Commit Graph
522 Commits
Author SHA1 Message Date
rookit 6898dde84e add raw SPL and ES|QL query support to SIEMToolKit and MCP
Add execute_spl (Splunk SPL) and execute_esql (ELK ES|QL) methods with
configurable result limit (default 100), optional time range, and MCP
tool registration.
2026-06-03 11:21:15 +08:00
rookit 4420990583 fix timeout error 2026-06-03 09:39:54 +08:00
rookit 6f27beac10 add dark mode js 2026-06-02 16:32:27 +08:00
rookit 2a95a8473b add dark mode js 2026-06-02 16:12:17 +08:00
rookit 79cbab9726 update app 2026-06-02 14:24:06 +08:00
rookit cf33aacd79 update test 2026-06-01 18:05:06 +08:00
rookit 83f145f22b update test 2026-05-29 16:43:21 +08:00
rookit c3187208b7 update readme 2026-05-29 16:08:49 +08:00
rootkitandGitHub 81ce96b4b3 Merge pull request #13 from FunnyWolf/dev
update readme
2026-05-29 14:20:19 +08:00
rookit 2441c04b32 update readme 2026-05-29 14:19:13 +08:00
rootkitandGitHub a699b1d544 Merge pull request #12 from FunnyWolf/dev
Dev
2026-05-29 14:07:42 +08:00
rookit bb74139841 update readme 2026-05-29 14:04:05 +08:00
rookit e59144321c fix elk timeout error 2026-05-28 16:05:19 +08:00
rookit f7ded15c8b tmp 2026-05-28 15:56:04 +08:00
rookit 15f8a34cce tmp 2026-05-28 09:20:46 +08:00
rookit 5331411793 tmp 2026-05-28 09:18:58 +08:00
rookit 1d4afb5545 tmp 2026-05-28 09:17:46 +08:00
rookit 7defbe09c7 update PLUGINS 2026-05-27 18:25:35 +08:00
rookit 74fddf11ed update PLUGINS 2026-05-27 18:22:40 +08:00
rootkitandGitHub 23c3701ae2 Merge pull request #11 from FunnyWolf/dev
update version 0.4.0
2026-05-27 13:58:19 +08:00
rookit 56b385b01c update PLUGINS 2026-05-27 10:11:14 +08:00
rookit 1f35fbff5b update PLUGINS 2026-05-26 15:47:12 +08:00
rookit 6dbe97c2c4 update PLUGINS 2026-05-26 15:45:30 +08:00
rookit 9e9d0418ed update PLUGINS 2026-05-26 14:52:06 +08:00
rookit eee82809e9 update PLUGINS 2026-05-26 13:25:17 +08:00
rookit 5673774b11 tmp 2026-05-25 15:47:31 +08:00
rookit 0c0328abf1 tmp 2026-05-25 15:25:02 +08:00
rookit c80d54fb45 tmp 2026-05-25 14:49:11 +08:00
funnywolf b9125cf415 remove unused package 2026-05-24 18:06:03 +08:00
funnywolf 01241b1d67 change ELK to use api-key 2026-05-24 17:01:25 +08:00
rookit 3491d5ff1c upload arch.jpg 2026-05-21 17:11:47 +08:00
rookit 5576bdc41b rename 2026-05-20 16:12:30 +08:00
rookit 0fb5220dcf remove ticket, replace by enrichment 2026-05-20 09:31:05 +08:00
rookit eedef99f4d add uid in enrichment 2026-05-20 09:06:36 +08:00
rookit b0639b2ce6 tmp 2026-05-19 16:34:22 +08:00
rookit 6783d0243d update ti interface 2026-05-19 11:27:26 +08:00
rookit 7435627a84 update playbook api 2026-05-19 09:48:50 +08:00
rookit 53007ccc63 delete unused code 2026-05-18 16:39:45 +08:00
rookit 201f92e2b2 refactor: simplify MCP tools — merge attach into create, clean up agents
- Merge attach_enrichment_to_target into create_enrichment (target_id required)
- Merge attach_ticket_to_case into create_ticket (case_id required)
- Merge get_case_discussions into list_cases (include_discussions param)
- Remove comment_ai/summary_ai from update_case, add comment/summary
- Remove unused agent files (agent_cmdb, agent_report, simpler/agents)
- Update all skill files to match new MCP interfaces
2026-05-18 16:24:33 +08:00
rookit f94b92e7d7 update case interface 2026-05-18 15:59:35 +08:00
rookit 103f2de9b8 rename 2026-05-18 14:31:52 +08:00
rookit 20b2701fd3 add case to knowledge function 2026-05-18 14:29:28 +08:00
rookit b45cfb88db tmp 2026-05-18 11:00:35 +08:00
rookit 64346f05b9 tmp 2026-05-18 10:25:12 +08:00
rookit 3f9201905f tmp 2026-05-18 09:28:39 +08:00
funnywolfandClaude Opus 4.7 548d21dcc6 feat: filter discussions to return only valuable fields, disable system proxy
- Add WorksheetRow._filter_discussions to extract meaningful fields (message, created_by, reply_to_author, mentions, attachments)
- Clean [aid] tags in message and replace with @fullname
- Set HTTP_SESSION.trust_env = False to prevent using system proxies

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
2026-05-17 22:47:13 +08:00
funnywolf 83cd4cdc74 tmp 2026-05-17 22:23:19 +08:00
funnywolf 23ed0cfd3a tmp 2026-05-17 22:17:37 +08:00
funnywolf 589806ddb6 tmp 2026-05-17 21:40:21 +08:00
rookit d00ccb0ffc tmp add statusline-command.sh 2026-05-15 16:41:02 +08:00