anti d6a091be75 fix(ttp/stix): extract commands from both 'command' and 'command_text' keys

2026-05-09 07:43:44 -04:00

..

agent

…

artifacts

refactor(artifacts): extract shard-finder out of transcripts router

2026-05-08 18:49:11 -04:00

asn

…

bus

feat(correlation/attribution): substrate + idle handler (Phase 1)

2026-05-08 23:16:13 -04:00

canary

…

cli

feat(deploy): wire attribution worker — CLI + systemd unit + registry

2026-05-09 02:31:59 -04:00

clustering

feat(ttp): fail-closed validation that lifter+UKC IDs resolve in ATT&CK bundle

2026-05-09 05:58:06 -04:00

collector

fix(profiler/behave_shell): tolerate non-UTF-8 bytes in shard reads

2026-05-08 22:52:46 -04:00

correlation

feat(correlation/attribution): cross-primitive multi-actor detection (Phase 5)

2026-05-09 02:18:42 -04:00

decky_io

…

engine

…

fleet

…

geoip

…

intel

feat(intel,ingester): mal_hash feed + observed_attachments table (DEBT-046)

2026-05-03 05:56:46 -04:00

logging

…

mutator

…

net

…

orchestrator

…

prober

feat(prober,correlation): attacker fingerprint rotation detection (DEBT-032)

2026-05-03 05:12:51 -04:00

profiler

fix(behave_shell/F.0): tighten prompt detector — log lines ending in '>' no longer vote

2026-05-09 02:57:40 -04:00

realism

…

services

…

sniffer

…

swarm

…

tarpit

…

templates

feat(profiler/behave_shell): G.0 intent lexicon + lexical counter pass

2026-05-08 16:27:25 -04:00

topology

…

ttp

fix(ttp/stix): extract commands from both 'command' and 'command_text' keys

2026-05-09 07:43:44 -04:00

updater

…

vectorstore

…

web

fix(ttp/stix): extract commands from both 'command' and 'command_text' keys

2026-05-09 07:43:44 -04:00

webhook

…

__init__.py

…

archetypes.py

…

composer.py

…

config_ini.py

…

config.py

…

custom_service.py

…

distros.py

…

env.py

…

ini_loader.py

…

models.py

…

network.py

…

os_fingerprint.py

…

privdrop.py

…

telemetry.py

…