kitos e3e79be35a feat(evaluations): ATT&CK Evaluations importer for CrowdStrike Falcon [FASE-6.1] ...

- Migration b048: evaluation_imports table (adversary, round, status, tests_created)
- EvaluationImport SQLAlchemy model
- attck_evaluations_service: fetch rounds from evals.mitre.org API, import per-technique
  detection results (Technique/Tactic/Telemetry -> detected/partially/not_detected)
- All imported tests land in in_review state with lab-environment disclaimer
- Idempotency guard prevents duplicate round imports
- 4 new endpoints: list rounds, import specific, import latest, check-new
- Weekly APScheduler cron (Mon 06:00) auto-checks and imports new rounds
- SystemPage UI: rounds table, import buttons, check-new, result feedback
- Disclaimer callout reminding admins these are lab results not org coverage

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-06-05 15:57:03 +02:00

..

__init__.py

feat(alerts): Phase 13 — Operational Alert Engine

2026-05-21 15:25:55 +02:00

api_key.py

feat(enterprise): Phase 14 — API Key Management + SSO/SAML 2.0

2026-05-20 16:43:57 +02:00

attack_path.py

feat(attack-paths): Phase 10 — Attack Paths & Advanced Purple Team [FASE-10]

2026-05-20 13:11:01 +02:00

audit.py

feat(audit): enhanced audit trail with IP, user-agent and integrity hash [FASE-3.1]

2026-05-18 14:16:18 +02:00

campaign.py

feat(campaigns): campaign start date — scheduled activation, Jira start_date

2026-06-03 16:57:06 +02:00

compliance.py

fix(models,db): delegate timestamps to DB server and configure connection pool

2026-02-18 11:52:15 +01:00

coverage_snapshot.py

feat(scoring): composite recency decay and severity weights persisted in DB [FASE-5.1]

2026-05-18 15:07:12 +02:00

data_source.py

fix(models,db): delegate timestamps to DB server and configure connection pool

2026-02-18 11:52:15 +01:00

decay_policy.py

feat(dlm): Phase 8 — Detection Lifecycle Management [FASE-8]

2026-05-19 15:45:16 +02:00

defensive_technique.py

fix(models,db): delegate timestamps to DB server and configure connection pool

2026-02-18 11:52:15 +01:00

detection_lifecycle.py

feat(dlm): Phase 8 — Detection Lifecycle Management [FASE-8]

2026-05-19 15:45:16 +02:00

detection_rule.py

fix(models,db): delegate timestamps to DB server and configure connection pool

2026-02-18 11:52:15 +01:00

enums.py

feat(compliance): data classification fields and retention policies job [FASE-3.5]

2026-05-18 14:17:29 +02:00

evaluation_import.py

feat(evaluations): ATT&CK Evaluations importer for CrowdStrike Falcon [FASE-6.1]

2026-06-05 15:57:03 +02:00

evidence.py

feat(compliance): data classification fields and retention policies job [FASE-3.5]

2026-05-18 14:17:29 +02:00

executive_dashboard.py

feat(dashboard): Phase 13 — Executive Dashboard

2026-05-20 16:20:21 +02:00

intel.py

fix(models,db): delegate timestamps to DB server and configure connection pool

2026-02-18 11:52:15 +01:00

jira_link.py

fix(models,db): delegate timestamps to DB server and configure connection pool

2026-02-18 11:52:15 +01:00

knowledge.py

feat(knowledge): Phase 11 — Knowledge Management (Playbooks + Lessons Learned) [FASE-11]

2026-05-20 13:39:05 +02:00

notification.py

fix(models,db): delegate timestamps to DB server and configure connection pool

2026-02-18 11:52:15 +01:00

operational_alert.py

feat(alerts): Phase 13 — Operational Alert Engine

2026-05-21 15:25:55 +02:00

osint_item.py

fix(models,db): delegate timestamps to DB server and configure connection pool

2026-02-18 11:52:15 +01:00

ownership_queue.py

feat(ownership): Phase 9 — Ownership & Daily Operations [FASE-9]

2026-05-19 16:48:47 +02:00

risk_intelligence.py

feat(risk): Phase 12 — Risk Intelligence [FASE-12]

2026-05-20 15:31:38 +02:00

scoring_config.py

feat(scoring): composite recency decay and severity weights persisted in DB [FASE-5.1]

2026-05-18 15:07:12 +02:00

sso_config.py

feat(enterprise): Phase 14 — API Key Management + SSO/SAML 2.0

2026-05-20 16:43:57 +02:00

system_config.py

feat(settings): Settings page with email, webhooks, notifications, profile [FASE-8]

2026-05-19 15:10:31 +02:00

technique.py

feat: Phase 1 - Data models and migrations (T-004 to T-009)

2026-02-06 12:26:26 +01:00

test_detection_result.py

db: enforce unique constraint on test_detection_results

2026-02-18 13:20:28 +01:00

test_template_detection_rule.py

feat(phase-25): add detection rule associations, checklist UI and evaluation workflow (T-215, T-216)

2026-02-09 16:44:35 +01:00

test_template.py

fix(models,db): delegate timestamps to DB server and configure connection pool

2026-02-18 11:52:15 +01:00

test.py

feat(tempo): blue team Tempo time from pick-up, not queue entry

2026-05-27 11:50:15 +02:00

threat_actor.py

fix(models,db): delegate timestamps to DB server and configure connection pool

2026-02-18 11:52:15 +01:00

user.py

feat(tempo): per-user Tempo API token — same pattern as Jira token

2026-05-27 10:46:38 +02:00

webhook_config.py

feat(phases): implement webhooks (6.1), email (7.1), user preferences (7.2)

2026-05-19 13:40:45 +02:00

worklog.py

fix(models,db): delegate timestamps to DB server and configure connection pool

2026-02-18 11:52:15 +01:00