DECNET

Files

anti 3977f06374 feat(ttp/ipv6_leak): wire Ipv6LeakLifter into composite tagger and worker

- Add "ipv6_leak" to KNOWN_SOURCE_KINDS in ttp/base.py
- Register Ipv6LeakLifter(store) in factory.py get_tagger()
- Subscribe worker to attacker.fingerprinted; route by Event.type
  so JARM/HASSH/ipv6_leak share the topic without source_kind collision
- Add bump_attacker_ipv6_leak() to BaseRepository (abstract) +
  TTPMixin (implementation): increments ipv6_leak_count, sets last_ipv6_*
  denorm fields, appends-with-dedup to AttackerIdentity.ipv6_link_local_iids
- Call bump_attacker_ipv6_leak from _process_event after insert_tags
- Add DummyRepo stub + coverage call in tests/db/test_base_repo.py

2026-05-17 20:41:55 -04:00

data

feat(ttp): add mitre_url_for + groups_using_technique helpers

2026-05-09 06:32:04 -04:00

impl

feat(ttp): Ipv6LeakLifter + R0059 rule for IPv6 link-local opsec failures

2026-05-17 20:22:26 -04:00

store

fix(lint): prefix unused params with _ to silence vulture 80% findings

2026-05-17 20:08:54 -04:00

__init__.py

feat(ttp): E.1.3+E.1.4 Tagger ABC and composite factory contract