Commit Graph

Select branches

Hide Pull Requests

copilot/add-google-secops-output-module

copilot/create-google-secops-parser

gh-pages

google-secops-parser

master

#100

#106

#11

#11

#119

#120

#122

#13

#13

#132

#135

#14

#145

#146

#150

#151

#157

#160

#161

#164

#165

#170

#182

#183

#186

#188

#190

#191

#199

#2

#207

#21

#210

#212

#214

#216

#217

#220

#222

#223

#224

#225

#230

#232

#236

#237

#239

#241

#244

#245

#247

#248

#25

#252

#254

#263

#264

#265

#274

#276

#278

#281

#284

#285

#294

#297

#30

#301

#306

#307

#308

#313

#316

#32

#320

#322

#324

#326

#327

#328

#331

#334

#335

#341

#342

#343

#344

#349

#352

#353

#360

#361

#363

#364

#366

#368

#369

#375

#376

#377

#383

#384

#385

#386

#394

#395

#398

#404

#405

#406

#407

#408

#411

#413

#414

#415

#417

#42

#420

#427

#43

#430

#432

#433

#434

#436

#443

#444

#445

#446

#449

#450

#451

#453

#456

#458

#459

#460

#462

#465

#466

#467

#468

#469

#470

#471

#477

#481

#482

#491

#492

#494

#496

#497

#50

#501

#504

#508

#509

#510

#511

#513

#514

#515

#516

#517

#518

#519

#520

#522

#524

#526

#527

#529

#530

#531

#532

#536

#537

#546

#547

#548

#550

#552

#553

#555

#558

#562

#566

#567

#569

#571

#578

#585

#586

#587

#589

#59

#590

#594

#596

#597

#598

#603

#604

#606

#61

#613

#617

#618

#62

#620

#622

#623

#627

#628

#629

#63

#630

#631

#632

#633

#634

#635

#639

#640

#642

#644

#645

#646

#647

#648

#649

#650

#652

#654

#656

#657

#658

#659

#660

#661

#662

#664

#666

#667

#668

#669

#670

#671

#672

#673

#676

#677

#678

#679

#680

#685

#686

#687

#688

#689

#691

#692

#693

#694

#695

#696

#697

#698

#699

#700

#701

#702

#703

#704

#705

#706

#708

#709

#710

#711

#712

#713

#714

#715

#716

#717

#718

#719

#720

#721

#722

#723

#724

#725

#726

#727

#728

#729

#730

#731

#732

#733

#734

#735

#736

#737

#738

#739

#740

#741

#743

#744

#745

#746

#747

#748

#749

#750

#751

#752

#753

#754

#755

#756

#757

#758

#759

#760

#761

#762

#763

#764

#765

#766

#767

#768

#769

#770

#771

#772

#773

#774

#775

#776

#777

#778

#779

#780

#781

#783

#784

#785

#786

#787

#788

#790

#790

#8

#97

#98

10.0.0

10.0.3

5.16.0

5.17.0

8.15.1

8.15.2

8.15.4

8.16.0

8.16.1

8.17.0

8.18.1

8.18.2

8.18.3

8.18.4

8.18.5

8.18.6

8.18.7

8.19.0

8.19.1

9.0.10

9.0.2

9.0.3

9.0.6

9.0.7

9.1.1

9.1.2

9.10.0

9.10.1

9.10.2

9.10.3

9.11.0

9.11.1

9.11.2

9.2.0

9.2.1

9.3.0

9.3.1

9.4.0

9.5.0

9.5.1

9.5.2

9.5.3

9.5.4

9.5.5

9.6.0

9.7.0

9.7.1

9.8.0

9.9.0

Mono Color

• cdc30e6780 Tune Codecov statuses for small PRs (#678) Kili 2026-03-09 22:43:34 +01:00
• f2febf21d3 Add fail_on_output_error CLI option for sink failures (#672) Kili 2026-03-09 22:35:38 +01:00
• 79f47121a4 Pass mailbox since filter through watch_inbox callback (#670) Kili 2026-03-09 22:33:42 +01:00
• 6e6c90e19b Add IMAP move/delete compatibility fallbacks (#671) Kili 2026-03-09 22:29:01 +01:00
• c4d7455839 Add OpenSearch AWS SigV4 authentication support (#673) Kili 2026-03-09 22:21:22 +01:00
• 95e6fb85a1 Fix Gmail delete_message to execute API request (#668) Kili 2026-03-09 22:11:35 +01:00
• 298d5b6e6e CI: split lint/docs/build from integration tests matrix (#669) Kili 2026-03-09 22:09:02 +01:00
• a3c5bb906b Add Gmail service account auth mode with delegated user support (#676) Kili 2026-03-09 22:04:30 +01:00
• d49ce6a13f Increase unit test coverage for Gmail/Graph/IMAP connectors (#664) Kili 2026-03-09 16:54:43 +01:00
• 81e0032182 Update docs Sean Whalen 2026-03-06 13:43:13 -05:00
• adb0d31382 9.1.2 9.1.2 Sean Whalen 2026-03-06 13:41:33 -05:00
• ae5d20ecf5 Fix duplicate detection for normalized aggregate reports in Elasticsearch/OpenSearch (#666) Copilot 2026-03-06 13:21:54 -05:00
• e98fdfa96b Fix Python 3.14 support metadata and require imapclient 3.1.0 (#662) Kili 2026-03-04 18:36:15 +01:00
• 9551c8b467 Add AGENTS.md for AI agent guidance and link from CLAUDE.md Sean Whalen 2026-03-03 21:00:55 -05:00
• d987943c22 Update changelog formatting for version 9.1.1 9.1.1 Sean Whalen 2026-03-03 11:46:13 -05:00
• e461d693df Update docs Sean Whalen 2026-03-03 11:45:14 -05:00
• 3d8a99b5d3 9.1.1 Sean Whalen 2026-03-03 11:43:44 -05:00
• 5aaaedf463 Use correct key names for elasticsearch/opensearch api keys (#660) Majid Burney 2026-03-03 08:35:05 -08:00
• 2e3ee25ec9 Drop Python 3.9 support (#661) Copilot 2026-03-03 11:34:35 -05:00
• e164972eac Update docs Sean Whalen 2026-02-20 14:47:51 -05:00
• 33eb2aaf62 9.1.0 Sean Whalen 2026-02-20 14:36:37 -05:00
• 1387fb4899 9.0.11 Sean Whalen 2026-02-20 14:27:46 -05:00
• 3dbf21f072 Fix code review feedback: remove erroneous category, use field existence checks copilot-swe-agent[bot] 2026-02-19 21:02:39 +00:00
• 2d2e2bc261 Add Google SecOps parser for parsedmarc syslog events copilot-swe-agent[bot] 2026-02-19 21:01:16 +00:00
• f830418381 Initial plan copilot-swe-agent[bot] 2026-02-19 20:50:02 +00:00
• 4d97bd25aa Skip DNS lookups in GitHub Actions to prevent test timeouts (#657) Copilot 2026-02-18 18:19:28 -05:00
• 17a612df0c Add TCP and TLS transport support to syslog module (#656) Copilot 2026-02-18 18:12:59 -05:00
• 221bc332ef Fixed a typo in policies.successful_session_count (#654) Blackmoon 2026-02-09 19:57:11 +01:00
• 47e5804aef Update docs Sean Whalen 2026-01-22 20:59:25 -05:00
• a2a75f7a81 Fix timestamp parsing in aggregate report by removing fractional seconds Sean Whalen 2026-01-21 13:08:48 -05:00
• 924cb10499 Update docs Sean Whalen 2026-01-19 14:43:21 -05:00
• 50fcb51577 Update supported Python versions in docs + readme (#652) Anael Mobilia 2026-01-19 20:40:01 +01:00
• 607ac31d14 Update docs Sean Whalen 2026-01-17 14:12:04 -05:00
• dd9ef90773 9.0.10 9.0.10 Sean Whalen 2026-01-17 14:09:18 -05:00
• dab2aaffda Update documentation with comprehensive field listings and correct service type examples copilot-swe-agent[bot] 2026-01-14 16:56:54 +00:00
• 19e8b498d0 Add source enrichment fields to forensic events matching aggregate reports copilot-swe-agent[bot] 2026-01-14 16:45:26 +00:00
• 91ae56c029 Add Chronicle Ingestion API support as primary method with stdout as alternative copilot-swe-agent[bot] 2026-01-13 16:04:52 +00:00
• e0818a22f4 Add IP enrichment fields to detection_fields for enhanced Chronicle filtering copilot-swe-agent[bot] 2026-01-13 15:29:11 +00:00
• da43efa4bf Move DMARC dimensions to detection_fields for Chronicle dashboard support copilot-swe-agent[bot] 2026-01-09 18:54:30 +00:00
• cf916509ea Add SMTP TLS test and fix YARA-L boolean comparisons copilot-swe-agent[bot] 2026-01-09 18:26:37 +00:00
• 6ad7233983 Preserve native types for booleans and integers in UDM output copilot-swe-agent[bot] 2026-01-09 16:29:51 +00:00
• 63f8334e27 Add SMTP TLS and parse error event examples to documentation copilot-swe-agent[bot] 2026-01-09 16:23:27 +00:00
• 1aa0147c33 Add mailbox monitoring examples to Google SecOps documentation copilot-swe-agent[bot] 2026-01-09 16:05:36 +00:00
• e9b4170591 Fix YARA-L rules to match actual event_type values in output copilot-swe-agent[bot] 2026-01-09 15:43:16 +00:00
• d3a314171f Replace Splunk SPL with YARA-L in Google SecOps search examples copilot-swe-agent[bot] 2026-01-09 15:31:18 +00:00
• b7823253a4 Fix SMTP TLS report policy domain extraction copilot-swe-agent[bot] 2026-01-09 15:15:50 +00:00
• 1887460ab6 Address code review feedback: remove redundant condition and improve test copilot-swe-agent[bot] 2026-01-09 15:12:33 +00:00
• c84ddb4e89 Add Google SecOps documentation and update README copilot-swe-agent[bot] 2026-01-09 15:10:30 +00:00
• 78c863bd12 Add Google SecOps output module implementation copilot-swe-agent[bot] 2026-01-09 15:07:47 +00:00
• 12b9b37026 Initial plan copilot-swe-agent[bot] 2026-01-09 14:56:48 +00:00
• 0d690e2fba Update docs Sean Whalen 2026-01-08 13:32:11 -05:00
• 0e3a4b0f06 9.0.9 Sean Whalen 2026-01-08 13:29:20 -05:00
• 551bc9ff68 Update docs Sean Whalen 2026-01-08 13:29:05 -05:00
• 343b53ef18 remove newlines before b64decode (#649) maraspr 2026-01-08 18:24:20 +01:00
• 792079a3e8 Validate that string is base64 (#648) maraspr 2026-01-08 16:15:27 +01:00
• 1f3a1fc843 Better typing Sean Whalen 2025-12-29 17:14:54 -05:00
• a0d40a1e10 Update docs Sean Whalen 2025-12-29 17:11:09 -05:00
• 34fa0c145d 9.0.8 Sean Whalen 2025-12-29 17:07:28 -05:00
• 6719a06388 Fix logging configuration not propagating to child parser processes (#646) Copilot 2025-12-29 15:07:22 -05:00
• eafa435868 Code cleanup 9.0.7 Sean Whalen 2025-12-29 14:32:05 -05:00
• faa0dbf9a5 Update docs Sean Whalen 2025-12-29 14:29:25 -05:00
• 5d772c3b36 Bump version to 9.0.7 and update changelog with IMAP since option fix Sean Whalen 2025-12-29 14:23:50 -05:00
• 72cabbef23 Fix IMAP SEARCH SINCE date format to RFC 3501 DD-Mon-YYYY (#645) Copilot 2025-12-29 14:18:48 -05:00
• 3d74cd6ac0 Update CHANGELOG with issue reference for email read status Sean Whalen 2025-12-29 12:10:19 -05:00
• d1ac59a016 fix #641 (#642) Tomáš Kováčik 2025-12-29 18:05:07 +01:00
• 7fdd53008f Update README.md (#644) Anael Mobilia 2025-12-29 16:36:21 +01:00
• f2545ed65c Update docs Sean Whalen 2025-12-25 17:27:32 -05:00
• 35331d4b84 Add parsedmarc.types module to API reference documentation 9.0.6 Sean Whalen 2025-12-25 17:24:45 -05:00
• ef1d001c16 Update docs Sean Whalen 2025-12-25 17:22:50 -05:00
• de9edd3590 Add note about email read status in Microsoft 365 to changelog Sean Whalen 2025-12-25 17:16:39 -05:00
• abf4bdba13 Add type annotations for SMTP TLS and forensic report structures Sean Whalen 2025-12-25 16:39:33 -05:00
• 7b842740f5 Change file permissions for tests.py to make it executable Sean Whalen 2025-12-25 16:02:33 -05:00
• ebe3ccf40a Update changelog for version 9.0.6 and set version in constants.py Sean Whalen 2025-12-25 16:01:25 -05:00
• 808285658f Refactor function parameters to use non-Optional types where applicable Sean Whalen 2025-12-25 16:01:12 -05:00
• bc1dae29bd Update mailsuite dependency version to 1.11.0 Sean Whalen 2025-12-25 15:32:27 -05:00
• 4b904444e5 Refactor and improve parsing and extraction functions Sean Whalen 2025-12-25 15:30:20 -05:00
• 3608bce344 Remove unused import of Union and cast from cli.py Sean Whalen 2025-12-24 16:53:22 -05:00
• fe809c4c3f Add type ignore comments for Pyright in elastic.py and opensearch.py Sean Whalen 2025-12-24 16:49:42 -05:00
• a76c2f9621 More code cleanup Sean Whalen 2025-12-24 16:36:59 -05:00
• bb8f4002bf Use literal dicts instead of ordered dicts and other code cleanup Sean Whalen 2025-12-24 15:04:10 -05:00
• b5773c6b4a Fix etree import to type checkers don't complain Sean Whalen 2025-12-24 14:37:38 -05:00
• b99bd67225 Fix get_base_domain() typing Sean Whalen 2025-12-24 14:32:05 -05:00
• af9ad568ec Specify Python version requirements in pyproject.toml Sean Whalen 2025-12-17 16:18:24 -05:00
• 748164d177 Fix #638 Sean Whalen 2025-12-17 16:09:26 -05:00
• 487e5e1149 Format on build Sean Whalen 2025-12-12 15:56:52 -05:00
• 73010cf964 Use ruff for code formatting Sean Whalen 2025-12-12 15:44:46 -05:00
• 630b63648a Update docs Sean Whalen 2025-12-08 15:38:21 -05:00
• a4a5475aa8 Fix another typo before releasing 9.0.5 Sean Whalen 2025-12-08 15:29:48 -05:00
• dab78880df Actual 9.0.5 release Sean Whalen 2025-12-08 15:26:58 -05:00
• fb54e3b742 9.0.5 Sean Whalen 2025-12-08 15:22:02 -05:00
• 6799f10364 9.0.4 Sean Whalen 2025-12-08 13:26:59 -05:00
• 996e8f9806 Update docs Sean Whalen 2025-12-08 13:21:45 -05:00
• edc0f2a7a7 Update docs Sean Whalen 2025-12-06 15:08:18 -05:00
• 445c9565a4 Update bug link in docs Sean Whalen 2025-12-06 15:05:19 -05:00
• 4b786846ae Remove Python 3.14 from testing 9.0.3 Sean Whalen 2025-12-05 11:05:29 -05:00
• 392f7362b0 Update docs Sean Whalen 2025-12-05 10:50:46 -05:00
• 23ae563cd8 Update Python version support details in documentation Sean Whalen 2025-12-05 10:48:04 -05:00
• cdd000e675 9.0.3 Sean Whalen 2025-12-05 10:43:28 -05:00
• a0c711f81e Update docs Sean Whalen 2025-12-04 10:28:24 -05:00
• 7d58abc67b Add shebang and encoding declaration to tests.py Sean Whalen 2025-12-04 10:21:53 -05:00