DECNET/tests at 8161c67ec56cf45f61a1cdb6f5fd3dbcc0a04e55 - DECNET - RESACA Chile: Donde la ciberseguridad se chupa una chela.

anti/DECNET

Files

History

anti 8161c67ec5 feat(profiler/behave_shell): emit motor.command_chunking

BEHAVE-EXTRACTOR.md Phase B Step B.4. First implementation —
prototype doesn't ship this primitive.

* SessionContext gains intra_command_iats: per-command tuple of
  IATs between consecutive input events whose timestamps fall
  inside [cmd.start_ts, cmd.end_ts). Excludes the terminator IAT.
  Built by _per_command_iats.
* _features/motor.py:command_chunking(ctx) emits one Observation
  in {fluent, fragmented, single_command}.
  - 0 commands → skip emit
  - 1 command → single_command (registry-allowed point)
  - ≥2 commands → median CV across per-command typed-IATs;
    < CMD_CHUNKING_FLUENT_CV_MAX (0.50) → fluent, else fragmented
  - paste-only sessions (no command has ≥3 typed IATs) → skip emit
    (no honest within-command rhythm to measure)
  Confidence 0.80 / 0.65 / 0.60.
* Calibration grid widened to include motor.command_chunking;
  green across all five shards. Phase B primitive set complete.

Tests: no commands → skip, 1 command → single_command, uniform
typing → fluent, alternating fast/slow → fragmented, paste-only
multi-command → skip emit.

2026-05-03 21:29:31 -04:00

..

fix(agent): pass --always-recreate-deps so service netns shares stay fresh

2026-04-27 22:55:48 -04:00

feat(orchestrator): authoritative failure-count badge endpoint (DEBT-042)

2026-05-03 05:26:45 -04:00

refactor(artifacts): extract resolve_artifact_path to shared module

2026-05-02 20:02:47 -04:00

feat(profiler): write ASN + AS name onto attacker rows

2026-04-25 04:01:28 -04:00

feat(ttp): E.3.5 FilesystemRuleStore — inotify hot-reload + per-rule events

2026-05-01 08:31:05 -04:00

feat(canary): auto-deregister fingerprint slug after first valid beacon

2026-04-29 17:49:31 -04:00

feat(cli): allow decnet ttp on agents (DEBT-047)

2026-05-02 20:07:03 -04:00

test(bus): pin scope-(2) producer wiring for reuse / clusterer / intel

2026-05-02 02:38:24 -04:00

feat(ttp): split bash CMD evidence into structured uid/user/src/pwd/cmd rows

2026-05-02 03:20:53 -04:00

feat(config): add swarmctl-host to INI, env, CLI; drop hardcoded bind from systemd unit

2026-04-30 22:16:00 -04:00

fix(network): accept CAP_NET_ADMIN in lieu of euid==0 for macvlan setup

2026-04-29 11:56:40 -04:00

feat(prober,correlation): attacker fingerprint rotation detection (DEBT-032)

2026-05-03 05:12:51 -04:00

feat(web): drop SessionProfile, wire observations into AttackerDetail (DEBT-050 / DEBT-036 closure)

2026-05-03 07:33:37 -04:00

feat(deckies): generic file drops on fleet + MazeNET deckies

2026-04-28 22:43:34 -04:00

tests: realism migration regression coverage

2026-04-27 17:29:25 -04:00

test: fix templates paths, CLI gating, and stress-suite harness

2026-04-19 23:50:53 -04:00

fix(types): T7 — eliminate all remaining 38 mypy errors; fix DeckyRow subscript in engine tests

2026-05-01 02:07:53 -04:00

test(clustering): fixture 4 paused_campaign + active_days/time_window

2026-04-26 07:39:46 -04:00

fixtures/campaigns

merge: testing → main (reconcile 2-week divergence)

2026-04-28 18:36:00 -04:00

feat(fleet): systemd unit + bus signal for fleet reconciler

2026-04-26 21:21:36 -04:00

feat(attackers): PTR record (reverse DNS) enrichment

2026-04-24 17:26:40 -04:00

feat(intel,ingester): mal_hash feed + observed_attachments table (DEBT-046)

2026-05-03 05:56:46 -04:00

fix(tests): align stale tests with current behavior

2026-04-28 00:44:40 -04:00

refactor(tests): move flat tests/*.py into per-subsystem subfolders

2026-04-23 21:34:25 -04:00

fix(types): T3 — narrow str|None at 12 sites; fix LANRow/DeckyRow subscript in mutator tests

2026-05-01 01:47:04 -04:00

feat(orchestrator): authoritative failure-count badge endpoint (DEBT-042)

2026-05-03 05:26:45 -04:00

added: scripts/profile/view.sh — auto-pick newest artifact and open viewer

2026-04-17 13:20:05 -04:00

feat(prober,correlation): attacker fingerprint rotation detection (DEBT-032)

2026-05-03 05:12:51 -04:00

feat(profiler/behave_shell): emit motor.command_chunking

2026-05-03 21:29:31 -04:00

fix(realism): use minute-precision datetime in in_active_hours

2026-04-30 21:14:36 -04:00

service_testing

feat(mail): operator-tunable IMAP/POP3 email seed (DEBT-026)

2026-05-03 02:47:06 -04:00

feat(mail): default email_seed → \$PROJROOT/bait/ when unset

2026-05-03 04:25:24 -04:00

feat(sniffer): ISN sequence classifier (reuses seq_class helper)

2026-04-26 20:30:24 -04:00

fix(tests/stress): eliminate 0-request flakes in locust runs

2026-04-28 13:01:11 -04:00

fix(tests): align stale tests with current behavior

2026-04-28 00:44:40 -04:00

refactor(tests): move flat tests/*.py into per-subsystem subfolders

2026-04-23 21:34:25 -04:00

refactor(topology): introduce TopologyRepository protocol with DTO return types

2026-04-30 23:51:41 -04:00

feat(web): drop SessionProfile, wire observations into AttackerDetail (DEBT-050 / DEBT-036 closure)

2026-05-03 07:33:37 -04:00

sec(updater): harden tarball extraction and verify sha256 before extract

2026-04-27 21:14:48 -04:00

feat(creds): cred-reuse foundation + vectorstore scaffold

2026-04-26 03:18:34 -04:00

feat(intel,ingester): mal_hash feed + observed_attachments table (DEBT-046)

2026-05-03 05:56:46 -04:00

fix(webhook/worker): self-heal when bus starts late or restarts

2026-04-24 16:39:38 -04:00

__init__.py

fix(tests+mutator): unbreak the docker-shadow test env + let mutator delete from active

2026-04-29 00:24:17 -04:00

conftest.py

merge: testing → main (reconcile 2-week divergence)

2026-04-28 18:36:00 -04:00

mysql_spinup.sh

merge: testing → main (reconcile 2-week divergence)

2026-04-28 18:36:00 -04:00