcfb4298 Store numbers as number_value; fix conditional guards to != "" Sean Whalen 2026-06-04 12:08:10 -04:00
  • 05c9177d73 Cite the official Chronicle content-hub parser repo Sean Whalen 2026-06-04 11:27:38 -04:00
  • 88034c7192 Define CBN up front for new SecOps users Sean Whalen 2026-06-04 11:13:03 -04:00
  • 1c234de9ff Expand README references with the sources used Sean Whalen 2026-06-04 11:09:58 -04:00
  • 46e694502d Detect aggregate reports by "xml_schema" instead of "domain" Sean Whalen 2026-06-04 10:36:49 -04:00
  • 2d9a2a2a8f Fix JSON type handling and pre-json field init in SecOps parser Sean Whalen 2026-06-04 10:22:02 -04:00
  • 784e3050bd Detect aggregate reports by "domain" instead of "adkim" Sean Whalen 2026-06-04 09:42:28 -04:00
  • ca27428713 Add Google SecOps (Chronicle) UDM parser for syslog output Sean Whalen 2026-06-04 09:24:20 -04:00
  • d95e5362a9 Remove unused warnings import (linter fix) copilot/add-google-secops-output-module copilot-swe-agent[bot] 2026-06-04 02:21:06 +00:00
  • 717518e702 Fix CodeQL URL validation security alerts in tests copilot-swe-agent[bot] 2026-06-04 02:20:12 +00:00
  • f1a91d75ad Add comprehensive test coverage for Google SecOps module copilot-swe-agent[bot] 2026-06-04 02:03:47 +00:00
  • 67ebe48344 Fix CI linter errors: initialize clients, add missing imports, and fix variable scope copilot-swe-agent[bot] 2026-06-04 01:50:46 +00:00
  • 8380bb102e Fix test_google_secops to use parsedmarc 10.x terminology copilot-swe-agent[bot] 2026-06-04 01:25:39 +00:00
  • b52a131859 Merge master branch: resolve conflicts and align with parsedmarc 10.x copilot-swe-agent[bot] 2026-06-04 01:15:38 +00:00
  • 7aa29df4a7 Align Google SecOps module with parsedmarc 10.x terminology (forensic → failure) copilot-swe-agent[bot] 2026-06-04 00:12:29 +00:00
  • 61266bc12d Align Google SecOps parser with parsedmarc 10+: rename forensic→failure, add new fields copilot/create-google-secops-parser copilot-swe-agent[bot] 2026-06-04 00:07:29 +00:00
  • ec0a313669 chore: update IPinfo Lite MMDB (#788) master github-actions[bot] 2026-06-01 13:26:09 -04:00
  • f65eebc4d8 chore: update IPinfo Lite MMDB (#787) github-actions[bot] 2026-05-26 14:37:59 -04:00
  • 08db305e5a test: cover no-display-name Reply-To header flattening (#786) Sean Whalen 2026-05-24 14:12:24 -04:00
  • 4f6ba12f17 Update docs gh-pages Sean Whalen 2026-05-24 13:59:26 -04:00
  • e104f1118c Land 10.0.3 changes on master (#785) 10.0.3 Sean Whalen 2026-05-24 13:54:40 -04:00
  • 2c8b2c0f14 Bump mailsuite to >=2.2.1 (release 10.0.2) (#783) Sean Whalen 2026-05-24 12:57:50 -04:00
  • 3f64e30f6f Update version to 10.0.1 and bump mailsuite requirement to >=2.2.0 Sean Whalen 2026-05-23 22:08:34 -04:00
  • 9e675bf43c Update build command to use pytest with coverage reporting 10.0.0 Sean Whalen 2026-05-21 17:15:29 -04:00
  • 9bc3a8f9d3 Update docs Sean Whalen 2026-05-21 17:09:27 -04:00
  • d92593f2da Add RFC 9990 fields to opensearch_dashboards.json Sean Whalen 2026-05-21 17:07:41 -04:00
  • 180fc581fe fix: OSD Global-tenant import + dropped report files with glob metacharacters; validate dev stack on OpenSearch 3.x with PostgreSQL (#781) Sean Whalen 2026-05-21 15:42:41 -04:00
  • 411f5a8886 chore: tidy cSpell config; fix two doc typos (#779) Sean Whalen 2026-05-21 13:52:52 -04:00
  • 2b3cd32b9c chore: move PostgreSQL Grafana dashboard into dashboards/grafana/ (#780) Sean Whalen 2026-05-21 13:52:33 -04:00
  • caac8e68f0 docs: note DMARC RFC support in the features list (#778) Sean Whalen 2026-05-21 13:41:16 -04:00
  • ef2fb84cc0 test: cover parsedmarc's mailbox processing loop end-to-end on a real Maildir (#777) Sean Whalen 2026-05-21 12:37:24 -04:00
  • a6778707d7 Finish forensic→failure rename: archive-folder migration + dashboard/doc cleanup (#776) Sean Whalen 2026-05-21 12:29:40 -04:00
  • 327fcff2b9 Add optional PostgreSQL storage backend (#667) Fabio Scaccabarozzi 2026-05-21 14:17:49 +01:00
  • 0a703172de Reorder enhancements in the changelog Sean Whalen 2026-05-20 21:39:20 -04:00
  • bf37ded688 Add support for Elastic Cloud Serverless projects (#770) DVB 2026-05-21 03:36:19 +02:00
  • 535d9db1ad cli: support _FILE suffix on PARSEDMARC_* env vars for Docker secrets (#772) Vincent 2026-05-21 03:11:44 +02:00
  • b7b8383fa4 Expand honest test coverage from 59% to 83%; fix two latent bugs (#775) Sean Whalen 2026-05-20 20:35:22 -04:00
  • 5b08627eaa Split tests.py into per-module tests/test_<module>.py (#774) Sean Whalen 2026-05-20 19:29:09 -04:00
  • ae1e5adb66 Add RFC 9989/9990/9991 (final DMARC) report support; rename forensic→failure project-wide (#659) Copilot 2026-05-20 18:51:08 -04:00
  • 8c5f63620c Fix Validate-dashboards CI: heredoc was redirecting itself to stdin (#773) Sean Whalen 2026-05-20 09:38:15 -04:00
  • 2d3e896f6d Fix pytest command line argument typo Sean Whalen 2026-05-19 21:17:47 -04:00
  • c5b2fcec54 Enhance CI with JUnit XML output and Codecov results Sean Whalen 2026-05-19 21:12:20 -04:00
  • a6ea169df5 chore: update IPinfo Lite MMDB (#771) github-actions[bot] 2026-05-18 09:41:38 -04:00
  • 1fc1134f77 chore: update IPinfo Lite MMDB (#769) github-actions[bot] 2026-05-11 15:05:33 -04:00
  • 508a7ba149 Update docs Sean Whalen 2026-05-08 12:41:19 -04:00
  • ff6f75d740 Map-data build hygiene: README single source of truth, drop maintainer scripts from wheel (9.11.2) (#768) 9.11.2 Sean Whalen 2026-05-08 12:36:48 -04:00
  • 053195581b collect_domain_info.py: opt-in DuckDuckGo search fallback for bot-blocked rows (#767) Sean Whalen 2026-05-08 11:33:10 -04:00
  • b31a9e022f Reclassify KU pool: 2,248 promotions + new ambiguous-output worklist (#766) Sean Whalen 2026-05-08 00:03:45 -04:00
  • 06d277686d classify_unknown_domains.py: enforce concept-parity across ~60 languages (#765) Sean Whalen 2026-05-07 19:01:15 -04:00
  • 3b705aeaa8 Commit classify_unknown_domains.py — regex-based multilingual classifier (#764) Sean Whalen 2026-05-07 17:16:23 -04:00
  • 9aa930f7cc Retroactive promotions: 3,171 KU rows reclassified by expanded multilingual classifier (#763) Sean Whalen 2026-05-07 17:00:25 -04:00
  • c25bf28c1c Classify reverse DNS map: final cleanup batch (~2,650 unmapped MMDB ASN domains) (#762) Sean Whalen 2026-05-07 16:48:56 -04:00
  • fa03b8f2c2 Classify reverse DNS map: next 10000 unmapped MMDB ASN domains (#761) Sean Whalen 2026-05-07 15:54:25 -04:00
  • e6716c9e80 Classify reverse DNS map: next 10000 unmapped MMDB ASN domains (#760) Sean Whalen 2026-05-07 15:13:26 -04:00
  • ee9bda7228 Classify reverse DNS map: next 10000 unmapped MMDB ASN domains (#759) Sean Whalen 2026-05-07 14:33:56 -04:00
  • 80a132801d Classify reverse DNS map: next 5000 unmapped MMDB ASN domains (#758) Sean Whalen 2026-05-07 13:46:28 -04:00
  • c523d0da9c Classify reverse DNS map: next 5000 unmapped MMDB ASN domains (#757) Sean Whalen 2026-05-07 13:21:52 -04:00
  • 4446702b84 Classify reverse DNS map: next 5000 unmapped MMDB ASN domains (#756) Sean Whalen 2026-05-07 12:59:16 -04:00
  • 7ef153b4da Classify reverse DNS map: next 5000 unmapped MMDB ASN domains (#755) Sean Whalen 2026-05-07 12:33:23 -04:00
  • 34518585b6 Classify reverse DNS map: next 1000 unmapped MMDB ASN domains (#754) Sean Whalen 2026-05-07 12:06:22 -04:00
  • 769b16bb03 Drift-detect rebrands: tighten regex; promote 11 verified rebrand-aliased map keys (#753) Sean Whalen 2026-05-07 11:31:58 -04:00
  • c752e776de Detect map-key rebrands via homepage drift sweep (#752) Sean Whalen 2026-05-06 21:22:30 -04:00
  • 6fa561d172 Classify reverse DNS map: ~2,100 unmapped MMDB ASN domains; bankonitusa.com → Navanta (#751) Sean Whalen 2026-05-06 21:20:14 -04:00
  • bf526f4e12 docs(AGENTS.md): require fresh branch off origin/master per batch (#750) Sean Whalen 2026-05-05 21:14:26 -04:00
  • 7ef31f8083 Classify reverse DNS map: next 1000 unmapped MMDB ASN domains (#749) Sean Whalen 2026-05-05 21:08:53 -04:00
  • ab9d4e93f5 Classify reverse DNS map: next 1000 unmapped MMDB ASN domains (#748) Sean Whalen 2026-05-05 17:59:36 -04:00
  • 1fd833bbf0 Classify reverse DNS map: next 1000 unmapped MMDB ASN domains (#747) Sean Whalen 2026-05-05 16:23:23 -04:00
  • 05adb9c831 Classify reverse DNS map: top ~1,950 unmapped MMDB ASN domains (#746) Sean Whalen 2026-05-05 14:20:10 -04:00
  • 7ba078bff1 Translate AS-name source rows via MMDB; classify reverse DNS batch (#745) Sean Whalen 2026-05-05 13:17:43 -04:00
  • d533ffca9d Update docs Sean Whalen 2026-05-04 18:55:19 -04:00
  • 6ff6261df9 docs: update installation instructions for IPinfo Lite and MaxMind GeoLite2 databases Sean Whalen 2026-05-04 18:52:18 -04:00
  • 98f6a00e86 Update docs Sean Whalen 2026-05-04 16:37:50 -04:00
  • 06fd3f2b09 docs: update installation instructions and usage notes for parsedmarc Sean Whalen 2026-05-04 16:34:51 -04:00
  • eebd9758ff Update docs Sean Whalen 2026-05-04 13:34:27 -04:00
  • 2c20731918 Update docs Sean Whalen 2026-05-04 13:22:48 -04:00
  • 7ba8a1d10f chore: update IPinfo Lite MMDB (#744) github-actions[bot] 2026-05-04 12:17:49 -04:00
  • 02a8014893 Fix splunk SMTP TLS dashboard: add additional renames for failure details and adjust stats query Sean Whalen 2026-05-03 19:58:29 -04:00
  • 8317ffcde8 Fix rename syntax for parsed_sample headers in Splunk DMARC forensic dashboard Sean Whalen 2026-05-03 19:09:04 -04:00
  • 3b9e678533 Refactor SMTP TLS dashboard with base search Sean Whalen 2026-05-03 18:50:54 -04:00
  • 5ba72d2783 Add source AS name to fillnull and search queries in DMARC aggregate dashboard Sean Whalen 2026-05-03 15:27:43 -04:00
  • e40b53da64 Enhance Splunk DMARC aggregate dashboard: add source AS name dropdown and update search queries Sean Whalen 2026-05-03 14:57:43 -04:00
  • fe296ca869 Update dashboard documentation Sean Whalen 2026-05-03 12:36:06 -04:00
  • 497cdcb7f8 Update docs Sean Whalen 2026-04-30 12:02:12 -04:00
  • 397378de8e Bump mailsuite to >=2.0.2 for 9.11.1 release (#743) 9.11.1 Sean Whalen 2026-04-30 11:59:11 -04:00
  • f7775e80ec Update docs Sean Whalen 2026-04-28 01:04:39 -04:00
  • 5d816a4e56 Offload mailbox layer to mailsuite>=2.0.0 (#741) 9.11.0 Sean Whalen 2026-04-28 00:58:36 -04:00
  • 900ee22525 Make map and country list side by side in the Splunk DMARC aggregate dashboard XML Sean Whalen 2026-04-27 16:03:29 -04:00
  • e709839f79 Fix typo in source ip viz Sean Whalen 2026-04-27 15:20:45 -04:00
  • e7f6e1b5e7 Update map files Sean Whalen 2026-04-27 12:59:11 -04:00
  • 26f54b1269 Add content rule to exclude adult websites from domain lists Sean Whalen 2026-04-27 12:01:51 -04:00
  • 44fd1aa555 Coerce malformed <email> in aggregate report metadata to None (#740) Sean Whalen 2026-04-27 12:00:55 -04:00
  • f3a2e894e0 chore: update IPinfo Lite MMDB (#739) github-actions[bot] 2026-04-27 08:28:00 -04:00
  • 265bf64240 Align Grafana dashboard with OpenSearch Dashboards source-of-truth (#738) Sean Whalen 2026-04-27 01:32:29 -04:00
  • 4e8c28bbc0 Align Kibana dashboards with OpenSearch Dashboards source-of-truth (#737) Sean Whalen 2026-04-27 01:30:48 -04:00
  • 826e78c390 Fix DMARC dashboard metrics (OSD + Splunk) and add dashboard-dev bootstrap (#736) 9.10.3 Sean Whalen 2026-04-27 00:40:01 -04:00
  • 0bd157be76 Update docs Sean Whalen 2026-04-27 00:38:45 -04:00
  • 8cc017fe84 ASN-domain coverage sweep #3: 516 new map entries (#735) Sean Whalen 2026-04-26 21:01:47 -04:00
  • d6d50a45e5 Add Tier 0 to the verification triage: globally-known brand at primary domain (#734) Sean Whalen 2026-04-26 19:03:45 -04:00
  • 6926e69d01 ASN-domain coverage sweep #2: 142 new map entries (#733) Sean Whalen 2026-04-26 18:53:48 -04:00