rookit
6898dde84e
add raw SPL and ES|QL query support to SIEMToolKit and MCP
...
Add execute_spl (Splunk SPL) and execute_esql (ELK ES|QL) methods with
configurable result limit (default 100), optional time range, and MCP
tool registration.
2026-06-03 11:21:15 +08:00
rookit
4420990583
fix timeout error
2026-06-03 09:39:54 +08:00
rookit
6f27beac10
add dark mode js
2026-06-02 16:32:27 +08:00
rookit
2a95a8473b
add dark mode js
2026-06-02 16:12:17 +08:00
rookit
79cbab9726
update app
2026-06-02 14:24:06 +08:00
rookit
cf33aacd79
update test
2026-06-01 18:05:06 +08:00
rookit
83f145f22b
update test
2026-05-29 16:43:21 +08:00
rookit
c3187208b7
update readme
2026-05-29 16:08:49 +08:00
rootkit and GitHub
81ce96b4b3
Merge pull request #13 from FunnyWolf/dev
...
update readme
2026-05-29 14:20:19 +08:00
rookit
2441c04b32
update readme
2026-05-29 14:19:13 +08:00
rootkit and GitHub
a699b1d544
Merge pull request #12 from FunnyWolf/dev
...
Dev
2026-05-29 14:07:42 +08:00
rookit
bb74139841
update readme
2026-05-29 14:04:05 +08:00
rookit
e59144321c
fix elk timeout error
2026-05-28 16:05:19 +08:00
rookit
f7ded15c8b
tmp
2026-05-28 15:56:04 +08:00
rookit
15f8a34cce
tmp
2026-05-28 09:20:46 +08:00
rookit
5331411793
tmp
2026-05-28 09:18:58 +08:00
rookit
1d4afb5545
tmp
2026-05-28 09:17:46 +08:00
rookit
7defbe09c7
update PLUGINS
2026-05-27 18:25:35 +08:00
rookit
74fddf11ed
update PLUGINS
2026-05-27 18:22:40 +08:00
rootkit and GitHub
23c3701ae2
Merge pull request #11 from FunnyWolf/dev
...
update version 0.4.0
2026-05-27 13:58:19 +08:00
rookit
56b385b01c
update PLUGINS
2026-05-27 10:11:14 +08:00
rookit
1f35fbff5b
update PLUGINS
2026-05-26 15:47:12 +08:00
rookit
6dbe97c2c4
update PLUGINS
2026-05-26 15:45:30 +08:00
rookit
9e9d0418ed
update PLUGINS
2026-05-26 14:52:06 +08:00
rookit
eee82809e9
update PLUGINS
2026-05-26 13:25:17 +08:00
rookit
5673774b11
tmp
2026-05-25 15:47:31 +08:00
rookit
0c0328abf1
tmp
2026-05-25 15:25:02 +08:00
rookit
c80d54fb45
tmp
2026-05-25 14:49:11 +08:00
funnywolf
b9125cf415
remove unused package
2026-05-24 18:06:03 +08:00
funnywolf
01241b1d67
change ELK to use api-key
2026-05-24 17:01:25 +08:00
rookit
3491d5ff1c
upload arch.jpg
2026-05-21 17:11:47 +08:00
rookit
5576bdc41b
rename
2026-05-20 16:12:30 +08:00
rookit
0fb5220dcf
remove ticket, replace by enrichment
2026-05-20 09:31:05 +08:00
rookit
eedef99f4d
add uid in enrichment
2026-05-20 09:06:36 +08:00
rookit
b0639b2ce6
tmp
2026-05-19 16:34:22 +08:00
rookit
6783d0243d
update ti interface
2026-05-19 11:27:26 +08:00
rookit
7435627a84
update playbook api
2026-05-19 09:48:50 +08:00
rookit
53007ccc63
delete unused code
2026-05-18 16:39:45 +08:00
rookit
201f92e2b2
refactor: simplify MCP tools — merge attach into create, clean up agents
...
- Merge attach_enrichment_to_target into create_enrichment (target_id required)
- Merge attach_ticket_to_case into create_ticket (case_id required)
- Merge get_case_discussions into list_cases (include_discussions param)
- Remove comment_ai/summary_ai from update_case, add comment/summary
- Remove unused agent files (agent_cmdb, agent_report, simpler/agents)
- Update all skill files to match new MCP interfaces
2026-05-18 16:24:33 +08:00
rookit
f94b92e7d7
update case interface
2026-05-18 15:59:35 +08:00
rookit
103f2de9b8
rename
2026-05-18 14:31:52 +08:00
rookit
20b2701fd3
add case to knowledge function
2026-05-18 14:29:28 +08:00
rookit
b45cfb88db
tmp
2026-05-18 11:00:35 +08:00
rookit
64346f05b9
tmp
2026-05-18 10:25:12 +08:00
rookit
3f9201905f
tmp
2026-05-18 09:28:39 +08:00
funnywolf and Claude Opus 4.7
548d21dcc6
feat: filter discussions to return only valuable fields, disable system proxy
...
- Add WorksheetRow._filter_discussions to extract meaningful fields (message, created_by, reply_to_author, mentions, attachments)
- Clean [aid] tags in message and replace with @fullname
- Set HTTP_SESSION.trust_env = False to prevent using system proxies
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com >
2026-05-17 22:47:13 +08:00
funnywolf
83cd4cdc74
tmp
2026-05-17 22:23:19 +08:00
funnywolf
23ed0cfd3a
tmp
2026-05-17 22:17:37 +08:00
funnywolf
589806ddb6
tmp
2026-05-17 21:40:21 +08:00
rookit
d00ccb0ffc
tmp add statusline-command.sh
2026-05-15 16:41:02 +08:00