f3nris/riposte-marketplace
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Commit Graph

  • 9fbe592421 feat(crowdstrike): version bounds and relative dates on device_count (1.7.0) main f3nris 2026-10-19 20:09:31 +00:00
  • 6d36b4e958 feat(harfanglab): version bounds on endpoint_count (1.9.0) f3nris 2026-10-19 19:31:41 +00:00
  • 90c6c80843 feat(harfanglab): instance-level tenant scope (1.8.0) f3nris 2026-10-19 19:23:40 +00:00
  • c67343b7cf feat(sentinelone): instance-level account scope (1.20.0) f3nris 2026-10-19 19:08:10 +00:00
  • 2bc7601177 fix(mail-templates): callout_title points to the badge in the mail language (1.0.4) f3nris 2026-10-19 09:32:17 +00:00
  • 2a74bbc436 feat(mail-templates): markdown inputs in a multi-line field (1.0.3) f3nris 2026-10-19 09:17:27 +00:00
  • 983414f278 fix(mail-templates): read \n as a line break in one-line inputs (1.0.2) f3nris 2026-10-19 09:10:52 +00:00
  • 046810c1f6 fix(mail-templates): run under Riposte's exec() runner (1.0.1) f3nris 2026-10-19 08:49:46 +00:00
  • dcf257d887 feat(mail-templates): render ACKnowledge SOC emails from markdown (1.0.0) f3nris 2026-10-19 08:40:32 +00:00
  • 5085d96628 feat(webhook-relay): map Rapid7 InsightIDR basic rule alerts (1.1.0) f3nris 2026-10-19 07:56:45 +00:00
  • c358814fe7 feat(microsoft-exchange-mail): send mail from Exchange Online over Graph (1.0.0) f3nris 2026-10-19 03:29:32 +00:00
  • 815db080f5 feat(webhook-relay): map relayed messages into OCSF, not only custom fields (1.0.1) f3nris 2026-10-16 15:48:27 +00:00
  • 6b76270cc6 feat(webhook-relay): read the alerts vendors push to riposte-relay (1.0.0) f3nris 2026-10-16 11:23:03 +00:00
  • ff461464fd fix(crowdstrike): resolve_detection fails when Falcon changed nothing (1.6.3) f3nris 2026-10-15 12:08:05 +00:00
  • 88407dd1b4 feat(sekoia-xdr): list_alerts attaches each alert's events (1.3.0) f3nris 2026-10-15 10:10:56 +00:00
  • 8eed7ed9fb fix(crowdstrike): NG-SIEM detections are filed under thirdparty (1.6.2) f3nris 2026-10-15 08:32:36 +00:00
  • f34c87f0c8 fix(crowdstrike): say what an empty alert search matched (1.6.1) f3nris 2026-10-15 08:09:39 +00:00
  • 0444e120fa feat(crowdstrike): search Next-Gen SIEM detections (1.6.0) f3nris 2026-10-15 07:53:05 +00:00
  • 585c06385c fix(harfanglab): retry transient API errors (1.7.3) f3nris 2026-10-15 07:28:03 +00:00
  • 725e6921f4 feat(jira): watch_issues reports what changed on a set of tickets (1.4.0) f3nris 2026-10-13 15:59:42 +00:00
  • e973ccb673 feat(cortex-xdr): endpoint_count counts agents below a target build (1.10.0) f3nris 2026-10-13 08:49:29 +00:00
  • 62157e5dee feat(cortex-xdr): endpoint_count counts by operational status (1.10.0) f3nris 2026-10-13 08:43:18 +00:00
  • 91855fce4f fix(sentinelone): count the host's other alerts from what was read (1.19.1) Claude 2026-10-12 11:37:19 +00:00
  • 6f51520fb5 feat(sentinelone): investigate_alert, one call for an agent (1.19.0) Claude 2026-10-12 11:27:36 +00:00
  • 80de5399a6 rapid7-insightidr 1.14.9: a user_authentications answer that fits f3nris 2026-10-12 08:14:10 +00:00
  • fb560cc937 rapid7-insightidr 1.14.8: user_authentications counts the user's own logons f3nris 2026-10-12 07:53:57 +00:00
  • 3bfcebdf21 rapid7-insightidr 1.14.7: user_authentications, one call for a UBA alert f3nris 2026-10-12 07:45:31 +00:00
  • ae1effafcd rapid7-insightidr 1.14.6: narrow a log result by field, no query syntax f3nris 2026-10-12 07:27:36 +00:00
  • 889cf660f6 rapid7-insightidr 1.14.5: query_log_set can summarize; Static always does f3nris 2026-10-12 07:18:09 +00:00
  • 847f31ce17 zscaler 1.1.2: withdraw the Relay operator f3nris 2026-10-12 07:12:54 +00:00
  • 3e39f17bfe rapid7-insightidr 1.14.4: keep UBA alerts in the full investigation feed f3nris 2026-10-12 07:02:12 +00:00
  • 9605e1f0dc feat(agents): operator sheets for 33 integrations (lot 4) f3nris 2026-10-11 23:00:15 +00:00
  • 2245d5500e rapid7-insightidr 1.14.3: the log window is computed from the alert's time f3nris 2026-10-11 22:38:42 +00:00
  • 4bd468e671 rapid7-insightidr 1.14.2: query a log set by name; Static widens UBA windows f3nris 2026-10-11 22:32:16 +00:00
  • c3b15d1faf rapid7-insightidr 1.14.1: mark UBA alerts in the data, give Static a budget f3nris 2026-10-11 22:20:58 +00:00
  • c5da537434 rapid7-insightidr 1.14.0: ship Static, the InsightIDR operator agent f3nris 2026-10-11 21:07:52 +00:00
  • 4a339fda24 rapid7-insightidr 1.13.2: trim pasted log and log set IDs, explain the 404 f3nris 2026-10-11 13:59:28 +00:00
  • b9e796e927 rapid7-insightidr 1.13.1: accept an InsightIDR Essential key in test_connection f3nris 2026-10-11 13:13:22 +00:00
  • 856dd2321d feat(crtsh): Cert Spotter fallback and a 60 s time budget (1.1.0) f3nris 2026-10-10 21:12:15 +00:00
  • 94142f4739 docs(ioc-sources): suggest summary lines for Riposte context enrichment rules f3nris 2026-10-09 22:53:04 +00:00
  • d2742ec6fb feat: CIRCL hashlookup, RDAP and crt.sh — free IOC lookups, no API key f3nris 2026-10-09 22:33:42 +00:00
  • 5cf870309f feat(harfanglab): describe an incident with the rule's message (1.7.1) f3nris 2026-10-07 19:11:35 +00:00
  • 45df291eeb fix(harfanglab): drop the 50 KB filters catalogue from list outputs (1.7.1) f3nris 2026-10-07 12:42:32 +00:00
  • db9a45c9bc docs(mappers): MTTD is not retired, only re-anchored f3nris 2026-10-07 09:58:20 +00:00
  • ece2c41340 docs(mappers): time no longer dates detection f3nris 2026-10-07 09:56:50 +00:00
  • ea04ea586c fix(sekoia-xdr): mapper reviewed on a real alert (1.2.0) f3nris 2026-10-07 09:13:03 +00:00
  • d831d0973a feat(harfanglab): fetch a threat's security events (1.7.0) f3nris 2026-10-07 07:35:31 +00:00
  • 91f6b8158b fix(cortex-xdr): give a full incident its own title (1.9.0) f3nris 2026-10-05 14:25:22 +00:00
  • 0f5f4a900e feat(crowdstrike): set a detection's verdict (1.5.0) f3nris 2026-10-02 14:25:22 +00:00
  • 820bab8e5c feat(jira): pick the project, issue type and priority from the site (1.3.0) f3nris 2026-10-02 10:16:41 +00:00
  • 41aa6723c5 feat(cortex-xdr): list the incident statuses and severities as enums (1.8.0) f3nris 2026-10-02 07:50:12 +00:00
  • 89ffbc3c7c feat(sentinelone): list the UAM alert statuses as an enum (1.18.0) f3nris 2026-10-01 20:26:45 +00:00
  • 7750744abb feat(sentinelone): list the UAM analyst verdicts as an enum (1.18.0) f3nris 2026-10-01 20:25:24 +00:00
  • 4554354e06 fix(sentinelone): accept a skipped UAM update when the alert is already set (1.17.3) f3nris 2026-09-28 14:48:09 +00:00
  • 71f8cd970e fix(sentinelone): fail a UAM update the console did not apply (1.17.2) f3nris 2026-09-28 14:43:53 +00:00
  • 232fa2f0a6 fix(sentinelone): type the assignee mutation as the console does (1.17.1) f3nris 2026-09-28 14:37:00 +00:00
  • 18ae4a24ff fix(sentinelone): map the unified alert as the console describes it (1.17.0) f3nris 2026-09-23 08:28:02 +00:00
  • a6a52f7356 feat(crowdstrike): count devices by filter without listing them (1.4.0) f3nris 2026-09-21 12:41:57 +00:00
  • beefe047a7 feat(cortex-xdr): count endpoints by filter without listing them (1.7.0) f3nris 2026-09-21 12:37:34 +00:00
  • 505c518bf8 feat(harfanglab): count agents by filter without listing them (1.6.0) f3nris 2026-09-21 12:29:53 +00:00
  • ed56523b07 fix(ovhcloud): treat the billing-account list as advice, never as a verdict (1.2.6) f3nris 2026-09-19 19:29:09 +00:00
  • 42032e576e fix(ovhcloud): use the API endpoint as configured, for both schemes (1.2.5) f3nris 2026-09-19 19:26:02 +00:00
  • 35f287837b fix(ovhcloud): stop a diagnostic step from failing the test (1.2.4) f3nris 2026-09-19 19:25:00 +00:00
  • 3ca2d6ded2 fix(ovhcloud): make the test say where it stopped (1.2.3) f3nris 2026-09-19 19:21:54 +00:00
  • d682d66f04 fix(ovhcloud): find the call queue under either product (1.2.2) f3nris 2026-09-19 19:15:57 +00:00
  • aacfa135aa fix(ovhcloud): test what the instance is for, not the account (1.2.1) f3nris 2026-09-19 18:52:04 +00:00
  • 6e03b17afb feat(ovhcloud): accept a service account (OAuth2) as well as application keys (1.2.0) f3nris 2026-09-19 18:31:31 +00:00
  • 864300d7c5 feat(ovhcloud): hold Riposte's on-call ladder in a VoIP call queue (1.1.0) f3nris 2026-09-19 18:00:33 +00:00
  • 11089e9e80 rapid7-insightidr 1.13.0: comment an investigation and read the thread back f3nris 2026-09-18 13:22:58 +00:00
  • 26d6273f60 feat(webhook): outbound webhooks to any third-party solution (v1.0.0) f3nris 2026-09-18 08:25:34 +00:00
  • dd2b4629a1 sentinelone: count_agents takes agentVersion__gte and __lt too f3nris 2026-09-17 14:45:22 +00:00
  • 741db61543 sentinelone 1.16.0: count_agents takes agentVersion__lte f3nris 2026-09-17 14:43:00 +00:00
  • 086150b200 rapid7-insightidr 1.12.0: ingest LEQL query results as alerts f3nris 2026-09-16 15:06:02 +00:00
  • a32992d781 docs: document bundled mappers, jsonata: expressions and the reshape-in-the-mapper convention f3nris 2026-09-11 21:34:25 +00:00
  • d3c85cf332 rapid7-insightidr 1.11.1: strip whitespace from comma-separated filter params f3nris 2026-09-11 18:28:15 +00:00
  • ab63ead00e docs(manifest): document the per-command category f3nris 2026-09-10 14:26:09 +00:00
  • a26e71f29e fix(sentinelone): make the process tree draw itself (v1.15.0) f3nris 2026-09-09 12:42:28 +00:00
  • da2fcbba6c fix(sentinelone): map the unified alert as a real one is shaped (v1.14.0) f3nris 2026-09-09 12:38:21 +00:00
  • 31e596d770 feat(sentinelone): with_details on the unified alerts fetch (v1.13.0) f3nris 2026-09-09 12:32:49 +00:00
  • fe564cec2c feat(sentinelone): account_ids filter on get_unified_alerts (v1.12.0) f3nris 2026-09-09 12:03:53 +00:00
  • 4cd1cda7cb feat(sentinelone): absorb the SentinelOne SDL package (v1.11.0) f3nris 2026-09-09 11:05:54 +00:00
  • 9081bc66fa feat(rapid7-insightidr): evidence rows for the table field (v1.11.0) f3nris 2026-09-09 11:57:10 +02:00
  • b26257aaeb feat(rapid7-insightidr): render the detection as Markdown, and fix four gaps (v1.10.0) f3nris 2026-09-08 18:04:14 +02:00
  • e19530d3f3 fix(rapid7-insightidr): read the evidence in both of its shapes (v1.9.2) f3nris 2026-09-08 16:19:08 +02:00
  • 2d6e097742 fix(rapid7-insightidr): explain the process-tree 404 (v1.9.1) f3nris 2026-09-08 15:56:23 +02:00
  • 1888648930 feat(rapid7-insightidr): feed the layout Process Tree block (v1.9.0) f3nris 2026-09-08 15:53:22 +02:00
  • 995a39ea66 feat(rapid7-insightidr): fetch and parse the evidence behind each alert (v1.8.0) f3nris 2026-09-08 15:46:17 +02:00
  • 45e9cbd269 feat: declare a risk tier on every command in the catalog f3nris 2026-09-08 12:55:20 +02:00
  • c7569fd4d0 fix(rapid7-insightidr): map both ends of a connection (v1.7.0) f3nris 2026-09-08 10:21:27 +02:00
  • eeebbfed3a fix(rapid7-insightidr): a partial region result is not a quiet period (v1.6.0) f3nris 2026-09-08 09:07:52 +02:00
  • 306450a4b6 fix(rapid7-insightidr): rule_keys_of_interest is an open vocabulary (v1.5.0) f3nris 2026-09-08 00:35:27 +02:00
  • 69e3a3e81c fix(rapid7-insightidr): do not send a bare UUID to /alerts/ops/rrns (v1.4.1) f3nris 2026-09-07 23:52:51 +02:00
  • 841ae1199f feat(rapid7-insightidr): the investigation, with its alerts inlined (v1.4.0) f3nris 2026-09-07 23:39:45 +02:00
  • 220fa75b99 feat(rapid7-insightidr): ingest only the alerts that belong to an investigation (v1.3.0) f3nris 2026-09-07 23:34:57 +02:00
  • 7e231c7c78 fix(rapid7-insightidr): name the input when terms_json will not parse (v1.2.1) f3nris 2026-09-07 23:31:27 +02:00
  • b6903d4590 feat(rapid7-insightidr): map alerts to OCSF, with real observables (v1.2.0) f3nris 2026-09-07 23:07:53 +02:00
  • 157af87c17 fix(rapid7-insightidr): make list_alert_fields callable with no arguments (v1.1.1) f3nris 2026-09-07 22:37:48 +02:00
  • da44d41555 feat(rapid7-insightidr): add the Alert Triage API commands (v1.1.0) f3nris 2026-09-07 22:31:12 +02:00
  • df27876a8f feat(sentinelone): declare a risk tier on every command (v1.9.0) f3nris 2026-09-07 16:23:04 +02:00
  • fd4b1b18f7 feat(sentinelone): fetch the unified (UAM) alerts (v1.8.0) f3nris 2026-09-07 16:16:46 +02:00