Sebastion and GitHub
6ef92fd1ec
fix(siem): prevent Splunk index injection
...
Validate Splunk index names before interpolating them into SPL queries and return 400 for invalid SIEM requests.
2026-07-22 16:31:45 +08:00
funnywolf and Copilot
7e95846db7
Fix code scanning exception exposure alerts
...
Sanitize API-facing exception details and replace OpenCTI pattern regex with linear parsing.
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com >
2026-07-11 19:44:15 +08:00
funnywolf and Copilot
44af8c15e3
Add operation timeouts for external requests
...
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com >
2026-07-06 16:11:01 +08:00
funnywolf and Copilot
4870f5c1c4
Add OpenCTI threat intelligence provider
...
Add database-backed OpenCTI settings, provider integration, targeted tests, and threat intelligence settings tabs. Fix AlienVault OTX test authentication to validate API keys against an authenticated endpoint.
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com >
2026-07-04 21:06:04 +08:00
funnywolf and Copilot
da94d2f194
Add custom definitions console
...
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com >
2026-06-28 15:09:10 +08:00
funnywolf
b6b4cbf017
0.4.0 I always have a choice
...
You shape nothing until you hold everything.
2026-06-27 19:08:48 +08:00
