DECNET

anti/DECNET

Fork 0

Commit Graph

Author	SHA1	Message	Date
anti	0dd3811436	feat(intel): attacker_intel table + repo helpers New TTL-cached threat-intel row keyed by attacker IP, with per-provider verdict/raw/queried_at columns for GreyNoise, AbuseIPDB, abuse.ch Feodo Tracker and ThreatFox. Carries schema_version from day one (federation wire-format precedent set by SessionProfile). Repo gains upsert_attacker_intel, get_attacker_intel_by_ip, and a get_unenriched_attacker_ips backfill primitive that picks fresh + stale rows for the forthcoming 'decnet enrich' worker. Also documents the open-source intel-source backlog in DEVELOPMENT_V2.	2026-04-26 04:56:47 -04:00
anti	a6356abe27	docs(dev): post-v1 roadmap + check off shipped "Commands executed" item - DEVELOPMENT_V2.md (new): post-v1 direction. Everything here is after the v1 box is closed — federation, advanced behavioral profiling, maze-scale topology work. - DEVELOPMENT.md: flip "Commands executed" checkbox — full per-session command log already landed in the profiler's _extract_commands_from _events path.	2026-04-23 21:52:15 -04:00

Author

SHA1

Message

Date

anti

0dd3811436

feat(intel): attacker_intel table + repo helpers

New TTL-cached threat-intel row keyed by attacker IP, with per-provider
verdict/raw/queried_at columns for GreyNoise, AbuseIPDB, abuse.ch Feodo
Tracker and ThreatFox. Carries schema_version from day one (federation
wire-format precedent set by SessionProfile). Repo gains
upsert_attacker_intel, get_attacker_intel_by_ip, and a
get_unenriched_attacker_ips backfill primitive that picks fresh + stale
rows for the forthcoming 'decnet enrich' worker.

Also documents the open-source intel-source backlog in DEVELOPMENT_V2.

2026-04-26 04:56:47 -04:00

anti

a6356abe27

docs(dev): post-v1 roadmap + check off shipped "Commands executed" item

- DEVELOPMENT_V2.md (new): post-v1 direction. Everything here is after
  the v1 box is closed — federation, advanced behavioral profiling,
  maze-scale topology work.
- DEVELOPMENT.md: flip "Commands executed" checkbox — full per-session
  command log already landed in the profiler's _extract_commands_from
  _events path.

2026-04-23 21:52:15 -04:00

2 Commits