Fix websocket pattern + improve beacon override logic to prevent false positives/negatives ab9baba verified danielostrow commited on 1 day ago
Fix false positives: high-confidence legitimate patterns no longer overridden by beacon indicators 2b5ad85 verified danielostrow commited on 1 day ago
Add machine-readable output fields for scripting (connections_analyzed, suspicious_connections, iocs, time_range, destination_summary) c94402b verified danielostrow commited on 1 day ago
Add parsers for syslog, Windows firewall, CSV, and Graylog formats 4abea42 verified danielostrow commited on 1 day ago
Fix log parsing: JSON arrays, Zeek format, and beacon detection priority beca259 verified danielostrow commited on 1 day ago