|
|
2026-10-26 11:47:50 +01:00 |
|
testdata
|
v1.21.0: parse responses in PCAP*; enable existing leak and correlation detectors on binary network captures; handle content-encoding: br http responses as coverage telemetry, not evidence
|
2026-10-23 16:46:26 +02:00 |
|
artifact_audit.go
|
v1.22.0: PHP2Shell and Node2Shell configuration checks; scoped web telemetry; color-coded security reporting
|
2026-10-23 21:14:31 +02:00 |
|
artifact_security_test.go
|
v1.22.0: PHP2Shell and Node2Shell configuration checks; scoped web telemetry; color-coded security reporting
|
2026-10-23 21:14:31 +02:00 |
|
behavior.go
|
initial import v1.9.0
|
2026-10-23 11:43:36 +02:00 |
|
cloudflare.go
|
initial import v1.9.0
|
2026-10-23 11:43:36 +02:00 |
|
coverage.go
|
v1.11.0: r/o Falco alerts; falco/sysdig logs; separate runtime and network telemetry; better correlation
|
2026-10-23 13:36:16 +02:00 |
|
detection_sources.go
|
v1.24.0: make it clear how many independent rules were applied and what external sensors sources are covereed and used; detect Sophos and FortiNDR PHP2Shell alerts
|
2026-10-26 11:26:26 +01:00 |
|
detection_sources_test.go
|
v1.24.0: make it clear how many independent rules were applied and what external sensors sources are covereed and used; detect Sophos and FortiNDR PHP2Shell alerts
|
2026-10-26 11:26:26 +01:00 |
|
discover.go
|
v1.20.0: node2shell (CVE-2026-111497)
|
2026-10-23 16:42:11 +02:00 |
|
emerging.go
|
initial import v1.9.0
|
2026-10-23 11:43:36 +02:00 |
|
endpoint_triage_test.go
|
v1.23.0: triage endpoint probes by HTTP status; summarize 404/410 noise and raise finding limit
|
2026-10-26 10:37:42 +01:00 |
|
go.mod
|
initial import v1.9.0
|
2026-10-23 11:43:36 +02:00 |
|
host_audit.go
|
v1.12.0: prelim host audit; more php-fpm signals; more evidence and correlations in general
|
2026-10-23 13:39:36 +02:00 |
|
incidents.go
|
v1.23.0: triage endpoint probes by HTTP status; summarize 404/410 noise and raise finding limit
|
2026-10-26 10:37:42 +01:00 |
|
journal.go
|
v1.20.0: node2shell (CVE-2026-111497)
|
2026-10-23 16:42:11 +02:00 |
|
main.go
|
v1.25.0: improve readability for actual humans, add at-a-glance section
|
2026-10-26 11:47:50 +01:00 |
|
metadata.go
|
initial import v1.9.0
|
2026-10-23 11:43:36 +02:00 |
|
network.go
|
v1.11.0: r/o Falco alerts; falco/sysdig logs; separate runtime and network telemetry; better correlation
|
2026-10-23 13:36:16 +02:00 |
|
node2shell.go
|
v1.21.0: parse responses in PCAP*; enable existing leak and correlation detectors on binary network captures; handle content-encoding: br http responses as coverage telemetry, not evidence
|
2026-10-23 16:46:26 +02:00 |
|
node2shell_test.go
|
v1.20.0: node2shell (CVE-2026-111497)
|
2026-10-23 16:42:11 +02:00 |
|
parse_diagnostics.go
|
initial import v1.9.0
|
2026-10-23 11:43:36 +02:00 |
|
parser.go
|
v1.24.0: make it clear how many independent rules were applied and what external sensors sources are covereed and used; detect Sophos and FortiNDR PHP2Shell alerts
|
2026-10-26 11:26:26 +01:00 |
|
pcap.go
|
v1.21.1: agentic coding cleanup
|
2026-10-23 17:42:38 +02:00 |
|
pcap_fuzz_test.go
|
v1.19.1: release sanitized comprehensive test suite
|
2026-10-23 15:24:22 +02:00 |
|
pcap_hardening_v1_18_test.go
|
v1.19.1: release sanitized comprehensive test suite
|
2026-10-23 15:24:22 +02:00 |
|
pcap_response.go
|
v1.21.0: parse responses in PCAP*; enable existing leak and correlation detectors on binary network captures; handle content-encoding: br http responses as coverage telemetry, not evidence
|
2026-10-23 16:46:26 +02:00 |
|
pcap_response_test.go
|
v1.21.0: parse responses in PCAP*; enable existing leak and correlation detectors on binary network captures; handle content-encoding: br http responses as coverage telemetry, not evidence
|
2026-10-23 16:46:26 +02:00 |
|
pcap_test.go
|
fix agentic coding
|
2026-10-26 10:41:24 +01:00 |
|
pcapng.go
|
v1.17.0: nativ pcapng reader; improve network detection
|
2026-10-23 14:14:55 +02:00 |
|
pcapng_test.go
|
v1.19.1: release sanitized comprehensive test suite
|
2026-10-23 15:24:22 +02:00 |
|
php2shell.go
|
v1.24.0: make it clear how many independent rules were applied and what external sensors sources are covereed and used; detect Sophos and FortiNDR PHP2Shell alerts
|
2026-10-26 11:26:26 +01:00 |
|
php2shell_test.go
|
v1.19.1: release sanitized comprehensive test suite
|
2026-10-23 15:24:22 +02:00 |
|
php2shell_v1_4_test.go
|
v1.19.1: release sanitized comprehensive test suite
|
2026-10-23 15:24:22 +02:00 |
|
progress.go
|
initial import v1.9.0
|
2026-10-23 11:43:36 +02:00 |
|
progress_metadata_test.go
|
v1.19.1: release sanitized comprehensive test suite
|
2026-10-23 15:24:22 +02:00 |
|
public_observations_test.go
|
v1.19.1: release sanitized comprehensive test suite
|
2026-10-23 15:24:22 +02:00 |
|
publication_privacy_test.go
|
v1.19.1: release sanitized comprehensive test suite
|
2026-10-23 15:24:22 +02:00 |
|
quality_regression_v1_21_1_test.go
|
v1.21.1: agentic coding cleanup
|
2026-10-23 17:42:38 +02:00 |
|
redaction.go
|
v1.22.0: PHP2Shell and Node2Shell configuration checks; scoped web telemetry; color-coded security reporting
|
2026-10-23 21:14:31 +02:00 |
|
redaction_test.go
|
v1.19.1: release sanitized comprehensive test suite
|
2026-10-23 15:24:22 +02:00 |
|
report.go
|
v1.25.0: improve readability for actual humans, add at-a-glance section
|
2026-10-26 11:47:50 +01:00 |
|
report_readability_test.go
|
v1.25.0: improve readability for actual humans, add at-a-glance section
|
2026-10-26 11:47:50 +01:00 |
|
review_test.go
|
fix agentic coding
|
2026-10-26 10:41:24 +01:00 |
|
rules.example.json
|
v1.10.0: add Cisco Talos/Snort signatures 1:67359 1:67360 1:67375, improve sensor detection
|
2026-10-23 11:47:40 +02:00 |
|
rules.go
|
v1.24.0: make it clear how many independent rules were applied and what external sensors sources are covereed and used; detect Sophos and FortiNDR PHP2Shell alerts
|
2026-10-26 11:26:26 +01:00 |
|
runtime_telemetry.go
|
v1.11.0: r/o Falco alerts; falco/sysdig logs; separate runtime and network telemetry; better correlation
|
2026-10-23 13:36:16 +02:00 |
|
scan.go
|
v1.25.0: improve readability for actual humans, add at-a-glance section
|
2026-10-26 11:47:50 +01:00 |
|
scan_test.go
|
v1.19.1: release sanitized comprehensive test suite
|
2026-10-23 15:24:22 +02:00 |
|
security_config.go
|
v1.22.0: PHP2Shell and Node2Shell configuration checks; scoped web telemetry; color-coded security reporting
|
2026-10-23 21:14:31 +02:00 |
|
security_config_apache.go
|
v1.22.0: PHP2Shell and Node2Shell configuration checks; scoped web telemetry; color-coded security reporting
|
2026-10-23 21:14:31 +02:00 |
|
security_config_nginx.go
|
v1.22.0: PHP2Shell and Node2Shell configuration checks; scoped web telemetry; color-coded security reporting
|
2026-10-23 21:14:31 +02:00 |
|
security_config_node.go
|
v1.22.0: PHP2Shell and Node2Shell configuration checks; scoped web telemetry; color-coded security reporting
|
2026-10-23 21:14:31 +02:00 |
|
security_config_php.go
|
v1.22.0: PHP2Shell and Node2Shell configuration checks; scoped web telemetry; color-coded security reporting
|
2026-10-23 21:14:31 +02:00 |
|
security_config_report_test.go
|
v1.25.0: improve readability for actual humans, add at-a-glance section
|
2026-10-26 11:47:50 +01:00 |
|
security_config_test.go
|
v1.22.0: PHP2Shell and Node2Shell configuration checks; scoped web telemetry; color-coded security reporting
|
2026-10-23 21:14:31 +02:00 |
|
sensor_updates_test.go
|
v1.24.0: make it clear how many independent rules were applied and what external sensors sources are covereed and used; detect Sophos and FortiNDR PHP2Shell alerts
|
2026-10-26 11:26:26 +01:00 |
|
terminal_darwin.go
|
initial import v1.9.0
|
2026-10-23 11:43:36 +02:00 |
|
terminal_linux.go
|
initial import v1.9.0
|
2026-10-23 11:43:36 +02:00 |
|
types.go
|
v1.25.0: improve readability for actual humans, add at-a-glance section
|
2026-10-26 11:47:50 +01:00 |
|
v1_4_1_test.go
|
v1.19.1: release sanitized comprehensive test suite
|
2026-10-23 15:24:22 +02:00 |
|
v1_4_2_test.go
|
v1.19.1: release sanitized comprehensive test suite
|
2026-10-23 15:24:22 +02:00 |
|
v1_5_0_test.go
|
v1.21.1: agentic coding cleanup
|
2026-10-23 17:42:38 +02:00 |
|
v1_6_0_test.go
|
v1.21.1: agentic coding cleanup
|
2026-10-23 17:42:38 +02:00 |
|
v1_7_0_test.go
|
v1.19.1: release sanitized comprehensive test suite
|
2026-10-23 15:24:22 +02:00 |
|
v1_8_0_test.go
|
v1.19.1: release sanitized comprehensive test suite
|
2026-10-23 15:24:22 +02:00 |
|
v1_10_0_test.go
|
v1.19.1: release sanitized comprehensive test suite
|
2026-10-23 15:24:22 +02:00 |
|
v1_11_0_test.go
|
v1.19.1: release sanitized comprehensive test suite
|
2026-10-23 15:24:22 +02:00 |
|
v1_12_0_test.go
|
v1.19.1: release sanitized comprehensive test suite
|
2026-10-23 15:24:22 +02:00 |
|
v1_13_0_test.go
|
v1.19.1: release sanitized comprehensive test suite
|
2026-10-23 15:24:22 +02:00 |
|
v1_14_0_test.go
|
v1.19.1: release sanitized comprehensive test suite
|
2026-10-23 15:24:22 +02:00 |
|
v1_19_0_test.go
|
v1.19.1: release sanitized comprehensive test suite
|
2026-10-23 15:24:22 +02:00 |
|
web_telemetry.go
|
v1.22.0: PHP2Shell and Node2Shell configuration checks; scoped web telemetry; color-coded security reporting
|
2026-10-23 21:14:31 +02:00 |
|
web_telemetry_test.go
|
v1.22.0: PHP2Shell and Node2Shell configuration checks; scoped web telemetry; color-coded security reporting
|
2026-10-23 21:14:31 +02:00 |
