larssand
|
a8c00c35b2
|
add test to see if fail for streams and evetns
|
2026-07-02 10:51:56 +02:00 |
|
larssand
|
7c0b482a22
|
improve find fileds for default profiles
|
2026-07-02 09:51:25 +02:00 |
|
larssand
|
53437a3952
|
uopdate doc
|
2026-07-01 09:15:14 +02:00 |
|
larssand
|
a3cfab1f5a
|
fix advisor and drop down refresh
|
2026-07-01 08:56:08 +02:00 |
|
larssand
|
fcfbe04a58
|
fix refresh of mcp con
|
2026-07-01 00:17:54 +02:00 |
|
larssand
|
24561ac984
|
mcp connect issue cert
|
2026-06-30 21:37:17 +02:00 |
|
larssand
|
6a63de0e37
|
add mcp fix
|
2026-06-30 21:30:30 +02:00 |
|
larssand
|
baa3bb95e8
|
add find deluta fields in diffrent streams add in profile
|
2026-06-30 21:27:01 +02:00 |
|
larssand
|
81c0ba34a6
|
fix recon mcp
|
2026-06-30 21:20:59 +02:00 |
|
larssand
|
5a9588fe31
|
Fixed the bad classification issue.
|
2026-06-30 16:49:11 +02:00 |
|
larssand
|
78f11af302
|
Added the Profile Discovery report.
|
2026-06-30 16:15:54 +02:00 |
|
larssand
|
4a441bf443
|
MCP sample fetch now asks for common Winlogbeat/ECS fields before
|
2026-06-30 15:10:47 +02:00 |
|
larssand
|
f9137bfa6c
|
fix dash
|
2026-06-30 12:49:33 +02:00 |
|
larssand
|
c76e260516
|
mcp issues
|
2026-06-30 12:47:31 +02:00 |
|
larssand
|
86065eca59
|
fix mcp
|
2026-06-30 12:46:09 +02:00 |
|
larssand
|
90076aa95a
|
cache issues
|
2026-06-30 12:36:11 +02:00 |
|
larssand
|
de4e77d524
|
fix cache and restart
|
2026-06-30 12:33:44 +02:00 |
|
larssand
|
f95a861eb6
|
remove the group in raw
|
2026-06-30 12:30:50 +02:00 |
|
larssand
|
4f968eeed5
|
fix group agg
|
2026-06-30 12:27:16 +02:00 |
|
larssand
|
e144cd8258
|
add more stats and fix
|
2026-06-30 12:23:23 +02:00 |
|
larssand
|
4af316c739
|
improve agregate with status
|
2026-06-30 12:16:42 +02:00 |
|
larssand
|
1b38aa5704
|
fix aggregate search
|
2026-06-30 11:47:47 +02:00 |
|
larssand
|
4d669be66d
|
add agregated search
|
2026-06-30 11:34:11 +02:00 |
|
larssand
|
2aaa2e28f3
|
add chache for last known good in sqlite..
|
2026-06-30 10:30:59 +02:00 |
|
larssand
|
50463aa4d6
|
Fixed the MCP error handling for large pulls.
|
2026-06-30 10:15:06 +02:00 |
|
larssand
|
31ac3c25d2
|
Improved the overview graphs. and MCP fetching poll
|
2026-06-30 09:40:20 +02:00 |
|
larssand
|
9c6c08b5ec
|
Added local Ollama model listing in the U
|
2026-06-30 09:15:03 +02:00 |
|
larssand
|
d7b8c494e9
|
Added the optional Ollama profile advisor
|
2026-06-30 09:09:04 +02:00 |
|
larssand
|
f2385a00a9
|
Profile recommendations
|
2026-06-30 08:55:15 +02:00 |
|
larssand
|
d99fe24b84
|
Looks at observed logs per stream.
Finds common denominators:
|
2026-06-29 21:38:11 +02:00 |
|
larssand
|
d540b8a77d
|
Implemented cleanup/triage direction. ui, and baselinbe days
|
2026-06-29 20:20:00 +02:00 |
|
larssand
|
d764c5a038
|
Implemented the baseline/noise and SQLite growth improvements.
|
2026-06-29 19:58:49 +02:00 |
|
larssand
|
6ea8bfd714
|
investigation export.
|
2026-06-29 19:48:29 +02:00 |
|
larssand
|
16b5bbdd63
|
Graylog query details
|
2026-06-29 19:26:16 +02:00 |
|
larssand
|
4a85e53869
|
multi-entity stream profiles.
|
2026-06-29 19:20:08 +02:00 |
|
larssand
|
aab9f15c6d
|
multi-entity stream profiles.
|
2026-06-29 19:18:11 +02:00 |
|
larssand
|
68370217da
|
Fortsatte roadmapen med multi-entity stream profiles
|
2026-06-29 19:08:23 +02:00 |
|
larssand
|
20b0e0a92e
|
Ny central normalisering
|
2026-06-29 18:55:18 +02:00 |
|
larssand
|
0b31e6c55e
|
stream_coverage i status-API.
|
2026-06-29 18:36:50 +02:00 |
|
larssand
|
0e41e00ebc
|
sequence detection
|
2026-06-25 22:05:04 +02:00 |
|
larssand
|
9da1aedf52
|
configurable per-field detector weights är klart.
|
2026-06-25 19:36:08 +02:00 |
|
larssand
|
899dbdfc84
|
Fixat orsaken till att Findings/Correlation blinkade bort.
|
2026-06-25 18:51:04 +02:00 |
|
larssand
|
7e6b510b9e
|
fix
|
2026-06-25 18:47:27 +02:00 |
|
larssand
|
c6274f840a
|
fix stream name
|
2026-06-25 18:43:00 +02:00 |
|
larssand
|
b6560d64f7
|
Implemented the next roadmap step: direct Graylog MCP replay with temporary baselines.
|
2026-06-25 18:34:51 +02:00 |
|
larssand
|
ea4aaf57ed
|
Continued the Detection Quality roadmap.
|
2026-06-24 21:32:18 +02:00 |
|
larssand
|
cdef3e1355
|
Continued the Detection Quality roadmap milestone.
|
2026-06-24 21:14:07 +02:00 |
|
larssand
|
223b2a013e
|
Implemented the UI improvements. and roadmap
|
2026-06-24 20:43:40 +02:00 |
|
larssand
|
868022008a
|
Implemented the next multi-source detection layer in this repository.
|
2026-06-24 19:16:16 +02:00 |
|
larssand
|
f6bee0438c
|
Field baseline deviations now show distinct Mark expected, Mark false positive, and Mark confirmed
|
2026-06-24 18:54:37 +02:00 |
|