Fimeg
5683bc15a4
feat: Wazuh queue-socket event emitter (INTEG-001) ...
Outbound-only: no listener, no control surface — RedFlag's journal is
authoritative, Wazuh is a best-effort mirror. DGRAM to the local agent's
queue socket, ECS-formatted, rule IDs mapped from security event types.
Opt-in via REDFLAG_WAZUH_ENABLED=true; disabled = socket never opened.
- Sink interface on SecurityLogger (mirror after journal write)
- Write deadline + one reconnect, then drop-count with rate-limited log
- 3 tests: frame/ECS shape, absent-socket non-blocking, unknown→generic
2026-06-11 02:01:43 -04:00
fix: nil logger on Windows scan path, rpmEVRAhead equal-version false positive, desktop-self replay token burned before install
2026-06-11 02:01:43 -04:00
swap uuid lib, windows installer pass, README/RAF copy
2026-06-03 15:39:49 -04:00
gave the server a breaker so a sulking upstream can't drag it down
2026-06-07 19:45:36 -04:00
swap uuid lib, windows installer pass, README/RAF copy
2026-06-03 15:39:49 -04:00
refactor: rename aggregator-agent to agent for public release
2026-05-21 13:19:18 -04:00
feat: SETTINGS-001 reversible token encryption + one-liner restore
2026-06-05 16:17:47 -04:00
feat: SETTINGS-001 reversible token encryption + one-liner restore
2026-06-05 16:17:47 -04:00
feat: setup accepts operator-supplied signing keypair + validation
2026-06-11 02:01:43 -04:00
swept the cobwebs, stopped re-dialing the same three hosts
2026-06-07 19:35:32 -04:00
integrations /wazuh
feat: Wazuh queue-socket event emitter (INTEG-001)
2026-06-11 02:01:43 -04:00
feat: Wazuh queue-socket event emitter (INTEG-001)
2026-06-11 02:01:43 -04:00
feat: process explorer — on-demand /proc scanning with full osquery parity
2026-06-11 02:01:43 -04:00
give the system a window you can scrape, and patch a migration that couldn't run twice
2026-06-07 20:59:29 -04:00
v0.2.5.1: lifecycle, live operations, unified history
2026-06-05 09:13:42 -04:00
swept the cobwebs, stopped re-dialing the same three hosts
2026-06-07 19:35:32 -04:00
test+fix: supply-chain consumer/OSV coverage; local-approve and update handler work
2026-06-11 02:01:42 -04:00
taught the rocks to stop tripping over each other under load
2026-06-07 19:17:08 -04:00
v0.2.5.1: lifecycle, live operations, unified history
2026-06-05 09:13:42 -04:00
v0.2.8.0 — changelog + version lockstep bump
2026-06-11 02:01:43 -04:00
feat: embed web UI in server binary + local trigger-scan write endpoint
2026-06-10 08:38:18 -04:00
5683bc15a4