kitos 11080bd627 fix(tests): recognize sysmon, wevtutil, auditpol as detection commands ...

Blue's detect_procedure extraction had zero Blue-team-oriented tool
names in its known-binaries list — sysmon.exe, one of the most common
Windows detection tools, silently produced no suggestion at all.
Verified against the exact production input that surfaced this.

2026-07-14 17:24:14 +02:00

..

__init__.py

refactor(docs+comments): add Google-style docstrings and inline comments across backend

2026-06-11 11:06:55 +02:00

advanced_metrics_service.py

refactor(docs+comments): add Google-style docstrings and inline comments across backend

2026-06-11 11:06:55 +02:00

analytics_service.py

feat(jira): pause/hold status mapping, RT/BT dates, TTP, attack_success 3-value field, hours

2026-07-06 16:19:39 +02:00

api_key_service.py

security: fix 6 vulnerabilities identified in SDLC audit

2026-05-22 09:46:29 +02:00

atomic_import_service.py

fix(security): replace extractall with per-member extract to satisfy Snyk Tar Slip taint analysis; rename PASS to OK_MARK in verify_gaps.py

2026-06-12 14:42:29 +02:00

attack_path_service.py

feat(attack-paths): Phase 10 — Attack Paths & Advanced Purple Team [FASE-10]

2026-05-20 13:11:01 +02:00

attck_evaluations_service.py

feat(classification): org data classification scheme, tactic-based initial default, operator edit rights

2026-07-07 11:16:35 +02:00

audit_query_service.py

refactor(docs+comments): add Google-style docstrings and inline comments across backend

2026-06-11 11:06:55 +02:00

audit_service.py

fix(tests): fix 15 pytest failures across 4 failure groups

2026-06-12 11:36:10 +02:00

auth_service.py

feat(refactor): PEP8, type annotations, docstrings and PyJWT security fix

2026-06-11 11:09:41 +02:00

caldera_import_service.py

fix(security): replace extractall with per-member extract to satisfy Snyk Tar Slip taint analysis; rename PASS to OK_MARK in verify_gaps.py

2026-06-12 14:42:29 +02:00

campaign_crud_service.py

feat(campaigns): timeline endpoint, admin-only manual activation, remove lead-set dates

2026-07-04 12:02:09 +02:00

campaign_scheduler_service.py

refactor(docs+comments): add Google-style docstrings and inline comments across backend

2026-06-11 11:06:55 +02:00

campaign_service.py

fix(backend): resolve refresh-token expiry deadlock, missing Jira on normal campaign approval, discarded threat-actor campaign start_date

2026-07-07 13:42:26 +02:00

compliance_import_service.py

fix(lint): resolve 2132 ruff errors to pass CI lint-and-test job

2026-06-12 10:47:48 +02:00

compliance_service.py

feat(refactor): PEP8, type annotations, docstrings and PyJWT security fix

2026-06-11 11:09:41 +02:00

coverage_report_service.py

feat(jira): pause/hold status mapping, RT/BT dates, TTP, attack_success 3-value field, hours

2026-07-06 16:19:39 +02:00

d3fend_import_service.py

feat(d3fend): flag review_required on new ATT&CK-D3FEND mappings

2026-07-07 16:20:01 +02:00

d3fend_query_service.py

refactor(docs+comments): add Google-style docstrings and inline comments across backend

2026-06-11 11:06:55 +02:00

data_source_service.py

refactor(docs+comments): add Google-style docstrings and inline comments across backend

2026-06-11 11:06:55 +02:00

decay_engine_service.py

fix(decay-engine): strip tzinfo from validated_at before datetime arithmetic

2026-05-19 16:35:02 +02:00

detection_asset_service.py

fix(lint): resolve 2132 ruff errors to pass CI lint-and-test job

2026-06-12 10:47:48 +02:00

detection_rule_service.py

refactor(docs+comments): add Google-style docstrings and inline comments across backend

2026-06-11 11:06:55 +02:00

elastic_import_service.py

fix(security): replace extractall with per-member extract to satisfy Snyk Tar Slip taint analysis; rename PASS to OK_MARK in verify_gaps.py

2026-06-12 14:42:29 +02:00

email_service.py

fix(lint): resolve 2132 ruff errors to pass CI lint-and-test job

2026-06-12 10:47:48 +02:00

evidence_service.py

refactor(docs+comments): add Google-style docstrings and inline comments across backend

2026-06-11 11:06:55 +02:00

executive_dashboard_service.py

fix(lint): resolve 2132 ruff errors to pass CI lint-and-test job

2026-06-12 10:47:48 +02:00

heatmap_service.py

feat(heatmap): expose technique name + real status on every layer

2026-07-09 14:12:58 +02:00

intel_service.py

feat(refactor): PEP8, type annotations, docstrings and PyJWT security fix

2026-06-11 11:09:41 +02:00

jira_service.py

feat(tests): add Blue detect_procedure field mapped from template suggestion

2026-07-14 14:58:29 +02:00

lesson_learned_service.py

fix(knowledge): use EntityNotFoundError/DuplicateEntityError instead of DomainError(status_code=)

2026-05-20 15:21:36 +02:00

lolbas_import_service.py

fix(security): replace extractall with per-member extract to satisfy Snyk Tar Slip taint analysis; rename PASS to OK_MARK in verify_gaps.py

2026-06-12 14:42:29 +02:00

metrics_query_service.py

feat(backend): enforce campaign scheduling, add reviewer queue filter, tactic order, duplicate-test counts

2026-07-08 08:46:09 +02:00

mitre_sync_service.py

feat(techniques): add external_references storage and display MITRE sources with links

2026-06-18 16:26:11 +02:00

notification_service.py

fix(security): resolve Snyk/bandit code analysis findings

2026-06-12 12:59:11 +02:00

operational_alert_service.py

fix(alerts): import User model in operational_alert_service to fix NameError in _dispatch_inapp_notifications

2026-05-21 17:11:35 +02:00

operational_metrics_service.py

feat(dashboard): time range filter for operational metrics (30d/90d/6m/1y/all)

2026-06-19 10:41:22 +02:00

osint_enrichment_service.py

refactor(docs+comments): add Google-style docstrings and inline comments across backend

2026-06-11 11:06:55 +02:00

ownership_service.py

feat(ownership): Phase 9 — Ownership & Daily Operations [FASE-9]

2026-05-19 16:48:47 +02:00

playbook_service.py

fix(lint): resolve 2132 ruff errors to pass CI lint-and-test job

2026-06-12 10:47:48 +02:00

procedure_extraction_service.py

fix(tests): recognize sysmon, wevtutil, auditpol as detection commands

2026-07-14 17:24:14 +02:00

procedure_suggestion_service.py

fix(tests): merge approved procedure suggestions instead of overwriting

2026-07-14 16:25:24 +02:00

report_engine.py

fix(report_engine): lazy-init output dir to fix CI PermissionError on /app

2026-06-12 14:13:41 +02:00

report_generation_service.py

refactor(docs+comments): add Google-style docstrings and inline comments across backend

2026-06-11 11:06:55 +02:00

revalidation_queue_service.py

fix(lint): resolve 2132 ruff errors to pass CI lint-and-test job

2026-06-12 10:47:48 +02:00

risk_intelligence_service.py

fix(lint): resolve 2132 ruff errors to pass CI lint-and-test job

2026-06-12 10:47:48 +02:00

score_cache.py

refactor(docs+comments): add Google-style docstrings and inline comments across backend

2026-06-11 11:06:55 +02:00

scoring_config_service.py

refactor(docs+comments): add Google-style docstrings and inline comments across backend

2026-06-11 11:06:55 +02:00

scoring_service.py

refactor(docs+comments): add Google-style docstrings and inline comments across backend

2026-06-11 11:06:55 +02:00

sigma_import_service.py

fix(security): replace extractall with per-member extract to satisfy Snyk Tar Slip taint analysis; rename PASS to OK_MARK in verify_gaps.py

2026-06-12 14:42:29 +02:00

snapshot_service.py

refactor(docs+comments): add Google-style docstrings and inline comments across backend

2026-06-11 11:06:55 +02:00

sso_service.py

fix(lint): resolve 2132 ruff errors to pass CI lint-and-test job

2026-06-12 10:47:48 +02:00

stale_detection_service.py

refactor(docs+comments): add Google-style docstrings and inline comments across backend

2026-06-11 11:06:55 +02:00

status_service.py

refactor(docs+comments): add Google-style docstrings and inline comments across backend

2026-06-11 11:06:55 +02:00

technique_query_service.py

feat(techniques): add external_references storage and display MITRE sources with links

2026-06-18 16:26:11 +02:00

tempo_service.py

fix: multiple test-workflow bugs — draft wipe, dark date pickers, Jira status strings, Tempo gate, hold timer

2026-07-10 15:24:19 +02:00

test_crud_service.py

feat(tests): add Blue detect_procedure field mapped from template suggestion

2026-07-14 14:58:29 +02:00

test_template_service.py

feat(backend): enforce campaign scheduling, add reviewer queue filter, tactic order, duplicate-test counts

2026-07-08 08:46:09 +02:00

test_workflow_service.py

feat(tests): auto-propose procedure suggestions from submitted rounds, add lead review workflow

2026-07-14 15:22:03 +02:00

threat_actor_import_service.py

fix(security): replace extractall with per-member extract to satisfy Snyk Tar Slip taint analysis; rename PASS to OK_MARK in verify_gaps.py

2026-06-12 14:42:29 +02:00

threat_actor_service.py

feat(refactor): PEP8, type annotations, docstrings and PyJWT security fix

2026-06-11 11:09:41 +02:00

user_service.py

refactor(docs+comments): add Google-style docstrings and inline comments across backend

2026-06-11 11:06:55 +02:00

webhook_service.py

fix(webhooks): auto-detect platform format for Teams/Slack/generic

2026-06-02 14:35:35 +02:00

worklog_service.py

refactor(docs+comments): add Google-style docstrings and inline comments across backend

2026-06-11 11:06:55 +02:00