anti 9e3473b370 feat(dns): full-subdomain entropy check catches short-label exfil ...

_is_tunneling now returns str|None (the detection method) instead of bool.
Two new tunables _QNAME_TOTAL_LEN_THRESHOLD=50 and _QNAME_ENTROPY_THRESHOLD=3.5
catch attackers who split a high-entropy payload across multiple short labels.
tunnel_method field added to tunneling_suspect events for downstream correlation.

2026-05-21 22:06:14 -04:00

..

__init__.py

feat: add smtp_relay service; add service_testing/ init

2026-04-10 01:09:15 -04:00

conftest.py

feat(creds): Phase 1 — Authorization header + SNMP community capture

2026-04-25 07:04:10 -04:00

service-test.txt

fix: stabilize test suite by ensuring proper test DB isolation and initialization

2026-04-09 02:31:14 -04:00

test_dns.py

feat(dns): full-subdomain entropy check catches short-label exfil

2026-05-21 22:06:14 -04:00

test_imap_spool.py

feat(mail): operator-tunable IMAP/POP3 email seed (DEBT-026)

2026-05-03 02:47:06 -04:00

test_imap.py

feat(creds): Phase 1 — Authorization header + SNMP community capture

2026-04-25 07:04:10 -04:00

test_instance_seed.py

test(templates): cover instance_seed helper and update service tests

2026-04-22 09:24:28 -04:00

test_mongodb.py

test(templates): cover instance_seed helper and update service tests

2026-04-22 09:24:28 -04:00

test_mqtt_fuzz.py

test(templates): cover instance_seed helper and update service tests

2026-04-22 09:24:28 -04:00

test_mqtt.py

feat(creds): Phase 1 — Authorization header + SNMP community capture

2026-04-25 07:04:10 -04:00

test_mssql.py

test(templates): cover instance_seed helper and update service tests

2026-04-22 09:24:28 -04:00

test_mysql.py

test(templates): cover instance_seed helper and update service tests

2026-04-22 09:24:28 -04:00

test_pop3_spool.py

feat(mail): operator-tunable IMAP/POP3 email seed (DEBT-026)

2026-05-03 02:47:06 -04:00

test_pop3.py

feat(creds): Phase 1 — Authorization header + SNMP community capture

2026-04-25 07:04:10 -04:00

test_postgres.py

test(templates): cover instance_seed helper and update service tests

2026-04-22 09:24:28 -04:00

test_rdp_basic.py

feat(creds): DEBT-040 Phase 3 — RDP NLA / CredSSP NTLMv2 capture

2026-04-25 07:42:52 -04:00

test_rdp_nla.py

feat(creds): DEBT-040 Phase 3 — RDP NLA / CredSSP NTLMv2 capture

2026-04-25 07:42:52 -04:00

test_redis.py

test(templates): cover instance_seed helper and update service tests

2026-04-22 09:24:28 -04:00

test_smb_server.py

feat(creds): DEBT-040 Phase 1 — SMB NTLMSSP framer

2026-04-25 07:31:41 -04:00

test_smtp.py

feat(smtp): extract body_simhash + base64-bytes + html-smuggling + per-attachment macro/encrypted

2026-05-02 19:08:37 -04:00

test_snmp.py

feat(creds): Phase 1 — Authorization header + SNMP community capture

2026-04-25 07:04:10 -04:00