Commit Graph

Select branches

Hide Pull Requests

chore/use-sys-exit

fix/map-script-error-exits

fix/output-client-close-on-reload

google-secops-parser

master

#100

#106

#11

#11/merge

#119

#120

#122

#13

#13/merge

#132

#135

#14

#145

#146

#150

#151

#157

#160

#161

#164

#165

#170

#182

#183

#186

#188

#190

#191

#199

#2

#207

#21

#210

#212

#214

#216

#217

#220

#222

#223

#224

#225

#230

#232

#236

#237

#239

#241

#244

#245

#247

#248

#25

#252

#254

#263

#264

#265

#274

#276

#278

#281

#284

#285

#294

#297

#30

#301

#306

#307

#308

#313

#316

#32

#320

#322

#324

#326

#327

#328

#331

#334

#335

#341

#342

#343

#344

#349

#352

#353

#360

#361

#363

#364

#366

#368

#369

#375

#376

#377

#383

#384

#385

#386

#394

#395

#398

#404

#405

#406

#407

#408

#411

#413

#414

#415

#417

#42

#420

#427

#43

#430

#432

#433

#434

#436

#443

#444

#445

#446

#449

#450

#451

#453

#456

#458

#459

#460

#462

#465

#466

#467

#468

#469

#470

#471

#477

#481

#482

#491

#492

#494

#496

#497

#50

#501

#504

#508

#509

#510

#511

#513

#514

#515

#516

#517

#518

#519

#520

#522

#524

#526

#527

#529

#530

#531

#532

#536

#537

#546

#547

#548

#550

#552

#553

#555

#558

#562

#566

#567

#569

#571

#578

#585

#586

#587

#589

#59

#590

#594

#596

#597

#598

#603

#604

#606

#61

#613

#617

#618

#62

#620

#622

#623

#627

#628

#629

#63

#630

#631

#632

#633

#634

#635

#639

#640

#642

#644

#645

#646

#647

#648

#649

#650

#652

#654

#656

#657

#658

#659

#660

#661

#662

#664

#666

#667

#668

#669

#670

#671

#672

#673

#676

#677

#678

#679

#680

#685

#686

#687

#688

#689

#691

#692

#693

#694

#695

#696

#697

#698

#699

#700

#701

#702

#703

#704

#705

#706

#708

#709

#710

#711

#712

#713

#714

#715

#716

#717

#718

#719

#720

#721

#722

#723

#724

#725

#726

#727

#728

#729

#730

#731

#732

#733

#734

#735

#736

#737

#738

#739

#740

#741

#743

#744

#745

#746

#747

#748

#749

#750

#751

#752

#753

#754

#755

#756

#757

#758

#759

#760

#761

#762

#763

#764

#765

#766

#767

#768

#769

#770

#771

#772

#773

#774

#775

#776

#777

#778

#779

#780

#781

#783

#784

#785

#786

#787

#788

#790

#790/merge

#791

#793

#794

#796

#797

#798

#799

#8

#800

#801

#802

#803

#804

#805

#807

#809

#812

#813

#815

#816

#817

#818

#820

#821

#822

#823

#824

#825

#826

#827

#829

#830

#831

#832

#834

#835

#836

#837

#839

#840

#841

#843

#844

#845

#846

#847

#848

#849

#850

#851

#852

#853

#855

#856

#857

#858

#859

#860

#861

#862

#863

#864

#865

#866

#867

#869

#870

#871

#872

#873

#874

#875

#876

#877

#878

#879

#881

#884

#885

#886

#887

#888

#889

#890

#891

#892

#893

#894

#895

#896

#897

#898

#899

#900

#902

#903

#906

#907

#908

#909

#910

#911

#912

#913

#914

#916

#917

#918

#919

#920

#921

#922

#923

#925

#926

#926/merge

#927

#97

#98

10.0.0

10.0.3

10.0.4

10.1.0

10.1.1

10.2.0

10.2.1

10.2.2

10.2.4

10.3.0

10.4.0

10.4.1

10.4.2

10.4.3

10.5.0

11.0.0

11.0.1

11.0.2

11.0.3

11.0.4

11.0.5

5.16.0

5.17.0

8.15.1

8.15.2

8.15.4

8.16.0

8.16.1

8.17.0

8.18.1

8.18.2

8.18.3

8.18.4

8.18.5

8.18.6

8.18.7

8.19.0

8.19.1

9.0.10

9.0.2

9.0.3

9.0.6

9.0.7

9.1.1

9.1.2

9.10.0

9.10.1

9.10.2

9.10.3

9.11.0

9.11.1

9.11.2

9.2.0

9.2.1

9.3.0

9.3.1

9.4.0

9.5.0

9.5.1

9.5.2

9.5.3

9.5.4

9.5.5

9.6.0

9.7.0

9.7.1

9.8.0

9.9.0

Mono Color

• a1fd66de04 Bump version to 10.2.2 10.2.2 Sean Whalen 2026-07-13 10:08:51 -04:00
• 01b85ab7de Fix aggregate-report timestamp skew on non-UTC hosts (#819) (#821) Sean WhalenandClaude Sonnet 5 2026-07-13 09:59:35 -04:00
• f33951c0bb Fix host-dependent flakiness in testMissingEverythingRaisesFileNotFoundError (#820) 3 people 2026-07-13 15:32:32 +02:00
• 547e6d7113 chore: update IPinfo Lite MMDB (#818) github-actions[bot]andseanthegeek 2026-07-13 09:17:41 -04:00
• 18b38c991d Add verify skill and document model roles in CLAUDE.md (#817) Sean WhalenandClaude Sonnet 5 2026-07-12 09:33:57 -04:00
• 746da77de5 Raise test coverage: utils.py, elastic.py, and opensearch.py to 100% (#816) Sean WhalenandClaude Fable 5 2026-07-11 18:21:04 -04:00
• ae5a5043ab Cover the remaining gsecops.py branches with sample-driven tests Sean WhalenandClaude Fable 5 2026-07-11 16:45:56 -04:00
• 7ce8b63688 Ensure aggregate report output always has an xml_schema value Sean WhalenandClaude Fable 5 2026-07-11 15:52:47 -04:00
• 8935e733cf Revert overanalyzed changes Sean Whalen 2026-07-11 16:14:20 -04:00
• 84848418f9 Disambiguate "aggregate rows" in the xml_schema changelog entry Sean WhalenandClaude Fable 5 2026-07-11 16:04:03 -04:00
• cd2785d440 Frame aggregate detection accurately: <feedback> is the detector Sean WhalenandClaude Fable 5 2026-07-11 15:57:29 -04:00
• 571bbf741b Guarantee non-empty xml_schema: <feedback> identifies the report, not <version> Sean WhalenandClaude Fable 5 2026-07-11 15:52:47 -04:00
• a131fa937b Explain the actual language constraint behind the 1b boolean conversion Sean WhalenandClaude Fable 5 2026-07-11 15:42:48 -04:00
• 4590c0b10c Fix stale boolean-storage comments missed in the bool_value change Sean WhalenandClaude Fable 5 2026-07-11 15:38:21 -04:00
• c8e8cb54c0 Store CBN parser booleans as typed bool_value Sean WhalenandClaude Fable 5 2026-07-11 15:32:12 -04:00
• fba083f351 Add Google SecOps (Chronicle) output via the v1 events.import API Sean WhalenandClaude Fable 5 2026-07-11 15:08:31 -04:00
• 95e881bdb3 Fix SecOps parser review findings Sean WhalenandClaude Fable 5 2026-07-11 14:10:29 -04:00
• 0e3f5f37bc Include policy identity on SMTP TLS failure-detail rows Sean WhalenandClaude Fable 5 2026-07-11 14:10:05 -04:00
• e52e6abbe5 Tag drop{} statements per content-hub convention Sean WhalenandClaude Opus 4.8 2026-06-04 12:15:05 -04:00
• 53402c28fe Store numbers as number_value; fix conditional guards to != "" Sean WhalenandClaude Opus 4.8 2026-06-04 12:08:10 -04:00
• d8b8186328 Cite the official Chronicle content-hub parser repo Sean WhalenandClaude Opus 4.8 2026-06-04 11:27:38 -04:00
• 091ba3dfb4 Define CBN up front for new SecOps users Sean WhalenandClaude Opus 4.8 2026-06-04 11:13:03 -04:00
• 16082c046b Expand README references with the sources used Sean WhalenandClaude Opus 4.8 2026-06-04 11:09:58 -04:00
• 3fd371617a Detect aggregate reports by "xml_schema" instead of "domain" Sean WhalenandClaude Opus 4.8 2026-06-04 10:36:49 -04:00
• 319986f5fd Fix JSON type handling and pre-json field init in SecOps parser Sean WhalenandClaude Opus 4.8 2026-06-04 10:22:02 -04:00
• 7d9d693c05 Detect aggregate reports by "domain" instead of "adkim" Sean WhalenandClaude Opus 4.8 2026-06-04 09:42:28 -04:00
• cf601b6d01 Add Google SecOps (Chronicle) UDM parser for syslog output Sean WhalenandClaude Opus 4.8 2026-06-04 09:24:20 -04:00
• a1da7b3420 Bump version to 10.2.1 10.2.1 Sean Whalen 2026-07-09 20:50:45 -04:00
• 3fda55d385 Make Microsoft Graph connection activity observable (#815) 4 people 2026-07-10 02:46:39 +02:00
• 7fed72798a Stop system GeoIP files from shadowing the bundled IPinfo database (#813) 4 people 2026-07-10 02:07:00 +02:00
• cdda5dae62 Fix failure-report timestamp skew on non-UTC hosts in ES/OpenSearch/Splunk outputs (#812) 4 people 2026-07-10 01:45:34 +02:00
• 15dd69cc28 fix: update virtual environment setup to use python3 -m venv Sean Whalen 2026-07-09 19:42:10 -04:00
• fa8faa6b39 MS Graph: case-insensitive auth_method + ClientAssertion support (#809) 3 people 2026-07-09 19:46:36 +02:00
• a6241d537e Fix grammatical error in project maintenance note (#805) Ivan The Geek 2026-07-06 09:33:14 -04:00
• 25638cc3cd chore: update IPinfo Lite MMDB (#807) github-actions[bot]andseanthegeek 2026-07-06 09:29:52 -04:00
• 2547422f40 chore: update IPinfo Lite MMDB (#804) github-actions[bot]andseanthegeek 2026-06-29 12:54:42 -04:00
• c423b8dfff Modernize type hints to PEP 585 / PEP 604 syntax (#803) 10.2.0 Sean Whalen 2026-06-25 15:21:48 -04:00
• d13eb86782 Advertise supported Python versions via trove classifiers Sean WhalenandClaude Opus 4.8 2026-06-25 15:07:50 -04:00
• a67e8d3ebc 10.2.0 - Explain why a report is invalid instead of "Not a valid report" (#802) Sean WhalenandClaude Opus 4.8 2026-06-25 14:53:56 -04:00
• bc17e6afb2 chore: update IPinfo Lite MMDB (#801) github-actions[bot]andseanthegeek 2026-06-23 13:46:35 -04:00
• d40447ea91 chore: update IPinfo Lite MMDB (#800) github-actions[bot]andseanthegeek 2026-06-15 08:54:43 -04:00
• 8275665e11 10.1.1 10.1.1 Sean Whalen 2026-06-13 20:46:57 -04:00
• 8337b67351 Cover both arms of the optional psycopg import in postgres.py (#799) 10.1.0 Sean WhalenandClaude Fable 5 2026-06-12 21:48:20 -04:00
• eaeea4f53d Make the whole codebase pass pyright cleanly and enforce it in CI (#798) Sean WhalenandClaude Fable 5 2026-06-12 21:33:01 -04:00
• 0c456d44ed Declare backward-compatible method aliases inside class bodies (#797) Sean WhalenandClaude Fable 5 2026-06-12 20:50:47 -04:00
• ebc6a55715 Switch from kafka-python-ng to kafka-python>=2.3.2 (#795) (#796) Sean WhalenandClaude Fable 5 2026-06-12 20:25:35 -04:00
• a4be378e30 Update the changelog Sean Whalen 2026-06-12 20:14:02 -04:00
• d3510da3a6 feat: graceful SIGTERM/SIGINT shutdown for watch mode and one-shot CLI (#794) 3 people 2026-06-13 02:00:32 +02:00
• b869235224 Build multi-arch (amd64+arm64) Docker images with PostgreSQL support (#793) 10.0.4 Sean WhalenandClaude Opus 4.8 2026-06-08 17:42:00 -04:00
• 8ec3cc9ce8 chore: update IPinfo Lite MMDB (#791) github-actions[bot]andseanthegeek 2026-06-08 17:02:09 -04:00
• ec0a313669 chore: update IPinfo Lite MMDB (#788) github-actions[bot]andseanthegeek 2026-06-01 13:26:09 -04:00
• f65eebc4d8 chore: update IPinfo Lite MMDB (#787) github-actions[bot]andseanthegeek 2026-05-26 14:37:59 -04:00
• 08db305e5a test: cover no-display-name Reply-To header flattening (#786) Sean WhalenandClaude Opus 4.7 2026-05-24 14:12:24 -04:00
• e104f1118c Land 10.0.3 changes on master (#785) 10.0.3 Sean WhalenandClaude Opus 4.7 2026-05-24 13:54:40 -04:00
• 2c8b2c0f14 Bump mailsuite to >=2.2.1 (release 10.0.2) (#783) Sean WhalenandClaude Opus 4.7 2026-05-24 12:57:50 -04:00
• 3f64e30f6f Update version to 10.0.1 and bump mailsuite requirement to >=2.2.0 Sean Whalen 2026-05-23 22:08:34 -04:00
• 9e675bf43c Update build command to use pytest with coverage reporting 10.0.0 Sean Whalen 2026-05-21 17:15:29 -04:00
• d92593f2da Add RFC 9990 fields to opensearch_dashboards.json Sean Whalen 2026-05-21 17:07:41 -04:00
• 180fc581fe fix: OSD Global-tenant import + dropped report files with glob metacharacters; validate dev stack on OpenSearch 3.x with PostgreSQL (#781) Sean WhalenandClaude Opus 4.7 2026-05-21 15:42:41 -04:00
• 411f5a8886 chore: tidy cSpell config; fix two doc typos (#779) Sean WhalenandClaude Opus 4.7 2026-05-21 13:52:52 -04:00
• 2b3cd32b9c chore: move PostgreSQL Grafana dashboard into dashboards/grafana/ (#780) Sean WhalenandClaude Opus 4.7 2026-05-21 13:52:33 -04:00
• caac8e68f0 docs: note DMARC RFC support in the features list (#778) Sean WhalenandClaude Opus 4.7 2026-05-21 13:41:16 -04:00
• ef2fb84cc0 test: cover parsedmarc's mailbox processing loop end-to-end on a real Maildir (#777) Sean WhalenandClaude Opus 4.7 2026-05-21 12:37:24 -04:00
• a6778707d7 Finish forensic→failure rename: archive-folder migration + dashboard/doc cleanup (#776) Sean WhalenandClaude Opus 4.7 2026-05-21 12:29:40 -04:00
• 327fcff2b9 Add optional PostgreSQL storage backend (#667) Fabio ScaccabarozziandClaude Opus 4.7 2026-05-21 14:17:49 +01:00
• 0a703172de Reorder enhancements in the changelog Sean Whalen 2026-05-20 21:39:20 -04:00
• bf37ded688 Add support for Elastic Cloud Serverless projects (#770) DVB 2026-05-21 03:36:19 +02:00
• 535d9db1ad cli: support _FILE suffix on PARSEDMARC_* env vars for Docker secrets (#772) Vincent 2026-05-21 03:11:44 +02:00
• b7b8383fa4 Expand honest test coverage from 59% to 83%; fix two latent bugs (#775) Sean WhalenandClaude Opus 4.7 2026-05-20 20:35:22 -04:00
• 5b08627eaa Split tests.py into per-module tests/test_<module>.py (#774) Sean WhalenandClaude Opus 4.7 2026-05-20 19:29:09 -04:00
• ae1e5adb66 Add RFC 9989/9990/9991 (final DMARC) report support; rename forensic→failure project-wide (#659) 3 people 2026-05-20 18:51:08 -04:00
• 8c5f63620c Fix Validate-dashboards CI: heredoc was redirecting itself to stdin (#773) Sean Whalen 2026-05-20 09:38:15 -04:00
• 2d3e896f6d Fix pytest command line argument typo Sean Whalen 2026-05-19 21:17:47 -04:00
• c5b2fcec54 Enhance CI with JUnit XML output and Codecov results Sean Whalen 2026-05-19 21:12:20 -04:00
• a6ea169df5 chore: update IPinfo Lite MMDB (#771) github-actions[bot]andseanthegeek 2026-05-18 09:41:38 -04:00
• 1fc1134f77 chore: update IPinfo Lite MMDB (#769) github-actions[bot]andseanthegeek 2026-05-11 15:05:33 -04:00
• ff6f75d740 Map-data build hygiene: README single source of truth, drop maintainer scripts from wheel (9.11.2) (#768) 9.11.2 3 people 2026-05-08 12:36:48 -04:00
• 053195581b collect_domain_info.py: opt-in DuckDuckGo search fallback for bot-blocked rows (#767) 3 people 2026-05-08 11:33:10 -04:00
• b31a9e022f Reclassify KU pool: 2,248 promotions + new ambiguous-output worklist (#766) 3 people 2026-05-08 00:03:45 -04:00
• 06d277686d classify_unknown_domains.py: enforce concept-parity across ~60 languages (#765) 3 people 2026-05-07 19:01:15 -04:00
• 3b705aeaa8 Commit classify_unknown_domains.py — regex-based multilingual classifier (#764) 3 people 2026-05-07 17:16:23 -04:00
• 9aa930f7cc Retroactive promotions: 3,171 KU rows reclassified by expanded multilingual classifier (#763) 3 people 2026-05-07 17:00:25 -04:00
• c25bf28c1c Classify reverse DNS map: final cleanup batch (~2,650 unmapped MMDB ASN domains) (#762) 3 people 2026-05-07 16:48:56 -04:00
• fa03b8f2c2 Classify reverse DNS map: next 10000 unmapped MMDB ASN domains (#761) 3 people 2026-05-07 15:54:25 -04:00
• e6716c9e80 Classify reverse DNS map: next 10000 unmapped MMDB ASN domains (#760) 3 people 2026-05-07 15:13:26 -04:00
• ee9bda7228 Classify reverse DNS map: next 10000 unmapped MMDB ASN domains (#759) 3 people 2026-05-07 14:33:56 -04:00
• 80a132801d Classify reverse DNS map: next 5000 unmapped MMDB ASN domains (#758) 3 people 2026-05-07 13:46:28 -04:00
• c523d0da9c Classify reverse DNS map: next 5000 unmapped MMDB ASN domains (#757) 3 people 2026-05-07 13:21:52 -04:00
• 4446702b84 Classify reverse DNS map: next 5000 unmapped MMDB ASN domains (#756) 3 people 2026-05-07 12:59:16 -04:00
• 7ef153b4da Classify reverse DNS map: next 5000 unmapped MMDB ASN domains (#755) 3 people 2026-05-07 12:33:23 -04:00
• 34518585b6 Classify reverse DNS map: next 1000 unmapped MMDB ASN domains (#754) 3 people 2026-05-07 12:06:22 -04:00
• 769b16bb03 Drift-detect rebrands: tighten regex; promote 11 verified rebrand-aliased map keys (#753) 3 people 2026-05-07 11:31:58 -04:00
• c752e776de Detect map-key rebrands via homepage drift sweep (#752) 3 people 2026-05-06 21:22:30 -04:00
• 6fa561d172 Classify reverse DNS map: ~2,100 unmapped MMDB ASN domains; bankonitusa.com → Navanta (#751) 3 people 2026-05-06 21:20:14 -04:00
• bf526f4e12 docs(AGENTS.md): require fresh branch off origin/master per batch (#750) 3 people 2026-05-05 21:14:26 -04:00
• 7ef31f8083 Classify reverse DNS map: next 1000 unmapped MMDB ASN domains (#749) 3 people 2026-05-05 21:08:53 -04:00
• ab9d4e93f5 Classify reverse DNS map: next 1000 unmapped MMDB ASN domains (#748) 3 people 2026-05-05 17:59:36 -04:00
• 1fd833bbf0 Classify reverse DNS map: next 1000 unmapped MMDB ASN domains (#747) 3 people 2026-05-05 16:23:23 -04:00
• 05adb9c831 Classify reverse DNS map: top ~1,950 unmapped MMDB ASN domains (#746) 3 people 2026-05-05 14:20:10 -04:00
• 7ba078bff1 Translate AS-name source rows via MMDB; classify reverse DNS batch (#745) 3 people 2026-05-05 13:17:43 -04:00