f3nris

0 Followers · 0 Following

• Joined on 2026-06-21

Repositories

1

Projects Packages Public Activity Starred Repositories

f3nris pushed to main at f3nris/riposte-marketplace 2026-08-18 21:53:35 +00:00

bf273b959a feat(cortex-xdr): watermark incidents on modification_time, not creation

ba68d19e51 refactor(cortex-xdr): name the full fetch get-incidents-full (v1.3.1)

Compare 2 commits »

f3nris pushed to main at f3nris/riposte-marketplace 2026-08-18 21:42:33 +00:00

a6e1245c79 feat(cortex-xdr): fetch incidents with their alerts, not a 21-field summary

d06f8ea413 fix(cortex-xdr): the alerts endpoint never answered — wrong request dialect

17318d4225 feat(cortex-xdr): ingest alerts, not only incidents (v1.3.0)

Compare 3 commits »

f3nris pushed to main at f3nris/riposte-marketplace 2026-08-17 07:34:58 +00:00

c22982c8af chore: retire the Riposte Sextant integration

f3nris pushed to main at f3nris/riposte-marketplace 2026-08-14 21:49:09 +00:00

1d475a6cf5 fix(sentinelone): count-agents can be asked about the whole fleet again

f3nris pushed to main at f3nris/riposte-marketplace 2026-08-14 21:41:46 +00:00

93309ac74d feat(sentinelone): count-agents can be scoped to an account

f3nris pushed to main at f3nris/riposte-marketplace 2026-08-14 21:31:20 +00:00

a5095d3f0f feat(sentinelone): count-agents can tell the active fleet from the dormant one

f3nris pushed to main at f3nris/riposte-marketplace 2026-08-14 20:39:51 +00:00

cebb3af796 feat(sentinelone): count-agents can ask about versions, state and hardware

f3nris pushed to main at f3nris/riposte-marketplace 2026-08-13 12:41:15 +00:00

ba6bcd19f4 fix(cortex-xdr): say what went wrong when the API answers something other than JSON (v1.2.1)

f3nris pushed to main at f3nris/riposte-marketplace 2026-08-11 07:04:32 +00:00

aabe1a6837 feat(riposte-sextant): list the clients, and the identifier to deposit under (v1.1.0)

f3nris pushed to main at f3nris/riposte-marketplace 2026-08-11 06:59:20 +00:00

50358ef8a1 feat(riposte-sextant): push agent readings into the SOC steering file

f3nris pushed to main at f3nris/riposte-marketplace 2026-08-06 16:15:58 +00:00

82f22fdbb3 feat(harfanglab): split image_name into the process path and the threat name (v1.4.1)

f3nris pushed to main at f3nris/riposte-marketplace 2026-08-06 15:37:00 +00:00

f7c5e99cc5 feat(harfanglab): map the fields the alert and threat payloads actually carry (v1.4.0)

f3nris pushed to main at f3nris/riposte-marketplace 2026-08-05 19:04:02 +00:00

6343a0c952 feat(ipinfo): support the Lite API for free/Lite plan tokens (v1.1.0)

f3nris pushed to main at f3nris/riposte-marketplace 2026-08-04 13:56:55 +00:00

7efc873867 feat(sentinelone): scope threat and alert fetches to given accounts (v1.4.0)

f3nris pushed to main at f3nris/riposte-marketplace 2026-07-21 21:20:26 +00:00

144089a099 fix(harfanglab): flag get_alerts as ingestion-ready (v1.3.1)

f3nris pushed to main at f3nris/riposte-marketplace 2026-07-21 20:54:24 +00:00

a4b5b44157 fix(harfanglab): null guards and stable attacks array in get_threats mapper

4ea3af6c1d fix(harfanglab): rework get_threats OCSF mapper from live threat sample

952dc7efda feat(harfanglab): v1.3.0 — response & triage expansion (27 commands + alert mappers)

cba746a9f9 feat(harfanglab): exhaustive alert OCSF mappers (get_alerts + upgraded get_security_events)

5d6f823189 feat(harfanglab): threat triage commands (status, level, comment, note, history)

Compare 12 commits »

f3nris pushed to main at f3nris/riposte-marketplace 2026-07-15 20:38:37 +00:00

f6b8c84285 feat(edr): OCSF mappers + ingestion for 6 EDR integrations

f3nris pushed to main at f3nris/riposte-marketplace 2026-07-15 17:21:05 +00:00

5ee7352652 fix(ransomware-live): keyless — drop optional API key, no auth required

f3nris pushed to main at f3nris/riposte-marketplace 2026-07-15 16:59:16 +00:00

534748f16a feat(ransomware-live): add Ransomware.live OSINT integration

f3nris pushed to main at f3nris/riposte-marketplace 2026-07-13 10:15:45 +00:00

a2c9f998c3 feat(feed): add Botvrij.eu OSINT feed connector (IOC lists by type)

ae7c494658 feat(feed): add Microsoft 365 endpoints feed connector (allowlist / known infra)

40252dadcb feat(feed): add generic RSS/Atom IOC feed connector (URL/IP/hash extraction, defang-aware)

Compare 3 commits »