Commit Graph

Select branches

Hide Pull Requests

copilot/add-google-secops-output-module

copilot/create-google-secops-parser

gh-pages

google-secops-parser

master

#100

#106

#11

#11

#119

#120

#122

#13

#13

#132

#135

#14

#145

#146

#150

#151

#157

#160

#161

#164

#165

#170

#182

#183

#186

#188

#190

#191

#199

#2

#207

#21

#210

#212

#214

#216

#217

#220

#222

#223

#224

#225

#230

#232

#236

#237

#239

#241

#244

#245

#247

#248

#25

#252

#254

#263

#264

#265

#274

#276

#278

#281

#284

#285

#294

#297

#30

#301

#306

#307

#308

#313

#316

#32

#320

#322

#324

#326

#327

#328

#331

#334

#335

#341

#342

#343

#344

#349

#352

#353

#360

#361

#363

#364

#366

#368

#369

#375

#376

#377

#383

#384

#385

#386

#394

#395

#398

#404

#405

#406

#407

#408

#411

#413

#414

#415

#417

#42

#420

#427

#43

#430

#432

#433

#434

#436

#443

#444

#445

#446

#449

#450

#451

#453

#456

#458

#459

#460

#462

#465

#466

#467

#468

#469

#470

#471

#477

#481

#482

#491

#492

#494

#496

#497

#50

#501

#504

#508

#509

#510

#511

#513

#514

#515

#516

#517

#518

#519

#520

#522

#524

#526

#527

#529

#530

#531

#532

#536

#537

#546

#547

#548

#550

#552

#553

#555

#558

#562

#566

#567

#569

#571

#578

#585

#586

#587

#589

#59

#590

#594

#596

#597

#598

#603

#604

#606

#61

#613

#617

#618

#62

#620

#622

#623

#627

#628

#629

#63

#630

#631

#632

#633

#634

#635

#639

#640

#642

#644

#645

#646

#647

#648

#649

#650

#652

#654

#656

#657

#658

#659

#660

#661

#662

#664

#666

#667

#668

#669

#670

#671

#672

#673

#676

#677

#678

#679

#680

#685

#686

#687

#688

#689

#691

#692

#693

#694

#695

#696

#697

#698

#699

#700

#701

#702

#703

#704

#705

#706

#708

#709

#710

#711

#712

#713

#714

#715

#716

#717

#718

#719

#720

#721

#722

#723

#724

#725

#726

#727

#728

#729

#730

#731

#732

#733

#734

#735

#736

#737

#738

#739

#740

#741

#743

#744

#745

#746

#747

#748

#749

#750

#751

#752

#753

#754

#755

#756

#757

#758

#759

#760

#761

#762

#763

#764

#765

#766

#767

#768

#769

#770

#771

#772

#773

#774

#775

#776

#777

#778

#779

#780

#781

#783

#784

#785

#786

#787

#788

#790

#790

#791

#793

#794

#796

#797

#798

#799

#8

#800

#801

#802

#803

#804

#805

#807

#809

#812

#813

#815

#816

#817

#818

#820

#821

#822

#823

#824

#825

#826

#827

#829

#830

#831

#832

#834

#835

#836

#837

#839

#840

#841

#843

#844

#845

#846

#847

#848

#849

#850

#851

#852

#853

#855

#856

#857

#858

#859

#860

#861

#862

#863

#864

#865

#866

#867

#869

#97

#98

10.0.0

10.0.3

10.0.4

10.1.0

10.1.1

10.2.0

10.2.1

10.2.2

10.2.4

10.3.0

10.4.0

10.4.1

5.16.0

5.17.0

8.15.1

8.15.2

8.15.4

8.16.0

8.16.1

8.17.0

8.18.1

8.18.2

8.18.3

8.18.4

8.18.5

8.18.6

8.18.7

8.19.0

8.19.1

9.0.10

9.0.2

9.0.3

9.0.6

9.0.7

9.1.1

9.1.2

9.10.0

9.10.1

9.10.2

9.10.3

9.11.0

9.11.1

9.11.2

9.2.0

9.2.1

9.3.0

9.3.1

9.4.0

9.5.0

9.5.1

9.5.2

9.5.3

9.5.4

9.5.5

9.6.0

9.7.0

9.7.1

9.8.0

9.9.0

Mono Color

• 0bf39b019a Update docs gh-pages Sean Whalen 2026-07-27 20:51:09 -04:00
• b304cf8639 Cover index_prefix_domain_map and index_suffix in index migrations (#868) (#869) master 10.4.1 3 people 2026-07-27 20:48:00 -04:00
• 7500d48c9e chore: update IPinfo Lite MMDB (#867) 3 people 2026-07-27 08:48:13 -04:00
• 5c7f4ba048 Clear shared IP cache in parallel test setUp for isolation (#866) 10.4.0 3 people 2026-07-26 18:41:08 -04:00
• 39037ba327 Update docs Sean Whalen 2026-07-26 18:20:03 -04:00
• 483ae8112d 10.4.0 release Sean Whalen 2026-07-26 18:16:30 -04:00
• a5a5b45a50 Unify DMARC pass/fail chart naming on "DMARC compliance" (#865) 3 people 2026-07-26 18:13:06 -04:00
• 641c64ad02 Add PR #863 review lessons to AGENTS.md (#864) 3 people 2026-07-26 17:09:26 -04:00
• 35e51218b9 Don't archive/delete mailbox messages until output destinations confirm the save (#863) 3 people 2026-07-26 17:07:03 -04:00
• f1f31542ad Prune obsolete permission allowlist entries (#862) 3 people 2026-07-26 14:53:44 -04:00
• a03b5074ee Allowlist the current test/lint/type-check command forms (#861) 3 people 2026-07-26 14:42:25 -04:00
• dbfc8a0a11 Remove the inert enter-auto-mode clause from the model split (#860) 3 people 2026-07-26 14:37:09 -04:00
• 29a4dd5149 Consolidate AGENTS.md review lessons thematically (#859) 3 people 2026-07-26 14:11:39 -04:00
• ae5f4c7915 Add per-report-type mailbox delete options (#858) 3 people 2026-07-26 13:31:37 -04:00
• 264b9a4556 Add [general] archive_directory to archive processed local files (#570) (#856) 3 people 2026-07-26 11:56:01 -04:00
• f3689c3125 Use Opus for large implementations in the CLAUDE.md model split (#857) 3 people 2026-07-26 11:42:47 -04:00
• a421747a79 Add a Domain policy dropdown filter to the Splunk aggregate dashboard (#854) (#855) 3 people 2026-07-25 20:48:44 -04:00
• b02a7972b5 Clarify the two-directory code span in the #851 verification lesson (#853) 3 people 2026-07-25 19:36:31 -04:00
• 2084e5d162 Document the review lessons from PR #851's review cycle (#852) 3 people 2026-07-25 19:31:56 -04:00
• 4e80047e68 Centralize configuration handling with ParserConfig (#503) (#851) 3 people 2026-07-25 19:27:09 -04:00
• 4f4733003c Document the review lessons from PR #849's review cycle (#850) 3 people 2026-07-25 17:42:59 -04:00
• 48445c639e Extend n_procs parallel parsing to mbox and mailbox sources (#147) (#849) 3 people 2026-07-25 17:14:40 -04:00
• d2d4c980ae Update docs Sean Whalen 2026-07-25 13:53:18 -04:00
• c95d4666dc Release 10.3.0 (#848) 10.3.0 3 people 2026-07-25 13:51:20 -04:00
• 0a95a0ceb2 Upgrade ruff to 0.16.0 and pyright to 1.1.411; convert to f-strings (#847) 3 people 2026-07-25 13:46:36 -04:00
• df086e7242 Fix mbox-run progress display and document n_procs scope (#147) (#846) 3 people 2026-07-25 13:11:54 -04:00
• 03dc92519a Document the seam-review lesson from PR #839's review cycle (#845) 3 people 2026-07-25 12:41:33 -04:00
• 23c5ea9ad6 Fix DKIM/SPF and SMTP TLS detail-table cross-products in dashboards (#169) (#839) 3 people 2026-07-25 12:29:40 -04:00
• 14d881ef74 Stop seeding the large synthetic report into the dev dashboards (#844) 3 people 2026-07-25 12:24:01 -04:00
• 864f11e2be Accept directory paths as file_path arguments, add -r/--recursive (#843) 3 people 2026-07-25 12:09:42 -04:00
• cdd7870984 Fix blank below-fold panels in Grafana full-dashboard screenshots (#841) 3 people 2026-07-24 22:17:10 -04:00
• 72bece4686 Add dashboard screenshot harness to the dev tooling (#840) 3 people 2026-07-22 17:01:07 -04:00
• f7518b43d2 Update docs Sean Whalen 2026-07-21 21:20:15 -04:00
• 4fa8cfb1e7 Skip the results email when no reports were parsed (#837) 3 people 2026-07-21 20:49:41 -04:00
• e98e12acb0 Normalize aggregate result words to lowercase (#835) 4 people 2026-07-21 17:02:24 -07:00
• 6acacd01d1 Address post-merge Copilot findings from #834 (#836) 3 people 2026-07-21 19:29:28 -04:00
• 62514bd72a Add per-domain DMARC compliance percentage to all aggregate dashboards (#834) 3 people 2026-07-21 19:23:55 -04:00
• d3dee042cc Update docs Sean Whalen 2026-07-20 19:53:46 -04:00
• 855d267650 Bump version to 10.2.4 and update changelog 10.2.4 Sean Whalen 2026-07-20 19:51:15 -04:00
• d9f6532841 Default missing Feedback-Type and Authentication-Results in failure reports (#332) (#831) supaeasyandGitHub 2026-07-20 21:21:55 +02:00
• 5dc83613e6 chore: update IPinfo Lite MMDB (#832) 3 people 2026-07-20 15:15:19 -04:00
• 1986835f51 Fix daily-cadence charts defaulting to sub-day time buckets (#828) (#830) 3 people 2026-07-16 20:17:57 -04:00
• 3b53f836a6 Map two domain batches: MMDB ASN-coverage gap and uncategorized-sources export Sean WhalenandClaude Sonnet 5 2026-07-16 19:29:21 -04:00
• 7d87ba18be Ingest uncategorized-sources exports and add MMDB coverage scan with anti-poisoning guards (#829) 3 people 2026-07-16 18:21:47 -04:00
• 64ddb13f18 Clarify introductory guidance in AGENTS.md by removing redundant phrasing Sean Whalen 2026-07-16 17:10:15 -04:00
• 51cd3bfa45 Fix file path reference in AGENTS.md for clarity Sean Whalen 2026-07-16 17:09:37 -04:00
• 1f1a0f0a0e Refactor AGENTS.md to remove redundant file paths for clarity Sean Whalen 2026-07-16 16:54:55 -04:00
• eb7f11798b Remove examples in privacy rule regarding full IPv4 addresses in AGENTS.md Sean Whalen 2026-07-16 16:48:31 -04:00
• 0e31dcc0b8 Extract reverse-DNS map guidance to a nested AGENTS.md Sean WhalenandClaude Fable 5 2026-07-16 16:42:59 -04:00
• df9bf82e04 Post-review follow-ups for Graph send (#825/#826) and requests-to-httpx migration (#827) 3 people 2026-07-14 16:11:47 -04:00
• 31c928d6fc Refresh Microsoft Graph docs: national clouds, examples, troubleshooting (#826) 3 people 2026-07-14 19:34:56 +02:00
• 40509f801b Migrate Elasticsearch output to the elasticsearch-py 8.x client (#822) 3 people 2026-07-13 13:50:25 -04:00
• 759ea2b815 Update docs Sean Whalen 2026-07-13 10:15:57 -04:00
• a1fd66de04 Bump version to 10.2.2 10.2.2 Sean Whalen 2026-07-13 10:08:51 -04:00
• 01b85ab7de Fix aggregate-report timestamp skew on non-UTC hosts (#819) (#821) 3 people 2026-07-13 09:59:35 -04:00
• f33951c0bb Fix host-dependent flakiness in testMissingEverythingRaisesFileNotFoundError (#820) 4 people 2026-07-13 15:32:32 +02:00
• 547e6d7113 chore: update IPinfo Lite MMDB (#818) 3 people 2026-07-13 09:17:41 -04:00
• 18b38c991d Add verify skill and document model roles in CLAUDE.md (#817) 3 people 2026-07-12 09:33:57 -04:00
• 746da77de5 Raise test coverage: utils.py, elastic.py, and opensearch.py to 100% (#816) 3 people 2026-07-11 18:21:04 -04:00
• ae5a5043ab Cover the remaining gsecops.py branches with sample-driven tests google-secops-parser Sean WhalenandClaude Fable 5 2026-07-11 16:45:56 -04:00
• 7ce8b63688 Ensure aggregate report output always has an xml_schema value Sean WhalenandClaude Fable 5 2026-07-11 15:52:47 -04:00
• 8935e733cf Revert overanalyzed changes Sean Whalen 2026-07-11 16:14:20 -04:00
• 84848418f9 Disambiguate "aggregate rows" in the xml_schema changelog entry Sean WhalenandClaude Fable 5 2026-07-11 16:04:03 -04:00
• cd2785d440 Frame aggregate detection accurately: <feedback> is the detector Sean WhalenandClaude Fable 5 2026-07-11 15:57:29 -04:00
• 571bbf741b Guarantee non-empty xml_schema: <feedback> identifies the report, not <version> Sean WhalenandClaude Fable 5 2026-07-11 15:52:47 -04:00
• a131fa937b Explain the actual language constraint behind the 1b boolean conversion Sean WhalenandClaude Fable 5 2026-07-11 15:42:48 -04:00
• 4590c0b10c Fix stale boolean-storage comments missed in the bool_value change Sean WhalenandClaude Fable 5 2026-07-11 15:38:21 -04:00
• c8e8cb54c0 Store CBN parser booleans as typed bool_value Sean WhalenandClaude Fable 5 2026-07-11 15:32:12 -04:00
• fba083f351 Add Google SecOps (Chronicle) output via the v1 events.import API Sean WhalenandClaude Fable 5 2026-07-11 15:08:31 -04:00
• 95e881bdb3 Fix SecOps parser review findings Sean WhalenandClaude Fable 5 2026-07-11 14:10:29 -04:00
• 0e3f5f37bc Include policy identity on SMTP TLS failure-detail rows Sean WhalenandClaude Fable 5 2026-07-11 14:10:05 -04:00
• e52e6abbe5 Tag drop{} statements per content-hub convention Sean WhalenandClaude Opus 4.8 2026-06-04 12:15:05 -04:00
• 53402c28fe Store numbers as number_value; fix conditional guards to != "" Sean WhalenandClaude Opus 4.8 2026-06-04 12:08:10 -04:00
• d8b8186328 Cite the official Chronicle content-hub parser repo Sean WhalenandClaude Opus 4.8 2026-06-04 11:27:38 -04:00
• 091ba3dfb4 Define CBN up front for new SecOps users Sean WhalenandClaude Opus 4.8 2026-06-04 11:13:03 -04:00
• 16082c046b Expand README references with the sources used Sean WhalenandClaude Opus 4.8 2026-06-04 11:09:58 -04:00
• 3fd371617a Detect aggregate reports by "xml_schema" instead of "domain" Sean WhalenandClaude Opus 4.8 2026-06-04 10:36:49 -04:00
• 319986f5fd Fix JSON type handling and pre-json field init in SecOps parser Sean WhalenandClaude Opus 4.8 2026-06-04 10:22:02 -04:00
• 7d9d693c05 Detect aggregate reports by "domain" instead of "adkim" Sean WhalenandClaude Opus 4.8 2026-06-04 09:42:28 -04:00
• cf601b6d01 Add Google SecOps (Chronicle) UDM parser for syslog output Sean WhalenandClaude Opus 4.8 2026-06-04 09:24:20 -04:00
• a1da7b3420 Bump version to 10.2.1 10.2.1 Sean Whalen 2026-07-09 20:50:45 -04:00
• 3fda55d385 Make Microsoft Graph connection activity observable (#815) 5 people 2026-07-10 02:46:39 +02:00
• 7fed72798a Stop system GeoIP files from shadowing the bundled IPinfo database (#813) 5 people 2026-07-10 02:07:00 +02:00
• cdda5dae62 Fix failure-report timestamp skew on non-UTC hosts in ES/OpenSearch/Splunk outputs (#812) 5 people 2026-07-10 01:45:34 +02:00
• 15dd69cc28 fix: update virtual environment setup to use python3 -m venv Sean Whalen 2026-07-09 19:42:10 -04:00
• fa8faa6b39 MS Graph: case-insensitive auth_method + ClientAssertion support (#809) 4 people 2026-07-09 19:46:36 +02:00
• 9a5f2d90da Update docs Sean Whalen 2026-07-06 09:40:01 -04:00
• a6241d537e Fix grammatical error in project maintenance note (#805) Ivan The GeekandGitHub 2026-07-06 09:33:14 -04:00
• 25638cc3cd chore: update IPinfo Lite MMDB (#807) 3 people 2026-07-06 09:29:52 -04:00
• 2547422f40 chore: update IPinfo Lite MMDB (#804) 3 people 2026-06-29 12:54:42 -04:00
• 862312526e Update docs Sean Whalen 2026-06-25 15:26:04 -04:00
• c423b8dfff Modernize type hints to PEP 585 / PEP 604 syntax (#803) 10.2.0 Sean WhalenandGitHub 2026-06-25 15:21:48 -04:00
• d13eb86782 Advertise supported Python versions via trove classifiers Sean WhalenandClaude Opus 4.8 2026-06-25 15:07:50 -04:00
• 31e0eeba4c Update docs Sean Whalen 2026-06-25 15:02:17 -04:00
• a67e8d3ebc 10.2.0 - Explain why a report is invalid instead of "Not a valid report" (#802) 3 people 2026-06-25 14:53:56 -04:00
• bc17e6afb2 chore: update IPinfo Lite MMDB (#801) 3 people 2026-06-23 13:46:35 -04:00
• d40447ea91 chore: update IPinfo Lite MMDB (#800) 3 people 2026-06-15 08:54:43 -04:00
• 8275665e11 10.1.1 10.1.1 Sean Whalen 2026-06-13 20:46:57 -04:00
• b0da277f0a Update docs Sean Whalen 2026-06-13 20:45:07 -04:00
• f00601f1b4 Update docs Sean Whalen 2026-06-12 21:56:08 -04:00