Commit Graph

  • 023bc1993d feat(intel): provider ABC + lazy factory anti 2026-04-26 04:58:38 -04:00
  • 0dd3811436 feat(intel): attacker_intel table + repo helpers anti 2026-04-26 04:56:47 -04:00
  • 9816cdbd53 chore: drop credential-reuse handoff TODO anti 2026-04-26 04:37:29 -04:00
  • 50870f2e7a feat(creds): surface plaintext/b64 secret on reuse findings anti 2026-04-26 04:34:19 -04:00
  • a455248dd9 feat(deploy): systemd unit for decnet-reuse-correlator anti 2026-04-26 04:29:10 -04:00
  • 5fb7ebe433 docs(debt): close standalone graph-correlator follow-up anti 2026-04-26 04:26:49 -04:00
  • 0d2283e10c chore(cli): remove dead decnet correlate command anti 2026-04-26 04:26:15 -04:00
  • bf87f8794a feat(dashboard): credential reuse tab, drawer, and bidirectional badge anti 2026-04-26 03:55:56 -04:00
  • 181c792753 feat(api): GET /credential-reuse list + detail endpoints anti 2026-04-26 03:40:08 -04:00
  • 590c2b0fac feat(correlation): credential-reuse engine + reuse-correlate worker anti 2026-04-26 03:37:49 -04:00
  • 00ecea924a feat(profiler): backfill Credential.attacker_uuid on attacker upsert anti 2026-04-26 03:30:44 -04:00
  • ce4be68501 feat(creds): cred-reuse foundation + vectorstore scaffold anti 2026-04-26 03:18:34 -04:00
  • 817ce32e6d fix(collector): label-based fleet container discovery anti 2026-04-25 08:11:21 -04:00
  • 4ea4b0be53 feat(web): Credentials view + inspector anti 2026-04-25 07:51:31 -04:00
  • 4566146d50 feat(api): GET /credentials endpoint anti 2026-04-25 07:51:20 -04:00
  • b3d1301925 feat(creds): DEBT-040 Phase 3 — RDP NLA / CredSSP NTLMv2 capture anti 2026-04-25 07:42:52 -04:00
  • a8b9c82c97 feat(creds): DEBT-040 Phase 2 — RDP X.224 cookie capture anti 2026-04-25 07:34:42 -04:00
  • 6905c88083 feat(creds): DEBT-040 Phase 1 — SMB NTLMSSP framer anti 2026-04-25 07:31:41 -04:00
  • afe02af5c2 feat(creds): NTLMSSP Type 3 parser + DEBT-040 for SMB/RDP/NLA framers anti 2026-04-25 07:19:30 -04:00
  • 9777aa7677 feat(creds): Phase 6 — MongoDB SCRAM credential capture anti 2026-04-25 07:15:44 -04:00
  • e4bf8fa012 feat(creds): Phase 3 — HTTP/HTTPS POST form body cred extraction anti 2026-04-25 07:10:05 -04:00
  • 0c1316f74c feat(creds): Phase 2 — MySQL handshake hash + MSSQL Login7 plaintext anti 2026-04-25 07:07:33 -04:00
  • 3404e3b3a6 feat(creds): Phase 1 — Authorization header + SNMP community capture anti 2026-04-25 07:04:10 -04:00
  • 6b16c844b6 fix(creds): MQTT regression + secret_kind for hash credentials anti 2026-04-25 06:16:57 -04:00
  • e696c2beb3 refactor(ingester): drop legacy cred adapter — DEBT-039 closed anti 2026-04-25 06:04:09 -04:00
  • abb4dd9fc0 feat(templates): migrate six cred emitters to native shape anti 2026-04-25 05:43:51 -04:00
  • aebb9f81c6 feat(templates): encode_secret() helper in canonical syslog_bridge anti 2026-04-25 05:37:44 -04:00
  • 2f47f67eef feat(creds): future-proof Credential storage model anti 2026-04-25 05:29:26 -04:00
  • 50c12d9e16 docs(debt): DEBT-038 #5 closed by telnet extension f1026b4 anti 2026-04-25 04:53:04 -04:00
  • f1026b4427 feat(telnet): same PAM cred-capture, /etc/pam.d/login anti 2026-04-25 04:52:35 -04:00
  • f5a9e10bdc docs(debt): DEBT-038 SSH PAM cred-capture limitations anti 2026-04-25 04:44:44 -04:00
  • d064125f61 feat(ssh): capture password attempts via pam_exec auth-helper anti 2026-04-25 04:42:50 -04:00
  • c69fdbb4ac docs(roadmap): mark ASN lookup, GeoIP mapping, PTR records shipped anti 2026-04-25 04:03:11 -04:00
  • 883eaba25b feat(web/attackers): surface ASN + AS name on cards and detail anti 2026-04-25 04:02:50 -04:00
  • bcf460d2a5 feat(profiler): write ASN + AS name onto attacker rows anti 2026-04-25 04:01:28 -04:00
  • 010568e558 feat(asn): IP→ASN enrichment via iptoasn.com bulk dump anti 2026-04-25 03:58:58 -04:00
  • 77a19ffe9f docs(roadmap): mark MazeNET SWARM topology deployment shipped anti 2026-04-25 03:42:32 -04:00
  • a1bc8a878b feat(web/mazenet): show target host in topology list + war map anti 2026-04-25 03:29:49 -04:00
  • ee176a6f79 Revert "feat(mazenet): per-LAN swarm host pin" anti 2026-04-25 03:26:19 -04:00
  • e169b891d7 Revert "feat(mazenet): host resolution + cross-host bridge guard" anti 2026-04-25 03:26:19 -04:00
  • 448fcd1227 feat(mazenet): host resolution + cross-host bridge guard anti 2026-04-25 03:06:53 -04:00
  • 0d92170a57 feat(mazenet): per-LAN swarm host pin anti 2026-04-25 03:04:23 -04:00
  • 36031fa10a feat(swarm): pin worker cert SHA-256 fingerprint per host anti 2026-04-25 03:01:15 -04:00
  • efdaa87ee2 feat(web/mazenet): amber-tint pending LAN placeholders anti 2026-04-24 22:27:40 -04:00
  • bfb5d8c33c fix(web/mazenet): split Net.name (canonical) from Net.label (display) anti 2026-04-24 22:21:55 -04:00
  • 37050a4bcd fix(db): claim_next_mutation works on MySQL — derived-table workaround anti 2026-04-24 22:15:23 -04:00
  • 99bc9a8b6d fix(engine): offload blocking compose to a worker thread anti 2026-04-24 22:14:08 -04:00
  • f8ef0a5cf1 fix(deploy): redirect DOCKER_CONFIG out of $HOME so ProtectHome doesn't kill builds anti 2026-04-24 22:07:13 -04:00
  • 257624e6a7 fix(engine/buildx): recipe used reserved 'default' builder name anti 2026-04-24 22:02:20 -04:00
  • 40a31d8bc7 fix(engine/buildx): branch recovery recipe on leaked-mount count anti 2026-04-24 21:58:09 -04:00
  • 05d225ae38 fix(engine): surface CalledProcessError.stderr in deploy-failure log + status reason anti 2026-04-24 19:31:37 -04:00
  • 86b9decf80 fix(engine): detect wedged buildx + surface recovery hint on deploy anti 2026-04-24 19:25:45 -04:00
  • a8356407c5 feat(web/mazenet): cross-LAN port drag now creates a real bridge anti 2026-04-24 19:18:02 -04:00
  • c214cdd7bb fix(api/topology): map duplicate-name IntegrityError to 409 anti 2026-04-24 19:06:37 -04:00
  • 9bed930497 perf(web/mazenet): auto-disable edge flow animation above 60 edges anti 2026-04-24 19:01:25 -04:00
  • f3408d5e62 fix(topology/allocator): widen default subnet base to /12 for mass-scale anti 2026-04-24 18:57:55 -04:00
  • 207f791684 perf(web/mazenet): ref-driven pan, memoized children, indexed edge lookup anti 2026-04-24 18:48:05 -04:00
  • c973ded2fc perf(web/icons): per-icon lucide imports via centralised alias anti 2026-04-24 18:41:33 -04:00
  • 52cbb01555 perf(web): lazy-load page routes + prefetch-on-hover anti 2026-04-24 18:38:26 -04:00
  • 7389ddb62c chore(web/build): split vendor chunks — 705 kB main bundle → 246 kB anti 2026-04-24 18:29:49 -04:00
  • aaac300cc4 tweak(web/ip-leaks): show only 1 IP inline, rest via + N more anti 2026-04-24 18:26:35 -04:00
  • c78ab032bd fix(xff): truncate LEAKED IPs + ROTATION badge for rotation attacks anti 2026-04-24 18:25:46 -04:00
  • ca39552692 feat(ua): classify User-Agent into scanner/cli/library/bot/nonstandard anti 2026-04-24 18:17:18 -04:00
  • 6d1d69443a fix(xff): split leak from spoof — loopback/private claims aren't leaks anti 2026-04-24 18:06:29 -04:00
  • 2c876b4d86 fix(bounties): strip per-request fields from fingerprint payloads anti 2026-04-24 17:58:54 -04:00
  • dccb410bb3 feat(http): header-quirks fingerprint — order + casing + tool guess anti 2026-04-24 17:51:40 -04:00
  • 2a0c5ca410 feat(attackers): XFF mismatch detection — attacker IP leak bounties anti 2026-04-24 17:39:03 -04:00
  • 5a34371009 feat(attackers): PTR record (reverse DNS) enrichment anti 2026-04-24 17:26:40 -04:00
  • 351a8939c3 feat(attackers): scanned vs. interacted service bucketing on detail page anti 2026-04-24 17:12:20 -04:00
  • ce6b4a4174 fix(web/api): scope DB-retry sleep so tests don't starve background tasks anti 2026-04-24 17:11:44 -04:00
  • efc98285aa fix(webhook/worker): self-heal when bus starts late or restarts anti 2026-04-24 16:39:38 -04:00
  • f0ee6ff97e feat(workers): enroll webhook worker in the Workers panel registry anti 2026-04-24 16:34:14 -04:00
  • ba155b70e1 fix(cli/db-reset): drive table list from SQLModel.metadata, not hardcoded anti 2026-04-24 16:31:10 -04:00
  • 2bcef50ac5 feat(webhooks): circuit breaker auto-disables misbehaving subscriptions anti 2026-04-24 16:24:33 -04:00
  • ee682eef65 feat(web/webhooks): surface manual FIRE button per row anti 2026-04-24 16:15:47 -04:00
  • 731063b96e chore(scripts): mock webhook receiver for local DECNET testing anti 2026-04-24 16:13:59 -04:00
  • 4d10eba7a7 fix(web/webhooks): match LiveLogs page-header convention anti 2026-04-24 16:11:20 -04:00
  • 59c405d9e5 feat(web): Webhooks page + ALERTS nav group anti 2026-04-24 16:03:53 -04:00
  • c2ff8d1a4f docs(debt): DEBT-037 — webhook delivery guarantees beyond MVP anti 2026-04-24 16:03:33 -04:00
  • 638236113d feat(webhooks): non-blocking http:// warning + WH-03 accepted risk anti 2026-04-24 15:53:30 -04:00
  • f84bf82f6c docs(webhook): roadmap tick + threat-model component anti 2026-04-24 15:48:14 -04:00
  • e6127a81a1 feat(webhook): worker + CLI + systemd unit anti 2026-04-24 15:46:11 -04:00
  • b70845a85d feat(webhooks): subscription CRUD + HMAC-signed delivery client anti 2026-04-24 15:30:05 -04:00
  • 162f7c1194 feat(api/sse): per-user connection cap + viewer-safe invariant anti 2026-04-24 15:01:20 -04:00
  • df84981954 feat(api): pin response_model on dict-returning mutation routes anti 2026-04-24 14:27:58 -04:00
  • a935bf2663 feat(api): cap offset on list-topologies and transcript endpoints anti 2026-04-24 14:14:25 -04:00
  • e53b580767 test(api): RBAC contract test — viewer JWT on every classified route anti 2026-04-24 14:00:12 -04:00
  • 99ccd41bb5 feat(api/artifacts): explicit Content-Disposition + X-Content-Type-Options anti 2026-04-24 13:24:34 -04:00
  • ec1079e78b feat(profiler): wire p0f-v2 matcher into sniffer_rollup priority chain anti 2026-04-24 11:56:50 -04:00
  • 8a430bf725 feat(prober/osfp): P0fV2Provider + factory dispatch anti 2026-04-24 11:50:46 -04:00
  • 41ff6b4b03 feat(prober/osfp): p0f v2 .fp parser + Signature scoring anti 2026-04-24 11:47:54 -04:00
  • 620e1f5b1d feat(prober): vendor p0f v2 TCP/IP fingerprint database (LGPL-2.1 → GPLv3 via §3) anti 2026-04-24 11:39:33 -04:00
  • 011445b77a chore(license): add GPL-3.0-or-later LICENSE + pyproject metadata anti 2026-04-24 11:35:59 -04:00
  • 1e7703d64d refactor(db): name the keystroke-dynamics thresholds + add max_pause_gap anti 2026-04-24 10:49:38 -04:00
  • 9232031ec7 feat(db): extend SessionProfile schema with DEBT-036 keystroke features anti 2026-04-24 10:45:48 -04:00
  • 3787f7e5ec docs(debt): DEBT-036 — session-profile ingester (keystroke dynamics) anti 2026-04-24 10:41:55 -04:00
  • df67cb8a46 fix(web/session): don't stopPropagation on drawer panel — breaks player clicks anti 2026-04-24 10:35:11 -04:00
  • 6d031ae18c debug(web/session): expose player instance as window.__ap anti 2026-04-24 10:31:31 -04:00
  • 442413870d fix(web/session): subscribe to metadata/playing/idle/errored/reset/seeked too anti 2026-04-24 10:28:28 -04:00
  • b5c6b8a073 fix(web/session): preload cast so parse runs at mount, not click anti 2026-04-24 10:25:42 -04:00