8248c60da8
feat(feed): add NVD CVE feed connector (recent CVEs, NVD 2.0 API)
2026-07-13 12:12:34 +02:00
4206b44e78
feat(feed): add CISA KEV feed connector (known exploited vulnerabilities)
2026-07-13 12:12:34 +02:00
9cffefbb36
feat(feed): add GCP IP ranges feed connector (allowlist / known infra)
2026-07-13 12:08:49 +02:00
f7791402a3
feat(feed): add Cloudflare IPs feed connector (allowlist / known infra)
2026-07-13 12:08:49 +02:00
c42a9cef03
feat(feed): add AWS IP ranges feed connector (allowlist / known infra)
2026-07-13 12:08:48 +02:00
f6ff018f09
feat(feed): add OpenPhish feed connector (community phishing URLs)
2026-07-12 23:02:11 +02:00
c091800434
feat(feed): add Emerging Threats feed connector (ET Open reputation lists)
2026-07-12 23:02:11 +02:00
929b4166d6
feat(feed): add generic JSON feed connector (configurable field mapping)
2026-07-12 23:02:10 +02:00
381b42b6c7
feat(feed): add CINS Army feed connector (CI Army bad-guys list)
2026-07-12 22:59:20 +02:00
5715f21603
feat(feed): add Blocklist.de feed connector (fail2ban attacker lists)
2026-07-12 22:59:19 +02:00
7543a95711
feat(feed): add DShield block list feed connector (SANS ISC)
2026-07-12 22:59:18 +02:00
7187e7b607
feat(feed): add SSL Blacklist feed connector (abuse.ch C2 IP/fingerprint lists)
2026-07-12 22:56:36 +02:00
5bb465eb18
feat(feed): add ThreatFox feed connector (abuse.ch IOC export)
2026-07-12 22:56:36 +02:00
a4dcd00cc7
feat(feed): add URLhaus feed connector (abuse.ch malware URL feed)
2026-07-12 22:56:35 +02:00
cf923301a7
feat(feed): add Spamhaus DROP feed connector (DROP/DROPv6/ASN-DROP)
2026-07-12 22:49:30 +02:00
f833bfe3a5
feat(feed): add Tor exit nodes feed connector
2026-07-12 22:49:29 +02:00
d6129f5d79
feat(feed): add Feodo Tracker feed connector (abuse.ch C2 IP blocklist)
2026-07-12 22:49:28 +02:00
c779c38dab
feat(feed-taxii2): new generic TAXII 2.1 / STIX feed connector
...
Pulls STIX 2.x indicators from any TAXII 2.1 server, parses the STIX patterns
into normalized IOCs {value,type} for TIM import. list-collections + fetch.
Basic/bearer/none auth, stdlib-only. py_compile clean.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-07-12 22:43:17 +02:00
4f94b59e17
feat(feed-plaintext): new generic plain-text threat-intel feed connector
...
Fetches a line-per-indicator blocklist URL and emits normalized IOCs {value,type}
for TIM import. Comment-char/field-index/type config, auto type-detection.
Optional bearer auth, stdlib-only. py_compile clean.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-07-12 22:43:17 +02:00
f09d00114f
feat(feed-csv): new generic CSV threat-intel feed connector
...
Fetches a delimited feed URL and emits normalized IOCs {value,type} for TIM
import (works with the /indicators/feed-extract -> /indicators/bulk flow).
Column/delimiter/comment/type config, auto type-detection. New 'feed' category.
Optional bearer auth, stdlib-only. py_compile clean.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-07-12 22:43:16 +02:00
a4241a5a5d
feat(cisco-ise): new Cisco ISE NAC integration
...
ISE ERS + ANC API, 6 commands: list/get endpoints, apply/clear ANC policy
(quarantine containment), list ANC policies. HTTP Basic auth, stdlib-only.
py_compile clean.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-07-12 21:59:07 +02:00
232e310f77
feat(automox): new Automox patch-management integration
...
Automox API, 5 commands: list/get devices, list policies, run device command.
API-key auth, stdlib-only. py_compile clean.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-07-12 21:59:06 +02:00
b231b648bc
feat(domaintools): new DomainTools DNS-intel integration
...
DomainTools API, 5 commands: whois, whois history, reputation, reverse IP.
API-key auth, stdlib-only. py_compile clean.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-07-12 21:59:05 +02:00
087b9abd19
feat(thinkst-canary): new Thinkst Canary deception integration
...
Canary Console API v1, 5 commands: list/get incidents, acknowledge incident,
list devices. Auth-token auth, stdlib-only. py_compile clean.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-07-12 21:53:59 +02:00
e91febd319
feat(intune): new Microsoft Intune MDM integration
...
Microsoft Graph device management, 6 commands: list/get managed devices,
retire/wipe/remote-lock device (containment). OAuth2 client-credentials auth,
stdlib-only. py_compile clean.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-07-12 21:53:59 +02:00
374e4184ff
feat(meraki): new Cisco Meraki network integration
...
Meraki Dashboard API v1, 5 commands: list organizations/networks/devices, list
network clients. API-key auth, stdlib-only. py_compile clean.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-07-12 21:53:58 +02:00
82353947d6
feat(mailinblack): new Mailinblack email-security integration (French vendor)
...
Mailinblack API, 5 commands: list quarantine, release message, block/allow
sender. Bearer auth, stdlib-only. py_compile clean. NOTE: API paths best-effort
— verify against vendor docs before production.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-07-12 21:37:32 +02:00
ac47315b30
feat(cybelangel): new CybelAngel attack-surface integration (French vendor)
...
CybelAngel platform API, 4 commands: list/get reports, update report status.
OAuth2 client-credentials auth, stdlib-only. py_compile clean.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-07-12 21:37:31 +02:00
631292fcc7
feat(scaleway): new Scaleway cloud integration (French vendor)
...
Scaleway Cloud API, 5 commands: list/get instances, list security groups, list
projects. Secret-key (X-Auth-Token) auth, stdlib-only. py_compile clean.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-07-12 21:37:31 +02:00
d8bb41b4c5
feat(vade): new Vade email-security integration (French vendor)
...
Vade API, 4 commands: search messages, get message, remediate message. Bearer
auth, stdlib-only. py_compile clean. NOTE: API paths best-effort — verify
against vendor docs before production.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-07-12 21:13:24 +02:00
855f1b132c
feat(ovhcloud): new OVHcloud integration (French vendor)
...
OVH API v1, 5 commands: get account, list cloud projects, list/get dedicated
servers. SHA-1 signed application-key auth, stdlib-only. py_compile clean.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-07-12 21:13:23 +02:00
74bf6126fb
feat(efficientip): new EfficientIP SOLIDserver DNS/DDI integration (French vendor)
...
SOLIDserver REST API, 5 commands: add RPZ record (DNS block/sinkhole), list DNS
zones, search IP, list networks. HTTP Basic auth, stdlib-only. py_compile clean.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-07-12 21:13:22 +02:00
dd574e550b
feat(gatewatcher): new Gatewatcher AionIQ NDR integration (French vendor)
...
Gatewatcher AionIQ, 4 commands: list/get alerts, search alerts. API-KEY auth,
stdlib-only. py_compile clean. NOTE: API paths best-effort — verify against
vendor docs before production.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-07-12 16:12:38 +02:00
8a7e5a33a2
feat(tehtris): new TEHTRIS XDR integration (French vendor)
...
TEHTRIS XDR, 5 commands: list/get alerts, list agents, isolate agent
(containment). Bearer auth, stdlib-only. py_compile clean. NOTE: API paths
best-effort — verify against vendor docs before production.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-07-12 16:12:37 +02:00
3c348b7601
feat(glimps): new GLIMPS Detect malware-analysis integration (French vendor)
...
GDetect API lite v2, 4 commands: submit file (multipart), get result by UUID,
search by SHA-256. Token auth, stdlib-only. py_compile clean.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-07-12 16:12:37 +02:00
2475c4b56e
feat(stormshield): new Stormshield SNS firewall integration (French vendor)
...
Stormshield SNS API, 5 commands: add/remove block host-group member (containment),
list hosts, monitor query. Session (login) auth, stdlib-only. py_compile clean.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-07-12 16:07:38 +02:00
3be14f2f00
feat(wallix-bastion): new WALLIX Bastion PAM integration (French vendor)
...
WALLIX Bastion REST API, 6 commands: list devices/accounts/authorizations,
list/get sessions. X-Auth-User/X-Auth-Key auth, stdlib-only. py_compile clean.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-07-12 16:07:38 +02:00
3a4d06441c
feat(crowdsec): new CrowdSec CTI integration (French vendor)
...
CrowdSec CTI API v2, 4 commands: IP reputation, multi-IP search, fire list.
API-key auth, stdlib-only. py_compile clean.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-07-12 16:07:37 +02:00
ce319c2fea
feat(intel471): new Intel 471 threat-intel integration
...
Intel 471 Titan API v1, 5 commands: search reports/indicators, get report,
list CVE reports. HTTP Basic auth, stdlib-only.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-07-12 15:49:17 +02:00
8f3d9607df
feat(threatq): new ThreatQ threat-intel integration
...
ThreatQ REST API, 5 commands: search/get indicators, create indicator, list
events. OAuth2 password-grant auth, stdlib-only.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-07-12 15:49:17 +02:00
a2f2b8efa0
feat(eclecticiq): new EclecticIQ threat-intel integration
...
EclecticIQ Intelligence Center API v2, 4 commands: search entities/observables,
get entity. Bearer-token auth, stdlib-only.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-07-12 15:49:16 +02:00
3c282e8e53
feat(signalsciences): new Signal Sciences (Fastly NGWAF) integration
...
Signal Sciences API v0, 5 commands: list sites, get suspicious IPs, list events,
add IP to list (block). API-token auth, stdlib-only.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-07-12 15:44:30 +02:00
771c90ef0d
feat(imperva): new Imperva Cloud WAF integration
...
Cloud Application Security API v1, 5 commands: list sites, get site status,
block/whitelist IPs (site ACL). API-ID/key auth, stdlib-only.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-07-12 15:44:29 +02:00
9fb5b65e4a
feat(f5-bigip): new F5 BIG-IP integration
...
iControl REST, 6 commands: list virtual servers/pools, get pool members,
disable pool member, add data-group record (block). HTTP Basic auth, stdlib-only.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-07-12 15:44:28 +02:00
16fe51ee99
feat(sailpoint): new SailPoint IdentityNow IGA integration
...
IdentityNow API v3, 6 commands: list/get identities, list accounts, disable/
enable account (containment). OAuth2 client-credentials auth, stdlib-only.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-07-12 15:39:19 +02:00
5089e4466d
feat(beyondtrust-password-safe): new BeyondTrust Password Safe PAM integration
...
Password Safe REST API v3, 5 commands: list managed accounts/systems, create
release request, get credential. PS-Auth session auth, stdlib-only.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-07-12 15:39:18 +02:00
8fa1ade945
feat(delinea-secret-server): new Delinea Secret Server PAM integration
...
Secret Server REST API v1, 5 commands: search secrets, get secret, get secret
field, list folders. OAuth2 password-grant auth, stdlib-only.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-07-12 15:39:18 +02:00
54b077bfc9
feat(confluence): new Confluence runbook/knowledge integration
...
Confluence REST API, 6 commands: CQL search, get page, create/update page,
list spaces. Basic (email + API token) auth, stdlib-only.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-07-12 15:23:56 +02:00
6d38896892
feat(dropbox): new Dropbox file/evidence integration
...
Dropbox API v2, 5 commands: search, get metadata, list folder, create shared
link. Bearer-token auth, stdlib-only.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-07-12 15:23:56 +02:00
223dfd34e3
feat(box): new Box file/evidence integration
...
Box Content API v2, 6 commands: search, get file/folder info, list folder
items, create shared link. Bearer-token auth, stdlib-only.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-07-12 15:23:56 +02:00
Guillaume BOURGEOIS