kitos e3e79be35a feat(evaluations): ATT&CK Evaluations importer for CrowdStrike Falcon [FASE-6.1] ...

- Migration b048: evaluation_imports table (adversary, round, status, tests_created)
- EvaluationImport SQLAlchemy model
- attck_evaluations_service: fetch rounds from evals.mitre.org API, import per-technique
  detection results (Technique/Tactic/Telemetry -> detected/partially/not_detected)
- All imported tests land in in_review state with lab-environment disclaimer
- Idempotency guard prevents duplicate round imports
- 4 new endpoints: list rounds, import specific, import latest, check-new
- Weekly APScheduler cron (Mon 06:00) auto-checks and imports new rounds
- SystemPage UI: rounds table, import buttons, check-new, result feedback
- Disclaimer callout reminding admins these are lab results not org coverage

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-06-05 15:57:03 +02:00

..

__init__.py

feat: Phase 1 - Data models and migrations (T-004 to T-009)

2026-02-06 12:26:26 +01:00

advanced_metrics_service.py

fix(metrics): correct never-tested technique query [FASE-2.6]

2026-05-18 14:00:48 +02:00

analytics_service.py

feat: extract advanced_metrics, analytics, test_templates, and auth to services (Tier 1 complete)

2026-02-20 14:28:52 +01:00

api_key_service.py

security: fix 6 vulnerabilities identified in SDLC audit

2026-05-22 09:46:29 +02:00

atomic_import_service.py

feat(review-queue): trigger review_required on new test templates

2026-05-29 11:26:09 +02:00

attack_path_service.py

feat(attack-paths): Phase 10 — Attack Paths & Advanced Purple Team [FASE-10]

2026-05-20 13:11:01 +02:00

attck_evaluations_service.py

feat(evaluations): ATT&CK Evaluations importer for CrowdStrike Falcon [FASE-6.1]

2026-06-05 15:57:03 +02:00

audit_query_service.py

feat: add Campaign/Compliance domain entities and extract users/audit/data_sources to services (LP-2 through LP-6)

2026-02-20 13:28:14 +01:00

audit_service.py

fix(qa): 5 bug fixes — audit dates, CSP, template modal, MITRE sync timeout, data source auto-sync

2026-05-19 12:05:35 +02:00

auth_service.py

fix(auth): prevent reuse of current password on first-access change

2026-05-28 16:56:47 +02:00

caldera_import_service.py

feat(review-queue): trigger review_required on new test templates

2026-05-29 11:26:09 +02:00

campaign_crud_service.py

feat(campaigns): campaign start date — scheduled activation, Jira start_date

2026-06-03 16:57:06 +02:00

campaign_scheduler_service.py

refactor: remove db.commit() from audit_service.log_action, all callers use UoW

2026-02-20 15:33:23 +01:00

campaign_service.py

feat(campaigns): start_date for threat-actor-generated campaigns

2026-06-04 13:37:40 +02:00

compliance_import_service.py

feat(compliance): executive descriptions and mapping rationale for all 5 frameworks

2026-06-03 16:28:16 +02:00

compliance_service.py

feat(compliance): executive descriptions and mapping rationale for all 5 frameworks

2026-06-03 16:28:16 +02:00

coverage_report_service.py

refactor(reports): extract query and aggregation logic to coverage_report_service, fix N+1 test-count pattern

2026-02-19 15:56:42 +01:00

d3fend_import_service.py

fix: D3FEND ontology-based import, template management UX, and branding

2026-02-10 15:53:24 +01:00

d3fend_query_service.py

feat: move all remaining inline logic from routers to services (Tier 2)

2026-02-20 14:34:24 +01:00

data_source_service.py

feat: add ImportService protocol and registry for OCP-compliant import extensibility (LP-7)

2026-02-20 13:31:18 +01:00

decay_engine_service.py

fix(decay-engine): strip tzinfo from validated_at before datetime arithmetic

2026-05-19 16:35:02 +02:00

detection_asset_service.py

fix(detection-lifecycle): fix timezone naive/aware mismatch and duplicate technique mapping

2026-05-19 16:29:04 +02:00

detection_rule_service.py

refactor(detection-rules): extract query/business logic to detection_rule_service, router is thin HTTP adapter

2026-02-19 17:39:31 +01:00

elastic_import_service.py

fix: 4 improvements — campaign test deletion, review queue triggers, technique link, Jira read-only

2026-05-29 11:18:55 +02:00

email_service.py

feat(settings): Settings page with email, webhooks, notifications, profile [FASE-8]

2026-05-19 15:10:31 +02:00

evidence_service.py

refactor(evidence): extract permission validation and queries to evidence_service, use domain exceptions

2026-02-19 19:02:36 +01:00

executive_dashboard_service.py

feat(dashboard): Phase 13 — Executive Dashboard

2026-05-20 16:20:21 +02:00

heatmap_service.py

fix(heatmap): hide empty tactics in threat-actor layer

2026-06-04 17:23:28 +02:00

intel_service.py

fix(intel-scan): remove duplicate _entry_matches + replace dead NVD feed

2026-05-29 16:58:07 +02:00

jira_service.py

feat(campaigns): campaign start date — scheduled activation, Jira start_date

2026-06-03 16:57:06 +02:00

lesson_learned_service.py

fix(knowledge): use EntityNotFoundError/DuplicateEntityError instead of DomainError(status_code=)

2026-05-20 15:21:36 +02:00

lolbas_import_service.py

feat(review-queue): trigger review_required on new test templates

2026-05-29 11:26:09 +02:00

metrics_query_service.py

fix(dashboard): fix empty widgets + NULL created_at on campaign tests

2026-06-02 08:58:04 +02:00

mitre_sync_service.py

refactor: remove db.commit() from audit_service.log_action, all callers use UoW

2026-02-20 15:33:23 +01:00

notification_service.py

feat(phases): implement webhooks (6.1), email (7.1), user preferences (7.2)

2026-05-19 13:40:45 +02:00

operational_alert_service.py

fix(alerts): import User model in operational_alert_service to fix NameError in _dispatch_inapp_notifications

2026-05-21 17:11:35 +02:00

operational_metrics_service.py

fix(metrics): prevent 0.0 falsy bug for sub-hour timing values

2026-06-03 10:59:58 +02:00

osint_enrichment_service.py

refactor: remove db.commit() from business services, callers use UnitOfWork (Tier 3)

2026-02-20 14:42:20 +01:00

ownership_service.py

feat(ownership): Phase 9 — Ownership & Daily Operations [FASE-9]

2026-05-19 16:48:47 +02:00

playbook_service.py

fix(knowledge): use EntityNotFoundError/DuplicateEntityError instead of DomainError(status_code=)

2026-05-20 15:21:36 +02:00

report_engine.py

test(reports): add ReportEngine unit tests [FASE-2.1]

2026-05-18 14:00:37 +02:00

report_generation_service.py

feat(reports): extend report generation service [FASE-2.3]

2026-05-18 14:00:42 +02:00

revalidation_queue_service.py

feat(ownership): Phase 9 — Ownership & Daily Operations [FASE-9]

2026-05-19 16:48:47 +02:00

risk_intelligence_service.py

fix(risk): fix remaining t.technique_id → t.mitre_id in get_recommendations

2026-05-20 16:11:48 +02:00

score_cache.py

feat(phase-33): final polish V3 - navigation, performance, and documentation (T-238 to T-240)

2026-02-10 09:21:35 +01:00

scoring_config_service.py

feat(scoring): composite recency decay and severity weights persisted in DB [FASE-5.1]

2026-05-18 15:07:12 +02:00

scoring_service.py

feat(scoring): composite recency decay and severity weights persisted in DB [FASE-5.1]

2026-05-18 15:07:12 +02:00

sigma_import_service.py

fix: 4 improvements — campaign test deletion, review queue triggers, technique link, Jira read-only

2026-05-29 11:18:55 +02:00

snapshot_service.py

feat(scoring): composite recency decay and severity weights persisted in DB [FASE-5.1]

2026-05-18 15:07:12 +02:00

sso_service.py

feat(enterprise): Phase 14 — API Key Management + SSO/SAML 2.0

2026-05-20 16:43:57 +02:00

stale_detection_service.py

test(intel): verify OSINT enrichment and stale coverage detection [FASE-4]

2026-05-18 14:50:31 +02:00

status_service.py

refactor(status): consolidate status_service to delegate to TechniqueEntity.recalculate_status() eliminating duplicated business logic

2026-02-19 15:23:01 +01:00

technique_query_service.py

feat(intel): major intel scan improvements + Review Queue integration

2026-05-29 16:04:30 +02:00

tempo_service.py

fix(tempo): enforce 1-min minimum and ceiling rounding for worklogs

2026-06-03 09:08:40 +02:00

test_crud_service.py

fix(campaigns): start_date modal + hide future-campaign tests from queue

2026-06-04 14:05:58 +02:00

test_template_service.py

feat: extract advanced_metrics, analytics, test_templates, and auth to services (Tier 1 complete)

2026-02-20 14:28:52 +01:00

test_workflow_service.py

feat(tests): disputed state + fix timestamps on reopen

2026-06-03 12:21:47 +02:00

threat_actor_import_service.py

feat(threat-actors): infer motivation via curated map + description keywords

2026-05-29 15:13:05 +02:00

threat_actor_service.py

fix(threat-actors): fix 500 on search + populate motivation from STIX

2026-05-29 14:09:04 +02:00

user_service.py

feat: add Campaign/Compliance domain entities and extract users/audit/data_sources to services (LP-2 through LP-6)

2026-02-20 13:28:14 +01:00

webhook_service.py

fix(webhooks): auto-detect platform format for Teams/Slack/generic

2026-06-02 14:35:35 +02:00

worklog_service.py

refactor: remove db.commit() from business services, callers use UnitOfWork (Tier 3)

2026-02-20 14:42:20 +01:00