kitos 1fe150963c feat(dlm): Phase 8 — Detection Lifecycle Management [FASE-8] ...

Tasks 8.1-8.5:

Models (8.1):
- DetectionAsset: SIEM/EDR/Sigma rule assets with auto-hash
- DetectionTechniqueMapping: N:M asset ↔ technique coverage
- DetectionValidation: immutable validation records with expiry
- TechniqueConfidenceScore: computed multi-factor confidence
- InfrastructureChangeLog: infra changes that invalidate detections
- DecayPolicy: configurable freshness thresholds per platform/tactic

Services (8.2, 8.3):
- detection_asset_service: CRUD + SHA-256 rule hashing + auto-
  invalidation on rule/infra changes
- decay_engine_service: daily decay engine — expires stale validations,
  recalculates confidence (recency/coverage/health/diversity factors),
  processes infrastructure change propagation

Router (8.4): 15 endpoints under /api/v1/detection-lifecycle:
  assets CRUD, technique mappings, validations, confidence scores,
  infrastructure changes, decay trigger, executive dashboard

Scheduler (8.3): decay engine runs daily at 02:00
Seed (8.5): default policy (90/180/365d) + strict initial-access policy
Migration: b034dlm (6 tables, 11 indexes)

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-05-19 15:45:16 +02:00

..

__init__.py

feat: Phase 1 - Data models and migrations (T-004 to T-009)

2026-02-06 12:26:26 +01:00

advanced_metrics_service.py

fix(metrics): correct never-tested technique query [FASE-2.6]

2026-05-18 14:00:48 +02:00

analytics_service.py

feat: extract advanced_metrics, analytics, test_templates, and auth to services (Tier 1 complete)

2026-02-20 14:28:52 +01:00

atomic_import_service.py

refactor: remove db.commit() from audit_service.log_action, all callers use UoW

2026-02-20 15:33:23 +01:00

audit_query_service.py

feat: add Campaign/Compliance domain entities and extract users/audit/data_sources to services (LP-2 through LP-6)

2026-02-20 13:28:14 +01:00

audit_service.py

fix(qa): 5 bug fixes — audit dates, CSP, template modal, MITRE sync timeout, data source auto-sync

2026-05-19 12:05:35 +02:00

auth_service.py

feat: extract advanced_metrics, analytics, test_templates, and auth to services (Tier 1 complete)

2026-02-20 14:28:52 +01:00

caldera_import_service.py

refactor: remove db.commit() from audit_service.log_action, all callers use UoW

2026-02-20 15:33:23 +01:00

campaign_crud_service.py

refactor(campaigns): extract CRUD/business logic to campaign_crud_service, use domain exceptions

2026-02-19 19:04:32 +01:00

campaign_scheduler_service.py

refactor: remove db.commit() from audit_service.log_action, all callers use UoW

2026-02-20 15:33:23 +01:00

campaign_service.py

feat(phase-34): resolve blocking tech debt — Redis, domain exceptions, indexes, CI

2026-02-17 15:43:05 +01:00

compliance_import_service.py

fix: D3FEND expandable cards, System page cleanup, and multi-source improvements

2026-02-10 13:22:23 +01:00

compliance_service.py

refactor(compliance): extract business logic to compliance_service, use domain exceptions instead of HTTPException

2026-02-19 17:06:32 +01:00

coverage_report_service.py

refactor(reports): extract query and aggregation logic to coverage_report_service, fix N+1 test-count pattern

2026-02-19 15:56:42 +01:00

d3fend_import_service.py

fix: D3FEND ontology-based import, template management UX, and branding

2026-02-10 15:53:24 +01:00

d3fend_query_service.py

feat: move all remaining inline logic from routers to services (Tier 2)

2026-02-20 14:34:24 +01:00

data_source_service.py

feat: add ImportService protocol and registry for OCP-compliant import extensibility (LP-7)

2026-02-20 13:31:18 +01:00

decay_engine_service.py

feat(dlm): Phase 8 — Detection Lifecycle Management [FASE-8]

2026-05-19 15:45:16 +02:00

detection_asset_service.py

feat(dlm): Phase 8 — Detection Lifecycle Management [FASE-8]

2026-05-19 15:45:16 +02:00

detection_rule_service.py

refactor(detection-rules): extract query/business logic to detection_rule_service, router is thin HTTP adapter

2026-02-19 17:39:31 +01:00

elastic_import_service.py

refactor: remove db.commit() from audit_service.log_action, all callers use UoW

2026-02-20 15:33:23 +01:00

email_service.py

feat(settings): Settings page with email, webhooks, notifications, profile [FASE-8]

2026-05-19 15:10:31 +02:00

evidence_service.py

refactor(evidence): extract permission validation and queries to evidence_service, use domain exceptions

2026-02-19 19:02:36 +01:00

heatmap_service.py

feat: make heatmap layers extensible via LayerRegistry (OCP)

2026-02-20 16:07:36 +01:00

intel_service.py

refactor: remove db.commit() from audit_service.log_action, all callers use UoW

2026-02-20 15:33:23 +01:00

jira_service.py

feat: move all remaining inline logic from routers to services (Tier 2)

2026-02-20 14:34:24 +01:00

lolbas_import_service.py

refactor: remove db.commit() from audit_service.log_action, all callers use UoW

2026-02-20 15:33:23 +01:00

metrics_query_service.py

refactor(metrics): extract query logic to metrics_query_service, thin down router to HTTP adapter

2026-02-19 17:06:07 +01:00

mitre_sync_service.py

refactor: remove db.commit() from audit_service.log_action, all callers use UoW

2026-02-20 15:33:23 +01:00

notification_service.py

feat(phases): implement webhooks (6.1), email (7.1), user preferences (7.2)

2026-05-19 13:40:45 +02:00

operational_metrics_service.py

feat(phase-28): add scoring system, operational metrics and executive dashboard (T-224 to T-226)

2026-02-09 17:24:44 +01:00

osint_enrichment_service.py

refactor: remove db.commit() from business services, callers use UnitOfWork (Tier 3)

2026-02-20 14:42:20 +01:00

report_engine.py

test(reports): add ReportEngine unit tests [FASE-2.1]

2026-05-18 14:00:37 +02:00

report_generation_service.py

feat(reports): extend report generation service [FASE-2.3]

2026-05-18 14:00:42 +02:00

score_cache.py

feat(phase-33): final polish V3 - navigation, performance, and documentation (T-238 to T-240)

2026-02-10 09:21:35 +01:00

scoring_config_service.py

feat(scoring): composite recency decay and severity weights persisted in DB [FASE-5.1]

2026-05-18 15:07:12 +02:00

scoring_service.py

feat(scoring): composite recency decay and severity weights persisted in DB [FASE-5.1]

2026-05-18 15:07:12 +02:00

sigma_import_service.py

refactor: remove db.commit() from audit_service.log_action, all callers use UoW

2026-02-20 15:33:23 +01:00

snapshot_service.py

feat(scoring): composite recency decay and severity weights persisted in DB [FASE-5.1]

2026-05-18 15:07:12 +02:00

stale_detection_service.py

test(intel): verify OSINT enrichment and stale coverage detection [FASE-4]

2026-05-18 14:50:31 +02:00

status_service.py

refactor(status): consolidate status_service to delegate to TechniqueEntity.recalculate_status() eliminating duplicated business logic

2026-02-19 15:23:01 +01:00

technique_query_service.py

feat: move all remaining inline logic from routers to services (Tier 2)

2026-02-20 14:34:24 +01:00

tempo_service.py

feat(tempo): harden worklog sync and add tests [FASE-1.4]

2026-05-18 13:36:26 +02:00

test_crud_service.py

refactor(tests): extract CRUD/query logic to test_crud_service, router delegates to service with domain exceptions

2026-02-19 18:35:09 +01:00

test_template_service.py

feat: extract advanced_metrics, analytics, test_templates, and auth to services (Tier 1 complete)

2026-02-20 14:28:52 +01:00

test_workflow_service.py

fix(workflow): enforce domain state machine in dual validation path

2026-02-18 15:49:59 +01:00

threat_actor_import_service.py

refactor: remove db.commit() from audit_service.log_action, all callers use UoW

2026-02-20 15:33:23 +01:00

threat_actor_service.py

refactor(threat-actors): extract query/business logic to threat_actor_service, fix N+1 with grouped subqueries

2026-02-19 17:40:00 +01:00

user_service.py

feat: add Campaign/Compliance domain entities and extract users/audit/data_sources to services (LP-2 through LP-6)

2026-02-20 13:28:14 +01:00

webhook_service.py

feat(phases): implement webhooks (6.1), email (7.1), user preferences (7.2)

2026-05-19 13:40:45 +02:00

worklog_service.py

refactor: remove db.commit() from business services, callers use UnitOfWork (Tier 3)

2026-02-20 14:42:20 +01:00