PapaTramp/security-alert-center
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
175 Commits 1 Branch 0 Tags
f3a89529471482e82ae30aff99ff08e9ec273ecf
Commit Graph

22 Commits

Author SHA1 Message Date
PTah cc8f50de89 feat: Linux SSH admin and remote ssh-monitor update (0.11.0) 2026-06-20 00:25:35 +10:00
PTah 2aec488226 feat: RDG session flap rule, qwinsta/logoff queue and dashboard UI (0.9.13) 
Detect 302→303 within 1–10s, Problem with 30s dedup, rdg_flap flag.
Agent command poll API, admin qwinsta/logoff from Overview. Migration 016.
 2026-06-19 23:34:01 +10:00
PTah f9baf96d88 fix: test push errors, skip heartbeat notify, stale 5h (0.9.2) 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-10 17:25:16 +10:00
PTah 563b836acc feat: Seaca mobile API, enrollment, FCM push and admin UI (0.9.0) 
Adds mobile device registration by admin codes, refresh tokens, push channel
in notification policy, and Settings section for managing Seaca clients.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-10 13:19:14 +10:00
PTah aafb80fa31 feat: proactive host_silence scan for stale agent.heartbeat (0.8.3) 
Background scan every 5 min opens rule:host_silence and notifies without
waiting for the next ingest event. CLI job + optional systemd timer.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-10 09:07:32 +10:00
PTah d3a337992c feat: SAC 0.7.2 security hardening (rate limit, JWT DB check, DOMPurify) 
Path traversal fix in SPA fallback, admin-only host delete, login rate limit
with 3 attempts and Telegram alert, JWT validated against active users in DB,
and DOMPurify for agent report HTML.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-01 11:04:14 +10:00
PTah 415d863b3b feat: SAC daily reports from DB aggregation (notif-32) 
- Aggregate report.daily.ssh/rdp from 24h ingest; job and systemd timer

- notify_daily_report bypasses NOTIFY_MIN_SEVERITY; ingest routes agent reports

- HTML templates, env SAC_DAILY_REPORT_*, docs and tests (56 cases)

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-05-29 16:30:07 +10:00
PTah 4167687dec feat: notification cooldown dedup for events and problems (notif-31) 
Store last notify time by dedup_key/fingerprint, gate dispatch before
channels; config SAC_NOTIFY_*_COOLDOWN_SEC, migration 008.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-05-29 16:24:01 +10:00
PTah ebb450be92 feat: global notification policy severity to channels (notif-22) 
Singleton notification_policy table, NOTIFY_MIN_SEVERITY/CHANNELS env,
central dispatch gate, Settings policy UI, migration 007.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-05-29 16:19:26 +10:00
PTah 9b177c145b feat: SMTP email notification channel with UI and ingest 
Migration 006, email config DB/env, smtplib sender, settings API,
Settings UI section, and dispatch on event/problem ingest.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-05-29 16:12:55 +10:00
PTah 20fa7e2c27 feat: webhook notification channel with UI and ingest dispatch 
Add webhook config (DB/env), JSON POST on events/problems, settings API,
Settings UI section, and notify_dispatch for multi-channel ingest.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-05-29 16:09:40 +10:00
PTah e0ba384705 feat: SAC Telegram settings view, notify_problem severity gate, exclusive docs 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-05-29 15:58:08 +10:00
PTah 108e1756c4 feat: live последние события на Dashboard; retention, health, runbook 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-05-28 11:29:31 +10:00
PTah 64b5ef297a feat: problem rules v1 brute-force, privilege spike, host silence (d1-3) 
- Threshold rules on ingest; heartbeat auto-resolves host silence

- Config thresholds in sac-api.env; unit tests

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-05-28 09:51:05 +10:00
PTah a4a224b284 feat: Problems correlation fingerprint, count, last_seen (d1-2) 
- Migration 003; windowed host+type+rule correlation on ingest

- GET /problems filters; GET /problems/{id} with event timeline; ack/resolve 409 guard

- Tests and SAC_PROBLEM_CORRELATION_WINDOW_MINUTES config

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-05-28 09:46:12 +10:00
PTah 04301ab359 feat: host heartbeat status and dashboard metrics (2.2) 
Track agent.heartbeat and report.daily.ssh per host; show online/stale
on Hosts UI; dashboard counters and SAC_HEARTBEAT_STALE_MINUTES config.
 2026-05-27 13:36:17 +10:00
PTah eeba3a704d feat: Telegram notifications from SAC on ingest 
Send Telegram alerts for high/critical events and new Problems.
Configurable via TELEGRAM_* env vars; ingest never fails on send errors.
 2026-05-27 12:21:03 +10:00
PTah 934a5a0c9c fix: загрузка sac-api.env через pydantic, не EnvironmentFile systemd 2026-05-26 21:07:51 +10:00
PTah 539126b75e fix(deploy): конфиг в /opt/security-alert-center/config (sac:sac) 
Убирает ошибку Permission denied при каталоге /etc root:root.
 2026-05-26 20:59:44 +10:00
PTah 6d33669ac2 fix(docs): sac-api.env chmod 640 root:sac для пользователя sac 2026-05-26 20:53:10 +10:00
PTah 69547d83bc docs: URL sac.kalinamall.ru во всех руководствах и примерах конфигов 2026-05-26 20:30:10 +10:00
PTah 9203af90d5 docs: native Ubuntu install as primary; systemd and nginx 
- install-ubuntu-24.04-native.md (production) and -docker.md (alternative)

- deploy/systemd/sac-api.service, nginx/sac.conf.example, env.native.example

- deployment, README, INDEX, work-plan, TZ updated
 2026-05-26 20:28:05 +10:00