-
023bc1993d
feat(intel): provider ABC + lazy factory
anti
2026-04-26 04:58:38 -04:00
-
0dd3811436
feat(intel): attacker_intel table + repo helpers
anti
2026-04-26 04:56:47 -04:00
-
9816cdbd53
chore: drop credential-reuse handoff TODO
anti
2026-04-26 04:37:29 -04:00
-
50870f2e7a
feat(creds): surface plaintext/b64 secret on reuse findings
anti
2026-04-26 04:34:19 -04:00
-
a455248dd9
feat(deploy): systemd unit for decnet-reuse-correlator
anti
2026-04-26 04:29:10 -04:00
-
5fb7ebe433
docs(debt): close standalone graph-correlator follow-up
anti
2026-04-26 04:26:49 -04:00
-
0d2283e10c
chore(cli): remove dead
decnet correlate command
anti
2026-04-26 04:26:15 -04:00
-
bf87f8794a
feat(dashboard): credential reuse tab, drawer, and bidirectional badge
anti
2026-04-26 03:55:56 -04:00
-
181c792753
feat(api): GET /credential-reuse list + detail endpoints
anti
2026-04-26 03:40:08 -04:00
-
590c2b0fac
feat(correlation): credential-reuse engine + reuse-correlate worker
anti
2026-04-26 03:37:49 -04:00
-
00ecea924a
feat(profiler): backfill Credential.attacker_uuid on attacker upsert
anti
2026-04-26 03:30:44 -04:00
-
ce4be68501
feat(creds): cred-reuse foundation + vectorstore scaffold
anti
2026-04-26 03:18:34 -04:00
-
817ce32e6d
fix(collector): label-based fleet container discovery
anti
2026-04-25 08:11:21 -04:00
-
4ea4b0be53
feat(web): Credentials view + inspector
anti
2026-04-25 07:51:31 -04:00
-
4566146d50
feat(api): GET /credentials endpoint
anti
2026-04-25 07:51:20 -04:00
-
b3d1301925
feat(creds): DEBT-040 Phase 3 — RDP NLA / CredSSP NTLMv2 capture
anti
2026-04-25 07:42:52 -04:00
-
a8b9c82c97
feat(creds): DEBT-040 Phase 2 — RDP X.224 cookie capture
anti
2026-04-25 07:34:42 -04:00
-
6905c88083
feat(creds): DEBT-040 Phase 1 — SMB NTLMSSP framer
anti
2026-04-25 07:31:41 -04:00
-
afe02af5c2
feat(creds): NTLMSSP Type 3 parser + DEBT-040 for SMB/RDP/NLA framers
anti
2026-04-25 07:19:30 -04:00
-
9777aa7677
feat(creds): Phase 6 — MongoDB SCRAM credential capture
anti
2026-04-25 07:15:44 -04:00
-
e4bf8fa012
feat(creds): Phase 3 — HTTP/HTTPS POST form body cred extraction
anti
2026-04-25 07:10:05 -04:00
-
0c1316f74c
feat(creds): Phase 2 — MySQL handshake hash + MSSQL Login7 plaintext
anti
2026-04-25 07:07:33 -04:00
-
3404e3b3a6
feat(creds): Phase 1 — Authorization header + SNMP community capture
anti
2026-04-25 07:04:10 -04:00
-
6b16c844b6
fix(creds): MQTT regression + secret_kind for hash credentials
anti
2026-04-25 06:16:57 -04:00
-
e696c2beb3
refactor(ingester): drop legacy cred adapter — DEBT-039 closed
anti
2026-04-25 06:04:09 -04:00
-
abb4dd9fc0
feat(templates): migrate six cred emitters to native shape
anti
2026-04-25 05:43:51 -04:00
-
aebb9f81c6
feat(templates): encode_secret() helper in canonical syslog_bridge
anti
2026-04-25 05:37:44 -04:00
-
2f47f67eef
feat(creds): future-proof Credential storage model
anti
2026-04-25 05:29:26 -04:00
-
50c12d9e16
docs(debt): DEBT-038 #5 closed by telnet extension
f1026b4
anti
2026-04-25 04:53:04 -04:00
-
f1026b4427
feat(telnet): same PAM cred-capture, /etc/pam.d/login
anti
2026-04-25 04:52:35 -04:00
-
f5a9e10bdc
docs(debt): DEBT-038 SSH PAM cred-capture limitations
anti
2026-04-25 04:44:44 -04:00
-
d064125f61
feat(ssh): capture password attempts via pam_exec auth-helper
anti
2026-04-25 04:42:50 -04:00
-
c69fdbb4ac
docs(roadmap): mark ASN lookup, GeoIP mapping, PTR records shipped
anti
2026-04-25 04:03:11 -04:00
-
883eaba25b
feat(web/attackers): surface ASN + AS name on cards and detail
anti
2026-04-25 04:02:50 -04:00
-
bcf460d2a5
feat(profiler): write ASN + AS name onto attacker rows
anti
2026-04-25 04:01:28 -04:00
-
010568e558
feat(asn): IP→ASN enrichment via iptoasn.com bulk dump
anti
2026-04-25 03:58:58 -04:00
-
77a19ffe9f
docs(roadmap): mark MazeNET SWARM topology deployment shipped
anti
2026-04-25 03:42:32 -04:00
-
a1bc8a878b
feat(web/mazenet): show target host in topology list + war map
anti
2026-04-25 03:29:49 -04:00
-
ee176a6f79
Revert "feat(mazenet): per-LAN swarm host pin"
anti
2026-04-25 03:26:19 -04:00
-
e169b891d7
Revert "feat(mazenet): host resolution + cross-host bridge guard"
anti
2026-04-25 03:26:19 -04:00
-
448fcd1227
feat(mazenet): host resolution + cross-host bridge guard
anti
2026-04-25 03:06:53 -04:00
-
0d92170a57
feat(mazenet): per-LAN swarm host pin
anti
2026-04-25 03:04:23 -04:00
-
36031fa10a
feat(swarm): pin worker cert SHA-256 fingerprint per host
anti
2026-04-25 03:01:15 -04:00
-
efdaa87ee2
feat(web/mazenet): amber-tint pending LAN placeholders
anti
2026-04-24 22:27:40 -04:00
-
bfb5d8c33c
fix(web/mazenet): split Net.name (canonical) from Net.label (display)
anti
2026-04-24 22:21:55 -04:00
-
37050a4bcd
fix(db): claim_next_mutation works on MySQL — derived-table workaround
anti
2026-04-24 22:15:23 -04:00
-
99bc9a8b6d
fix(engine): offload blocking compose to a worker thread
anti
2026-04-24 22:14:08 -04:00
-
f8ef0a5cf1
fix(deploy): redirect DOCKER_CONFIG out of $HOME so ProtectHome doesn't kill builds
anti
2026-04-24 22:07:13 -04:00
-
257624e6a7
fix(engine/buildx): recipe used reserved 'default' builder name
anti
2026-04-24 22:02:20 -04:00
-
40a31d8bc7
fix(engine/buildx): branch recovery recipe on leaked-mount count
anti
2026-04-24 21:58:09 -04:00
-
05d225ae38
fix(engine): surface CalledProcessError.stderr in deploy-failure log + status reason
anti
2026-04-24 19:31:37 -04:00
-
86b9decf80
fix(engine): detect wedged buildx + surface recovery hint on deploy
anti
2026-04-24 19:25:45 -04:00
-
a8356407c5
feat(web/mazenet): cross-LAN port drag now creates a real bridge
anti
2026-04-24 19:18:02 -04:00
-
c214cdd7bb
fix(api/topology): map duplicate-name IntegrityError to 409
anti
2026-04-24 19:06:37 -04:00
-
9bed930497
perf(web/mazenet): auto-disable edge flow animation above 60 edges
anti
2026-04-24 19:01:25 -04:00
-
f3408d5e62
fix(topology/allocator): widen default subnet base to /12 for mass-scale
anti
2026-04-24 18:57:55 -04:00
-
207f791684
perf(web/mazenet): ref-driven pan, memoized children, indexed edge lookup
anti
2026-04-24 18:48:05 -04:00
-
c973ded2fc
perf(web/icons): per-icon lucide imports via centralised alias
anti
2026-04-24 18:41:33 -04:00
-
52cbb01555
perf(web): lazy-load page routes + prefetch-on-hover
anti
2026-04-24 18:38:26 -04:00
-
7389ddb62c
chore(web/build): split vendor chunks — 705 kB main bundle → 246 kB
anti
2026-04-24 18:29:49 -04:00
-
aaac300cc4
tweak(web/ip-leaks): show only 1 IP inline, rest via + N more
anti
2026-04-24 18:26:35 -04:00
-
c78ab032bd
fix(xff): truncate LEAKED IPs + ROTATION badge for rotation attacks
anti
2026-04-24 18:25:46 -04:00
-
ca39552692
feat(ua): classify User-Agent into scanner/cli/library/bot/nonstandard
anti
2026-04-24 18:17:18 -04:00
-
6d1d69443a
fix(xff): split leak from spoof — loopback/private claims aren't leaks
anti
2026-04-24 18:06:29 -04:00
-
2c876b4d86
fix(bounties): strip per-request fields from fingerprint payloads
anti
2026-04-24 17:58:54 -04:00
-
dccb410bb3
feat(http): header-quirks fingerprint — order + casing + tool guess
anti
2026-04-24 17:51:40 -04:00
-
2a0c5ca410
feat(attackers): XFF mismatch detection — attacker IP leak bounties
anti
2026-04-24 17:39:03 -04:00
-
5a34371009
feat(attackers): PTR record (reverse DNS) enrichment
anti
2026-04-24 17:26:40 -04:00
-
351a8939c3
feat(attackers): scanned vs. interacted service bucketing on detail page
anti
2026-04-24 17:12:20 -04:00
-
ce6b4a4174
fix(web/api): scope DB-retry sleep so tests don't starve background tasks
anti
2026-04-24 17:11:44 -04:00
-
efc98285aa
fix(webhook/worker): self-heal when bus starts late or restarts
anti
2026-04-24 16:39:38 -04:00
-
f0ee6ff97e
feat(workers): enroll webhook worker in the Workers panel registry
anti
2026-04-24 16:34:14 -04:00
-
ba155b70e1
fix(cli/db-reset): drive table list from SQLModel.metadata, not hardcoded
anti
2026-04-24 16:31:10 -04:00
-
2bcef50ac5
feat(webhooks): circuit breaker auto-disables misbehaving subscriptions
anti
2026-04-24 16:24:33 -04:00
-
ee682eef65
feat(web/webhooks): surface manual FIRE button per row
anti
2026-04-24 16:15:47 -04:00
-
731063b96e
chore(scripts): mock webhook receiver for local DECNET testing
anti
2026-04-24 16:13:59 -04:00
-
4d10eba7a7
fix(web/webhooks): match LiveLogs page-header convention
anti
2026-04-24 16:11:20 -04:00
-
59c405d9e5
feat(web): Webhooks page + ALERTS nav group
anti
2026-04-24 16:03:53 -04:00
-
c2ff8d1a4f
docs(debt): DEBT-037 — webhook delivery guarantees beyond MVP
anti
2026-04-24 16:03:33 -04:00
-
638236113d
feat(webhooks): non-blocking http:// warning + WH-03 accepted risk
anti
2026-04-24 15:53:30 -04:00
-
f84bf82f6c
docs(webhook): roadmap tick + threat-model component
anti
2026-04-24 15:48:14 -04:00
-
e6127a81a1
feat(webhook): worker + CLI + systemd unit
anti
2026-04-24 15:46:11 -04:00
-
b70845a85d
feat(webhooks): subscription CRUD + HMAC-signed delivery client
anti
2026-04-24 15:30:05 -04:00
-
162f7c1194
feat(api/sse): per-user connection cap + viewer-safe invariant
anti
2026-04-24 15:01:20 -04:00
-
df84981954
feat(api): pin response_model on dict-returning mutation routes
anti
2026-04-24 14:27:58 -04:00
-
a935bf2663
feat(api): cap offset on list-topologies and transcript endpoints
anti
2026-04-24 14:14:25 -04:00
-
e53b580767
test(api): RBAC contract test — viewer JWT on every classified route
anti
2026-04-24 14:00:12 -04:00
-
99ccd41bb5
feat(api/artifacts): explicit Content-Disposition + X-Content-Type-Options
anti
2026-04-24 13:24:34 -04:00
-
ec1079e78b
feat(profiler): wire p0f-v2 matcher into sniffer_rollup priority chain
anti
2026-04-24 11:56:50 -04:00
-
8a430bf725
feat(prober/osfp): P0fV2Provider + factory dispatch
anti
2026-04-24 11:50:46 -04:00
-
41ff6b4b03
feat(prober/osfp): p0f v2 .fp parser + Signature scoring
anti
2026-04-24 11:47:54 -04:00
-
620e1f5b1d
feat(prober): vendor p0f v2 TCP/IP fingerprint database (LGPL-2.1 → GPLv3 via §3)
anti
2026-04-24 11:39:33 -04:00
-
011445b77a
chore(license): add GPL-3.0-or-later LICENSE + pyproject metadata
anti
2026-04-24 11:35:59 -04:00
-
1e7703d64d
refactor(db): name the keystroke-dynamics thresholds + add max_pause_gap
anti
2026-04-24 10:49:38 -04:00
-
9232031ec7
feat(db): extend SessionProfile schema with DEBT-036 keystroke features
anti
2026-04-24 10:45:48 -04:00
-
3787f7e5ec
docs(debt): DEBT-036 — session-profile ingester (keystroke dynamics)
anti
2026-04-24 10:41:55 -04:00
-
df67cb8a46
fix(web/session): don't stopPropagation on drawer panel — breaks player clicks
anti
2026-04-24 10:35:11 -04:00
-
6d031ae18c
debug(web/session): expose player instance as window.__ap
anti
2026-04-24 10:31:31 -04:00
-
442413870d
fix(web/session): subscribe to metadata/playing/idle/errored/reset/seeked too
anti
2026-04-24 10:28:28 -04:00
-
b5c6b8a073
fix(web/session): preload cast so parse runs at mount, not click
anti
2026-04-24 10:25:42 -04:00