kitos/Aegis
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Commit Graph

  • 99e8feff48 feat(evidence): allow .exe uploads for Red-team artifacts shared with Blue main kitos 2026-07-27 14:40:45 +02:00
  • 8985eeaa03 feat(users): automatically send the set-password email on user creation kitos 2026-07-27 11:31:24 +02:00
  • f13764d9e2 fix(email): detect and surface webhook send failures instead of claiming success kitos 2026-07-24 16:45:32 +02:00
  • e951567ba1 fix(scores,reports): fix scores/history 500, disable unfinished report generation cleanly kitos 2026-07-24 15:24:06 +02:00
  • 07403cbd9d fix(seed): don't create a duplicate admin on restart after email migration kitos 2026-07-23 15:24:59 +02:00
  • 504dfc52f5 feat(auth): make email the unique login identifier kitos 2026-07-23 14:39:36 +02:00
  • 0a6cb5510c fix(install): generate PLATFORM_URL in install.sh, backfill on existing .env kitos 2026-07-23 10:38:13 +02:00
  • d932134975 feat(users): admin can permanently delete users, fix set-password redirect bug kitos 2026-07-23 08:58:17 +02:00
  • 545a84b137 fix(config): require PLATFORM_URL explicitly, no hardcoded domain default kitos 2026-07-22 16:19:27 +02:00
  • 3cd0f6fd99 fix(users): admin can never strip their own admin permission kitos 2026-07-22 10:52:46 +02:00
  • 66951086fb fix(auth): refresh cached user after self-role edit so RoleSwitcher shows up kitos 2026-07-22 09:41:52 +02:00
  • 06c913955c fix(campaigns,ui): remove admin from campaign-from-threat-actor gate, bump red/blue label saturation kitos 2026-07-20 16:18:27 +02:00
  • e4f768962f fix(email): use client-native fonts instead of forcing Segoe UI/Arial kitos 2026-07-20 16:08:51 +02:00
  • d25d876c2c fix(email): wire PLATFORM_URL into prod compose, was always falling back to localhost kitos 2026-07-20 14:00:26 +02:00
  • 91442ede60 feat(email): HTML branded templates with inline logo, wire remaining notification types kitos 2026-07-20 11:49:21 +02:00
  • 1d0d880929 feat(email): generic webhook for all notification emails, hide SMTP UI kitos 2026-07-20 10:24:15 +02:00
  • bbe7f49c86 feat(tests,users): blocking procedure-suggestion review on test detail, multi-role switcher, Power Automate webhook payload kitos 2026-07-20 09:29:36 +02:00
  • 4dea19cae9 feat(users): passwordless user creation via emailed set-password link, display full name instead of username kitos 2026-07-17 16:58:25 +02:00
  • 60ab2e558f fix(campaigns,tests): admin cannot create campaigns, manager can delete unstarted tests, intensify red/blue team colors kitos 2026-07-17 14:34:14 +02:00
  • 82ac9c7014 feat(templates,campaigns): validate MITRE technique IDs, surface template suggestions first, manager can re-approve rejected campaigns kitos 2026-07-16 14:29:01 +02:00
  • 4809c4a662 feat(manager): allow manager to create auto-approved campaigns and tests from templates kitos 2026-07-16 12:57:20 +02:00
  • c753797019 feat(test-catalog): add template creation and lead-approval workflow kitos 2026-07-16 12:08:23 +02:00
  • cf4a6c3cde fix(campaigns): defer Jira ticket creation to start_date, gate recurring campaigns behind manager approval kitos 2026-07-16 11:09:10 +02:00
  • 0b60531677 fix(users): grant manager Review Queue access, restrict Webhooks to admin kitos 2026-07-16 10:31:21 +02:00
  • 0002601b50 feat(templates): add pagination with total counts to catalog and campaign picker kitos 2026-07-16 10:01:20 +02:00
  • 8493a6a764 feat(nav): hide unfinished Reports section platform-wide kitos 2026-07-16 08:32:31 +02:00
  • 8d9e25703d fix(campaigns): make Expected Detection editable when adding a test to a campaign kitos 2026-07-15 16:49:43 +02:00
  • 68ab6406d4 fix(jira,tests): clarify manager-resolved disputes in Jira and the Summary tab kitos 2026-07-15 15:26:00 +02:00
  • 09553f5c42 fix(users): add manager to the valid-role whitelist kitos 2026-07-15 14:16:27 +02:00
  • 3a01facd46 feat(tests): let managers escalate and directly resolve disputed tests kitos 2026-07-15 13:03:01 +02:00
  • 32f4fd25bd fix(tests): surface cross-validation and disputed tests in the review queue kitos 2026-07-15 11:41:29 +02:00
  • 8973f199b8 feat(tests): make Expected Detection editable when creating a test from template kitos 2026-07-15 11:05:41 +02:00
  • 60f9464ec5 refactor(tests): merge detect_suggested_procedure into expected_detection kitos 2026-07-15 10:29:13 +02:00
  • 7416d1688f fix(jira): unwrap detection_result enum in the in_review comment kitos 2026-07-15 09:57:46 +02:00
  • 44fdb4dbd3 fix(jira,tests): push system gaps to Jira, show detect suggested procedure in catalog kitos 2026-07-15 08:56:19 +02:00
  • 11080bd627 fix(tests): recognize sysmon, wevtutil, auditpol as detection commands kitos 2026-07-14 17:24:14 +02:00
  • 1b7fd6fb36 fix(tests): restrict On Hold/Resume to whichever team currently owns the test kitos 2026-07-14 17:24:05 +02:00
  • 8fcd733d4a fix(tests): merge approved procedure suggestions instead of overwriting kitos 2026-07-14 16:25:24 +02:00
  • 4692a8b93e feat(tests): add Detect Procedure UI, template suggested-procedure editing, lead review panel kitos 2026-07-14 15:30:47 +02:00
  • 7ec3c5bc8b feat(tests): auto-propose procedure suggestions from submitted rounds, add lead review workflow kitos 2026-07-14 15:22:03 +02:00
  • 8bdbe48fbe feat(tests): add Blue detect_procedure field mapped from template suggestion kitos 2026-07-14 14:58:29 +02:00
  • fd94e55799 feat(tests): add regex-based command extraction heuristic kitos 2026-07-14 13:36:25 +02:00
  • f87959369b fix(tests): remove blind visibility, both teams always see each other's fields kitos 2026-07-14 13:36:19 +02:00
  • bdc6579c10 fix(jira): stop sending numeric hours to Time to Detect/Contain (datetime fields) kitos 2026-07-14 12:48:14 +02:00
  • 92d65374ef fix(tests): stop requiring Containment Time when result is Not Contained kitos 2026-07-14 12:00:53 +02:00
  • 9d66c30127 feat(tests): add team queue overview section for leads kitos 2026-07-14 11:03:17 +02:00
  • c6bdded3f6 fix(jira): keep BT Start Date across reopens, resolve Jira accounts on the fly everywhere kitos 2026-07-14 10:23:30 +02:00
  • 814cfa9671 feat(jira): label standalone tests, include round data in submission comments kitos 2026-07-14 08:37:40 +02:00
  • 6d6f87b968 fix(jira,tests): send real datetime to RT/BT date fields, resolve assignee usernames for operators kitos 2026-07-13 16:53:31 +02:00
  • 4221d2858b fix(jira): store execution times as real UTC, fix RT date fields, label reopens kitos 2026-07-13 14:57:42 +02:00
  • b48de743b6 fix(tests): keep free-text round fields in place on reopen, only blank verdicts kitos 2026-07-13 12:46:46 +02:00
  • 8fe38dc661 feat(tests): archive round history on reopen, stop pausing from setting Jira On Hold kitos 2026-07-13 12:08:45 +02:00
  • 0bb34f6834 fix(tests): pause reopen timer, lock edits to assignee, restore Jira operator on reopen kitos 2026-07-13 10:53:10 +02:00
  • a3f86c7b31 fix(permissions): admin can no longer operate tests — start/submit/edit/create, view only kitos 2026-07-13 09:27:43 +02:00
  • 337faf824d fix(jira): clear stale assignee on hand-off to blue team / dual validation kitos 2026-07-10 16:49:16 +02:00
  • 0fc2427f71 feat(review): review queue for leads + manual reviewer reassignment kitos 2026-07-10 16:19:14 +02:00
  • be2a3fdced fix: multiple test-workflow bugs — draft wipe, dark date pickers, Jira status strings, Tempo gate, hold timer kitos 2026-07-10 15:24:19 +02:00
  • 997b38d333 fix(ui): fit all 9 test-state stat cards in a single row on Tests page kitos 2026-07-10 14:08:29 +02:00
  • 1535ddaa5d fix(jira): honor jira_email override in account-id lookup, not just email kitos 2026-07-10 13:42:33 +02:00
  • a46aa157f3 fix(assign): exclude admin from assignable operators; sync Jira on assign even for first-time users kitos 2026-07-10 13:08:23 +02:00
  • 5d22514f7f fix(ui): remove stray backslash left before the em dash in technique line kitos 2026-07-10 12:39:47 +02:00
  • 58c0143304 feat(permissions): admin no longer acts on the test workflow; managers coordinate operators kitos 2026-07-10 10:28:04 +02:00
  • f32f636f05 fix(jira): expose non-admin jira-config, drop security-test label; catalog paging kitos 2026-07-10 10:24:13 +02:00
  • 2afb886cd9 feat(assign): let leads manually assign operators + sync Jira; send platform as Jira label kitos 2026-07-10 08:44:14 +02:00
  • 119db6f91d fix(jira): wrap select-field values in {value: ...} for Jira REST API kitos 2026-07-09 17:08:53 +02:00
  • d726e3adfe fix(jira): correct Data Sensitivity field ID and replicate Jira's real classification scheme kitos 2026-07-09 16:33:41 +02:00
  • 512b682cc5 fix(jira): correct user_find_by_user_string kwarg breaking account-id auto-detection kitos 2026-07-09 15:26:36 +02:00
  • 8031682e9c feat(matrix): unify Techniques and Coverage Matrix into one page kitos 2026-07-09 14:19:38 +02:00
  • 0de9f4a6c0 feat(heatmap): expose technique name + real status on every layer kitos 2026-07-09 14:12:58 +02:00
  • 4e31359fca feat(frontend): add technique/platform/outcome/date filters to Validated Tests kitos 2026-07-09 12:45:54 +02:00
  • 226869d308 feat(tests): richer server-side filters + true total count for GET /tests kitos 2026-07-09 12:45:05 +02:00
  • adae7e617e fix(jira): report which admin config field is actually missing kitos 2026-07-09 12:02:04 +02:00
  • 4ddd7f9ec3 feat(jira): sync the full Purple Team workflow status to Jira kitos 2026-07-08 13:39:15 +02:00
  • ccc99439d5 docs: add Jira/Tempo service account requirements and use cases kitos 2026-07-08 11:30:33 +02:00
  • df49d336f7 fix(security): stop leaking live Jira/Tempo admin tokens in config export kitos 2026-07-08 11:08:09 +02:00
  • 0b6a664651 test(admin): cover config export/import bundle (Block 4) kitos 2026-07-08 10:15:11 +02:00
  • 8cf8001de5 feat(frontend): My Reviews queue, duplicate-test badge, tactic order, legend + tooltip fixes kitos 2026-07-08 08:46:24 +02:00
  • 1c8fa436ab feat(backend): enforce campaign scheduling, add reviewer queue filter, tactic order, duplicate-test counts kitos 2026-07-08 08:46:09 +02:00
  • 21c6febd22 fix(frontend): render markdown descriptions properly, fix tooltip/banner wording kitos 2026-07-07 16:30:27 +02:00
  • c234fd64c2 feat(d3fend): flag review_required on new ATT&CK-D3FEND mappings kitos 2026-07-07 16:20:01 +02:00
  • b6da0e22c2 feat(jira): push Attack Contained field (customfield_11885) on BT submit kitos 2026-07-07 15:46:17 +02:00
  • 1ddbd6989f fix(frontend): hide viewer-only risk-compute UI, proactively renew session kitos 2026-07-07 13:42:54 +02:00
  • bd26b09827 fix(backend): resolve refresh-token expiry deadlock, missing Jira on normal campaign approval, discarded threat-actor campaign start_date kitos 2026-07-07 13:42:26 +02:00
  • fefe70baed Merge branch 'main' of https://git.undiamagico.es/kitos/Aegis into claude/adoring-vaughan-273f91 kitos 2026-07-07 11:30:09 +02:00
  • 1519ccc95c feat(tests): update data classification UI to org's 4-tier scheme kitos 2026-07-07 11:16:45 +02:00
  • a66fefa30b feat(classification): org data classification scheme, tactic-based initial default, operator edit rights kitos 2026-07-07 11:16:35 +02:00
  • b6b674d620 fix(deps): regenerate lock with babel/core 7.29.7 and esbuild 0.28.1 (overrides applied) kitos 2026-07-07 11:01:28 +02:00
  • 42b05379f7 fix(deps): revert babel/core lock to 7.29.0 (npm ci fails with manual sub-dep mismatch) kitos 2026-07-07 10:47:23 +02:00
  • d6fbc2ffe8 fix(deps): bump starlette>=1.3.1, pydantic-settings>=2.14.2; override babel/core>=7.29.6, esbuild>=0.28.1 kitos 2026-07-07 08:52:07 +02:00
  • 949e5d42c4 fix(migration): cast CASE expression to enum type in b058 UPDATE statement kitos 2026-07-06 17:01:25 +02:00
  • c0a88fc489 feat(tests): attack_success 3-value UI, data classification badge, reorder containment options kitos 2026-07-06 16:19:50 +02:00
  • 022c1c756a feat(jira): pause/hold status mapping, RT/BT dates, TTP, attack_success 3-value field, hours kitos 2026-07-06 16:19:39 +02:00
  • 19c4866103 feat(tests): dispute resolution UI — manager escalation + red/blue queue selector kitos 2026-07-06 12:40:21 +02:00
  • f53e124c50 fix(tests): fix veto bug preventing disputed state, add manager notification and dispute-resolution routing kitos 2026-07-06 12:40:05 +02:00
  • 388c9773ab docs(tests): implementation plan for red/blue review workflow kitos 2026-07-06 12:08:18 +02:00
  • d5e3df00f9 feat(tests): review panels, blind visibility UX, red_review/blue_review badges kitos 2026-07-06 12:02:14 +02:00
  • 82033b5037 feat(tests): types and API client for red/blue review workflow kitos 2026-07-06 12:02:07 +02:00
  • 8a028bf0ed feat(tests): blind red/blue visibility until both reviews are approved kitos 2026-07-06 11:42:35 +02:00
  • b527eeac7d feat(tests): review-red/review-blue router endpoints kitos 2026-07-06 11:42:34 +02:00
  • e3cd75bb56 feat(tests): retarget submit-red/submit-blue through review gates, add review decisions kitos 2026-07-06 10:56:41 +02:00