kitos 99e8feff48 feat(evidence): allow .exe uploads for Red-team artifacts shared with Blue ...

The evidence upload extension whitelist blocked .exe entirely, but sharing
a Red team payload binary with Blue for detection analysis is a normal
part of this platform's workflow.

2026-07-27 14:40:45 +02:00

..

__init__.py

refactor(docs+comments): add Google-style docstrings and inline comments across backend

2026-06-11 11:06:55 +02:00

advanced_metrics_service.py

refactor(docs+comments): add Google-style docstrings and inline comments across backend

2026-06-11 11:06:55 +02:00

analytics_service.py

feat(jira): pause/hold status mapping, RT/BT dates, TTP, attack_success 3-value field, hours

2026-07-06 16:19:39 +02:00

api_key_service.py

security: fix 6 vulnerabilities identified in SDLC audit

2026-05-22 09:46:29 +02:00

atomic_import_service.py

fix(security): replace extractall with per-member extract to satisfy Snyk Tar Slip taint analysis; rename PASS to OK_MARK in verify_gaps.py

2026-06-12 14:42:29 +02:00

attack_path_service.py

feat(attack-paths): Phase 10 — Attack Paths & Advanced Purple Team [FASE-10]

2026-05-20 13:11:01 +02:00

attck_evaluations_service.py

feat(classification): org data classification scheme, tactic-based initial default, operator edit rights

2026-07-07 11:16:35 +02:00

audit_query_service.py

feat(users): passwordless user creation via emailed set-password link, display full name instead of username

2026-07-17 16:58:25 +02:00

audit_service.py

fix(tests): fix 15 pytest failures across 4 failure groups

2026-06-12 11:36:10 +02:00

auth_service.py

feat(auth): make email the unique login identifier

2026-07-23 14:39:36 +02:00

caldera_import_service.py

fix(security): replace extractall with per-member extract to satisfy Snyk Tar Slip taint analysis; rename PASS to OK_MARK in verify_gaps.py

2026-06-12 14:42:29 +02:00

campaign_crud_service.py

feat(email): generic webhook for all notification emails, hide SMTP UI

2026-07-20 10:24:15 +02:00

campaign_scheduler_service.py

fix(campaigns): defer Jira ticket creation to start_date, gate recurring campaigns behind manager approval

2026-07-16 11:09:10 +02:00

campaign_service.py

fix(backend): resolve refresh-token expiry deadlock, missing Jira on normal campaign approval, discarded threat-actor campaign start_date

2026-07-07 13:42:26 +02:00

compliance_import_service.py

fix(lint): resolve 2132 ruff errors to pass CI lint-and-test job

2026-06-12 10:47:48 +02:00

compliance_service.py

feat(refactor): PEP8, type annotations, docstrings and PyJWT security fix

2026-06-11 11:09:41 +02:00

coverage_report_service.py

feat(jira): pause/hold status mapping, RT/BT dates, TTP, attack_success 3-value field, hours

2026-07-06 16:19:39 +02:00

d3fend_import_service.py

feat(d3fend): flag review_required on new ATT&CK-D3FEND mappings

2026-07-07 16:20:01 +02:00

d3fend_query_service.py

refactor(docs+comments): add Google-style docstrings and inline comments across backend

2026-06-11 11:06:55 +02:00

data_source_service.py

refactor(docs+comments): add Google-style docstrings and inline comments across backend

2026-06-11 11:06:55 +02:00

decay_engine_service.py

fix(decay-engine): strip tzinfo from validated_at before datetime arithmetic

2026-05-19 16:35:02 +02:00

detection_asset_service.py

fix(lint): resolve 2132 ruff errors to pass CI lint-and-test job

2026-06-12 10:47:48 +02:00

detection_rule_service.py

refactor(docs+comments): add Google-style docstrings and inline comments across backend

2026-06-11 11:06:55 +02:00

elastic_import_service.py

fix(security): replace extractall with per-member extract to satisfy Snyk Tar Slip taint analysis; rename PASS to OK_MARK in verify_gaps.py

2026-06-12 14:42:29 +02:00

email_service.py

fix(lint): resolve 2132 ruff errors to pass CI lint-and-test job

2026-06-12 10:47:48 +02:00

evidence_service.py

feat(evidence): allow .exe uploads for Red-team artifacts shared with Blue

2026-07-27 14:40:45 +02:00

executive_dashboard_service.py

fix(lint): resolve 2132 ruff errors to pass CI lint-and-test job

2026-06-12 10:47:48 +02:00

heatmap_service.py

feat(heatmap): expose technique name + real status on every layer

2026-07-09 14:12:58 +02:00

intel_service.py

feat(refactor): PEP8, type annotations, docstrings and PyJWT security fix

2026-06-11 11:09:41 +02:00

jira_service.py

fix(campaigns): defer Jira ticket creation to start_date, gate recurring campaigns behind manager approval

2026-07-16 11:09:10 +02:00

lesson_learned_service.py

fix(knowledge): use EntityNotFoundError/DuplicateEntityError instead of DomainError(status_code=)

2026-05-20 15:21:36 +02:00

lolbas_import_service.py

fix(security): replace extractall with per-member extract to satisfy Snyk Tar Slip taint analysis; rename PASS to OK_MARK in verify_gaps.py

2026-06-12 14:42:29 +02:00

metrics_query_service.py

feat(backend): enforce campaign scheduling, add reviewer queue filter, tactic order, duplicate-test counts

2026-07-08 08:46:09 +02:00

mitre_sync_service.py

feat(email): generic webhook for all notification emails, hide SMTP UI

2026-07-20 10:24:15 +02:00

notification_service.py

feat(email): HTML branded templates with inline logo, wire remaining notification types

2026-07-20 11:49:21 +02:00

operational_alert_service.py

feat(email): HTML branded templates with inline logo, wire remaining notification types

2026-07-20 11:49:21 +02:00

operational_metrics_service.py

feat(dashboard): time range filter for operational metrics (30d/90d/6m/1y/all)

2026-06-19 10:41:22 +02:00

osint_enrichment_service.py

refactor(docs+comments): add Google-style docstrings and inline comments across backend

2026-06-11 11:06:55 +02:00

ownership_service.py

feat(ownership): Phase 9 — Ownership & Daily Operations [FASE-9]

2026-05-19 16:48:47 +02:00

password_setup_service.py

fix(email): detect and surface webhook send failures instead of claiming success

2026-07-24 16:45:32 +02:00

playbook_service.py

fix(lint): resolve 2132 ruff errors to pass CI lint-and-test job

2026-06-12 10:47:48 +02:00

procedure_extraction_service.py

fix(tests): recognize sysmon, wevtutil, auditpol as detection commands

2026-07-14 17:24:14 +02:00

procedure_suggestion_service.py

feat(tests,users): blocking procedure-suggestion review on test detail, multi-role switcher, Power Automate webhook payload

2026-07-20 09:29:36 +02:00

report_engine.py

fix(report_engine): lazy-init output dir to fix CI PermissionError on /app

2026-06-12 14:13:41 +02:00

report_generation_service.py

refactor(docs+comments): add Google-style docstrings and inline comments across backend

2026-06-11 11:06:55 +02:00

revalidation_queue_service.py

fix(lint): resolve 2132 ruff errors to pass CI lint-and-test job

2026-06-12 10:47:48 +02:00

risk_intelligence_service.py

fix(lint): resolve 2132 ruff errors to pass CI lint-and-test job

2026-06-12 10:47:48 +02:00

score_cache.py

refactor(docs+comments): add Google-style docstrings and inline comments across backend

2026-06-11 11:06:55 +02:00

scoring_config_service.py

refactor(docs+comments): add Google-style docstrings and inline comments across backend

2026-06-11 11:06:55 +02:00

scoring_service.py

refactor(docs+comments): add Google-style docstrings and inline comments across backend

2026-06-11 11:06:55 +02:00

sigma_import_service.py

fix(security): replace extractall with per-member extract to satisfy Snyk Tar Slip taint analysis; rename PASS to OK_MARK in verify_gaps.py

2026-06-12 14:42:29 +02:00

snapshot_service.py

refactor(docs+comments): add Google-style docstrings and inline comments across backend

2026-06-11 11:06:55 +02:00

sso_service.py

feat(auth): make email the unique login identifier

2026-07-23 14:39:36 +02:00

stale_detection_service.py

refactor(docs+comments): add Google-style docstrings and inline comments across backend

2026-06-11 11:06:55 +02:00

status_service.py

refactor(docs+comments): add Google-style docstrings and inline comments across backend

2026-06-11 11:06:55 +02:00

technique_query_service.py

feat(techniques): add external_references storage and display MITRE sources with links

2026-06-18 16:26:11 +02:00

template_suggestion_service.py

feat(templates,campaigns): validate MITRE technique IDs, surface template suggestions first, manager can re-approve rejected campaigns

2026-07-16 14:29:01 +02:00

tempo_service.py

fix: multiple test-workflow bugs — draft wipe, dark date pickers, Jira status strings, Tempo gate, hold timer

2026-07-10 15:24:19 +02:00

test_crud_service.py

fix(campaigns,tests): admin cannot create campaigns, manager can delete unstarted tests, intensify red/blue team colors

2026-07-17 14:34:14 +02:00

test_template_service.py

feat(templates,campaigns): validate MITRE technique IDs, surface template suggestions first, manager can re-approve rejected campaigns

2026-07-16 14:29:01 +02:00

test_workflow_service.py

feat(email): HTML branded templates with inline logo, wire remaining notification types

2026-07-20 11:49:21 +02:00

threat_actor_import_service.py

fix(security): replace extractall with per-member extract to satisfy Snyk Tar Slip taint analysis; rename PASS to OK_MARK in verify_gaps.py

2026-06-12 14:42:29 +02:00

threat_actor_service.py

feat(refactor): PEP8, type annotations, docstrings and PyJWT security fix

2026-06-11 11:09:41 +02:00

user_service.py

feat(auth): make email the unique login identifier

2026-07-23 14:39:36 +02:00

webhook_email_service.py

fix(email): detect and surface webhook send failures instead of claiming success

2026-07-24 16:45:32 +02:00

webhook_service.py

feat(email): HTML branded templates with inline logo, wire remaining notification types

2026-07-20 11:49:21 +02:00

worklog_service.py

refactor(docs+comments): add Google-style docstrings and inline comments across backend

2026-06-11 11:06:55 +02:00