Repository navigation

Enhance log sniffing features with AI analysis and REST API - #30

Merged

vsilent merged 236 commits into

testingfrom

main

Nov 13, 2026

Merged

Enhance log sniffing features with AI analysis and REST API#30
vsilent merged 236 commits into
testingfrom
main

Commits on Mar 10, 2021
- Testing (#9)
  
  vsilent
  and
  vsilent
  authored
  a9851a4
- Update README.md
  vsilent
  authored
  9d21449
Commits on Mar 12, 2021
- Add editorconfig. Append gitignore fot emacs
  diaevd
  committed
  4f22fac
- editorconfig
  diaevd
  committed
  ee745f2
Commits on Mar 23, 2021
- conflict resolved
  vsilent
  committed
  f5f08cf
- Update README.md
  vsilent
  authored
  4b35e9b
Commits on Mar 29, 2021
Commits on May 10, 2021
- Update actix-service requirement from 1.0.6 to 2.0.0 (#23)
  dependabot[bot]
  authored
  a26aa27
- Bump codacy/codacy-analysis-cli-action from 2.0.1 to 3.0.1 (#24)
  dependabot[bot]
  authored
  f8ad5e8
Commits on May 17, 2021
- Bump codacy/codacy-analysis-cli-action from 3.0.1 to 3.0.2 (#25)
  dependabot[bot]
  authored
  8c9fef1
- Bump actions/cache from 2.1.4 to 2.1.5 (#26)
  dependabot[bot]
  authored
  25bae7f
Commits on Jun 16, 2021
Commits on Jun 21, 2021
- Update bcrypt requirement from 0.9.0 to 0.10.0 (#32)
  dependabot[bot]
  authored
  38871bf
Commits on Jul 26, 2021
- Bump codacy/codacy-analysis-cli-action from 3.0.3 to 4.0.0 (#35)
  dependabot[bot]
  authored
  d67b5ed
- Update env_logger requirement from 0.8.3 to 0.9.0 (#34)
  dependabot[bot]
  authored
  d82371b
Commits on Aug 30, 2021
- Update bigdecimal requirement from 0.2.0 to 0.3.0 (#37)
  dependabot[bot]
  authored
  663d7b5
Commits on Dec 27, 2021
- Update actix-tls requirement from 2.0.0 to 3.0.0 (#39)
  dependabot[bot]
  authored
  7c25842
Commits on Feb 7, 2022
- Remove unused imports, list docker containers added
  vsilent
  committed
  3e78c5e
Commits on Feb 9, 2022
- actix-web upgrade
  vsilent
  committed
  6820bd2
Commits on Jul 23, 2024
- shell commands
  vsilent
  committed
  2cdc782
- shell commands
  vsilent
  committed
  97b6a76
- rustscan, openssl binaries added
  vsilent
  committed
  2209637
- rustscan, openssl binaries added
  vsilent
  committed
  de2ec55
Commits on Mar 14, 2026
- phase 1 files
  vsilent
  committed
  728fe46
Commits on Mar 16, 2026
- Broken, integrating bollard for container security check
  vsilent
  committed
  dceae83
- Update README with new logo and project details
  vsilent
  authored
  bc49338
Commits on Mar 17, 2026
- Revise README with new images and title case
  vsilent
  authored
  f789f43
- diesel replaced with r2d2 and rusqlite
  vsilent
  committed
  f987859
- Merge branch 'main' of https://github.com/vsilent/stackdog
  vsilent
  committed
  f750dce
- ebpf files
  vsilent
  committed
  e72c96b
Commits on Mar 19, 2026
- refactoring, ebpf / containers
  vsilent
  committed
  8759564
Commits on Mar 30, 2026
- feat(cli): add clap subcommands (serve/sniff) + sniff config
  
  vsilent
  and
  Copilot
  committed
  2f6db16
- feat(sniff): log source discovery + database persistence
  
  vsilent
  and
  Copilot
  committed
  27f3d6f
- feat(sniff): log reader trait + File/Docker/Journald implementations
  
  vsilent
  and
  Copilot
  committed
  c9164c5
- feat(sniff): AI log analysis with OpenAI and pattern backends
  
  vsilent
  and
  Copilot
  committed
  dc09c3e
- feat(sniff): consume mode — zstd compression, dedup, log purge
  
  vsilent
  and
  Copilot
  committed
  b358eac
- feat(sniff): reporter + orchestrator loop
  
  vsilent
  and
  Copilot
  committed
  1658cc6
- feat(sniff): REST API for log sources and summaries
  
  vsilent
  and
  Copilot
  committed
  2f38be3
- docs: update CHANGELOG and README for sniff feature
  
  vsilent
  and
  Copilot
  committed
  5f4b05c
- Merge feature/sniff-logs: log discovery, AI analysis, archival
  
  vsilent
  and
  Copilot
  committed
  ac3e579
- chore: remove task files from repo and gitignore
  
  vsilent
  and
  Copilot
  committed
  49b37aa
- feat: add curl-based binary installation
  
  vsilent
  and
  Copilot
  committed
  c8e5c90
- docs: fix ML module status — stub infrastructure, not in progress
  
  vsilent
  and
  Copilot
  committed
  83cf1d2
Commits on Mar 31, 2026
- feat(cli): add --ai-model and --ai-api-url flags to sniff command
  
  vsilent
  and
  Copilot
  committed
  b2ffc0a
- feat(sniff): add debug logging and robust LLM JSON extraction
  
  vsilent
  and
  Copilot
  committed
  01942f8
- feat(alerting): implement real Slack webhook notifications
  
  vsilent
  and
  Copilot
  committed
  9504301
- Update docker.yml
  vsilent
  authored
  72d7515
- Dev (#90) (#91)
  
  authored
  cdaf42e
- ci: upgrade deprecated GitHub Actions to v4
  
  vsilent
  and
  Copilot
  committed
  d364801
- Merge pull request #1 from vsilent/dev
  vsilent
  authored
  c4d222e
- ci: modernize Docker CICD workflow
  
  vsilent
  and
  Copilot
  committed
  7112a0b
- build: switch to musl targets and rustls for portable binaries
  
  vsilent
  and
  Copilot
  committed
  3973c53
- chore: add pre-commit hook and apply cargo fmt
  
  vsilent
  and
  Copilot
  committed
  4601763
- fix: resolve all clippy warnings
  
  vsilent
  and
  Copilot
  committed
  fa74035
- fix: use _pid consistently in get_process_comm
  
  vsilent
  and
  Copilot
  committed
  cc4a9b2
- fix: resolve clippy errors in Linux-only firewall modules
  
  vsilent
  and
  Copilot
  committed
  db9e5c0
- fix: remove redundant to_string() in format! args
  
  vsilent
  and
  Copilot
  committed
  a22ab6d
- fix: convert NfTable to string before passing to args()
  
  vsilent
  and
  Copilot
  committed
  431089b
- chore: bump VERSION.md to 0.2.0
  
  vsilent
  and
  Copilot
  committed
  ebf9310
- fix: resolve warnings in tests and examples
  
  vsilent
  and
  Copilot
  committed
  1cf2162
- fix: restore mutable enricher in enrichment tests
  
  vsilent
  and
  Copilot
  committed
  56dcd95
- fix: align test mutability and silence unused ptrace events var
  
  vsilent
  and
  Copilot
  committed
  7824052
- fix(tests): clean remaining all-target warnings and invalid literal
  
  vsilent
  and
  Copilot
  committed
  77ed42a
- fix: restore used enrichment vars and silence ptrace unused vars
  
  vsilent
  and
  Copilot
  committed
  f1ed8e7
- fix: handle non-linux unused vars in enrichment tests
  
  vsilent
  and
  Copilot
  committed
  f919cc9
- test: fix ebpf loader creation assertion for linux builds
  
  vsilent
  and
  Copilot
  committed
  c8a2b84
- test: use valid 64-char hex container ID in enrichment test
  
  vsilent
  and
  Copilot
  committed
  ad49047
- ci: fallback to npm install when web lockfile is missing
  
  vsilent
  and
  Copilot
  committed
  bc6967c
- web: add webpack config with TS entrypoint for dashboard build
  
  vsilent
  and
  Copilot
  committed
  a9757d4
- web: fix dashboard import paths and TypeScript build errors
  
  vsilent
  and
  Copilot
  committed
  8d37e7b
- log: show API URL instead of dashboard bind address
  
  vsilent
  and
  Copilot
  committed
  2cf69c4
- web: default API/WS endpoints to APP_PORT or 5555
  
  vsilent
  and
  Copilot
  committed
  4229627
- web: normalize container API payloads to prevent runtime crashes
  
  vsilent
  and
  Copilot
  committed
  f3b23e9
- web: fix threat statistics endpoint path
  
  vsilent
  and
  Copilot
  committed
  3e6cae5
- web: guard ThreatMap against missing stats buckets
  
  vsilent
  and
  Copilot
  committed
  a0508b0
- web: restore CSS injection and degrade gracefully without WS endpoint
  
  vsilent
  and
  Copilot
  committed
  9366741
- web: add left sidebar navigation to dashboard layout
  
  vsilent
  and
  Copilot
  committed
  99c85b1
- web: move logo to sidebar and add top actions bar
  
  vsilent
  and
  Copilot
  committed
  a6aac14
- Merge pull request #2 from vsilent/dev
  vsilent
  authored
  8bf0648
- install: fallback when latest release is missing
  
  vsilent
  and
  Copilot
  committed
  2f152b7
- Merge pull request #3 from vsilent/dev
  vsilent
  authored
  d3500d4
- fix: avoid panic on malformed .env
  
  vsilent
  and
  Copilot
  committed
  4255698
- docs: update README and changelog for installer/env fixes
  
  vsilent
  and
  Copilot
  committed
  3ceb0a6
Commits on Apr 2, 2026
- Limit sniff analyzer prompts
  
  vsilent
  and
  Copilot
  committed
  c216882
- Update candle-core requirement from 0.3 to 0.10 (#101)
  dependabot[bot]
  authored
  09a6bfc
- Update rusqlite requirement from 0.32 to 0.39 (#99)
  dependabot[bot]
  authored
  10d00d8
- Merge pull request #4 from trydirect/dev
  vsilent
  authored
  e17e57b
Commits on Apr 3, 2026
- Add live mail abuse guard
  
  vsilent
  and
  Copilot
  committed
  1101c5a
- iptables & nftables
  vsilent
  committed
  83434cf
- multiple updates, eBPF, container API quality is improved
  vsilent
  committed
  ca0944f
Commits on Apr 4, 2026
- tests, ip_ban engine implemented, frontend dashboard improvements
  vsilent
  committed
  c845579
- logs, containers in ui, ports, ws
  vsilent
  committed
  1c30685
- context.to_string()
  vsilent
  committed
  400a99f
- clippy fix
  vsilent
  committed
  5ee1267
- clippy fix
  vsilent
  committed
  49d4488
- clippy fix
  vsilent
  committed
  d790554
Commits on Apr 5, 2026
- ip_ban::engine::tests
  vsilent
  committed
  c316f94
Commits on Apr 6, 2026
- GLIBC_2.39 not found fix, using musl
  vsilent
  committed
  7e4c2ab
- docker files
  vsilent
  committed
  5956f4d
- multi stage build
  vsilent
  committed
  e2c9a46
- The problem was cross build reusing the default target directory, which already contained host-built build-script binaries. Now musl build uses its own isolated target di
  vsilent
  committed
  8437ada
- mount docker.sock to stackdog container
  vsilent
  committed
  b724897
- Merge pull request #6 from vsilent/dev
  vsilent
  authored
  cb6c405
- Merge upstream main\n\nResolve merge conflicts after pulling upstream main and preserve current Docker, sniff, and runtime fixes.\n\nCo-authored-by: Copilot <223556219+Copilot@users.noreply.github.…
  vsilent
  committed
  1a6ed9b
Commits on Apr 7, 2026
- Audit, analyze syslog, new detectors, sniff command enriched
  vsilent
  committed
  79ce963
- Audit, analyze syslog, new detectors, sniff command enriched
  vsilent
  committed
  3438805
- Merge pull request #7 from vsilent/feature/detectors
  vsilent
  authored
  b18befd
- Feature/detectors (#103)
  
  authored
  360a9c9
- github action tests fix
  vsilent
  committed
  191be34
- Merge pull request #8 from vsilent/feature/detectors
  vsilent
  authored
  5b14f69
Commits on Apr 8, 2026
- Update README.md
  vsilent
  authored
  1ca1909
- Change repository references to 'trydirect'
  vsilent
  authored
  0f9ca4c
- Fix installer release repository
  
  vsilent
  and
  Copilot
  committed
  1e0d022
- Merge branch 'main' of https://github.com/trydirect/stackdog
  vsilent
  committed
  dfdd5a8
- merge with trydirect/stackdog
  vsilent
  committed
  5b4a555
- notify on ban and quarantine
  vsilent
  committed
  1fbd568
Commits on Apr 9, 2026
Commits on Apr 10, 2026
- Merge branch 'vsilent:main' into main
  vsilent
  authored
  466cb1b
Commits on Apr 18, 2026
- Update netlink-packet-route requirement from 0.17 to 0.29 (#94)
  dependabot[bot]
  authored
  7a8ecd8
- Update aya-obj requirement from 0.1 to 0.2 (#98)
  dependabot[bot]
  authored
  8445963
- sniff on serve, can be disabled with STACKDOG_SERVE_SNIFF_ENABLED=false
  vsilent
  committed
  3835a54
- Merge branch 'main' of https://github.com/vsilent/stackdog
  vsilent
  committed
  062bf3b
- Merge branch 'vsilent:main' into main
  vsilent
  authored
  f1ce8a8
Commits on Apr 19, 2026
- notification filtering by severity
  vsilent
  committed
  f4a69ed
- Merge branch 'main' of https://github.com/trydirect/stackdog
  vsilent
  committed
  995a585
- build: embed git short hash in version string
  
  vsilent
  and
  Copilot
  committed
  93b9284
- ci: push image to vsilent/stackdog:latest with git hash baked in
  
  vsilent
  and
  Copilot
  committed
  1e4d0b2
Commits on Jun 4, 2026
- stackdog website
  robotizeit
  committed
  8a6840a
- merge fix
  robotizeit
  committed
  6b38f2d
Commits on Jun 5, 2026
- fix docker image name
  robotizeit
  committed
  fa300ea
Commits on Jun 25, 2026
- webarchive probe detector
  robotizeit
  committed
  c1a10df
Commits on Jun 26, 2026
- cargi fmt --all, clippy
  robotizeit
  committed
  1c24195
- minimum severity reporter fix
  robotizeit
  committed
  086643d
Commits on Jun 27, 2026
- ML-powered behavioral anomaly detector that learns normal log patterns and flags deviations using Isolation Forest
  robotizeit
  committed
  ef6f30f
Commits on Jul 16, 2026
- Fix install.sh pointing at wrong repo (vsilent → trydirect)
  robotizeit
  committed
  d139162
- Merge pull request #9 from trydirect/fix/install-repo
  vsilent
  authored
  4568910
Commits on Jul 21, 2026
- style: fix rustfmt formatting in ml detector and bump version to 0.2.3
  robotizeit
  committed
  5c70444
Commits on Aug 24, 2026
- /var/log/syslog gets read once from its saved offset, not 1.13 GB / 653k entries per pass. AI requests are bounded — analyzer.rs:94 takes a timeout_secs and builds the client with .timeout(...); 0 …
  robotizeit
  committed
  ab871ee
- Merge branch 'main' of github.com:trydirect/stackdog
  robotizeit
  committed
  42c7aa5
Commits on Aug 26, 2026
- clippy error fix
  robotizeit
  committed
  b688302
- clippy error fix
  robotizeit
  committed
  d78f43e
Commits on Aug 28, 2026
- fix: deduplicate posture alerts and add trusted containers filter
  robotizeit
  committed
  1ceb564
- fmt
  robotizeit
  committed
  dbb986a
- fix: extract real IP from X-Forwarded-For for proxied attacks
  robotizeit
  committed
  1d4d6c2
- chore: add truncated JSON repair tests, clean up test env vars
  robotizeit
  committed
  20b1444
- chore: bump version to v0.2.4
  robotizeit
  committed
  be5fac5
- fix: dedup alerts by description only, not source+sample
  robotizeit
  committed
  2b7d630
Commits on Aug 29, 2026
- fix: ban IPs from AI-detected attacks, scan entries as fallback
  robotizeit
  committed
  0030608
Commits on Aug 31, 2026
- Stackdog icon in slack
  robotizeit
  committed
  d054a08
- feat: add tools module and ban-ip CLI command
  robotizeit
  committed
  919475a
- feat: AI tool-use loop, suggested_action, ai_tools_enabled config
  robotizeit
  committed
  8be8299
- fix: remove dead IpBanEngine reference in ban_ip tool
  robotizeit
  committed
  ab9ef65
- cargo fmt --all applied
  robotizeit
  committed
  14bc5ee
- fix: stop AI token burn — skip boring logs, cooldown, no double fallback
  robotizeit
  committed
  8f8ddee
- style: rustfmt
  robotizeit
  committed
  63cc2a4
Commits on Sep 6, 2026
- new DEFAULT_ALERT_DEDUP_WINDOW_SECS set to 6 hours
  robotizeit
  committed
  eb015af
- StackDog CLI Version update. Release info
  robotizeit
  committed
  57876d1
Commits on Sep 9, 2026
- add iptables/nftables to binary, exclude self continaer, ban IP fix
  robotizeit
  committed
  3620e9e
- Use docker compose labels for self container identity
  robotizeit
  committed
  6ad17b8
- fix: send tool_call_id back to the AI, add IP ban API
  
  robotizeit
  and
  claude
  committed
  5d579c4
Commits on Sep 10, 2026
- fix: name containers by their name, not their hostname
  
  robotizeit
  and
  claude
  committed
  051f2dc
- Merge pull request #10 from trydirect/fix/self-ingestion-dedup-toolcalls
  vsilent
  authored
  94121d9
- fix: one release alert per address, not per offense row
  
  robotizeit
  and
  claude
  committed
  fcfdc26
- feat: STACKDOG_IP_BAN_ALLOWLIST, addresses that are never banned
  
  robotizeit
  and
  claude
  committed
  a19f82e
- fix: one offense row per (ip, source_type), with a real counter
  
  robotizeit
  and
  claude
  committed
  a755f60
- fix: report the offense tally to the AI, not the row count
  
  robotizeit
  and
  claude
  committed
  a7b3488
- fix: stop banning browser versions, and say why a ban happened
  
  robotizeit
  and
  claude
  committed
  4d6b252
- feat: link every notification to the alert in the dashboard
  
  robotizeit
  and
  claude
  committed
  c7033c4
- chore: give docker-compose.app.yml the settings it was missing
  
  robotizeit
  and
  claude
  committed
  5c8220e
- ci: publish trydirect/stackdog-ui, configured at run time
  
  robotizeit
  and
  claude
  committed
  1da52f1
- fix: stop banning bystanders
  
  robotizeit
  and
  claude
  committed
  f4d1a84
- docs: add an upgrading note to the README
  
  robotizeit
  and
  claude
  committed
  7589691
Commits on Oct 26, 2026
- fix: stop banning infrastructure, and make a wrong ban reversible
  robotizeit
  committed
  64ce416
- chore: bump version to v0.2.5
  robotizeit
  committed
  221b442
- fix: repair the iptables rule check for the linux build
  robotizeit
  committed
  c615360
Commits on Oct 27, 2026
- fix: hold AI bans to confirmed attacks, attribute alerts to a host
  robotizeit
  committed
  bb72a5a
- chore: bump version to v0.2.6
  robotizeit
  committed
  5e1c064
Commits on Oct 31, 2026
- feat: detect PHP webshells and ban the clients driving them
  
  robotizeit
  and
  claude
  committed
  0a6abff
- docs(website): add a PHP webshell detection page
  
  robotizeit
  and
  claude
  committed
  5186bbd
- fix(php-shell): ban only on requests that cannot come from visitors
  
  robotizeit
  and
  claude
  committed
  c6caac4
- Merge pull request #11 from trydirect/feature/php-shell-detection
  vsilent
  authored
  74ca8ec
- fix(detectors): match webshell probes in the request URL only
  
  robotizeit
  and
  claude
  committed
  3139ff7
- docs(website): add a PHP shell quick start page
  
  robotizeit
  and
  claude
  committed
  38272b8
- chore: move the site domain to stackdog.app
  
  robotizeit
  and
  claude
  committed
  39a225a
- chore: bump version to v0.2.7
  
  robotizeit
  and
  claude
  committed
  188da61
- Merge pull request #12 from trydirect/fix/webshell-probe-quickstart-domain
  vsilent
  authored
  bb0cae3
- feat: flag PHP builds exposed to PHP2Shell and alert on PHP worker crashes
  
  robotizeit
  and
  claude
  committed
  4fb451f
- chore: bump version to v0.2.8
  
  robotizeit
  and
  claude
  committed
  87308cb
- Merge pull request #13 from trydirect/feature/php2shell-check
  vsilent
  authored
  1ade237
- feat: ban clients attempting PHP2Shell
  
  robotizeit
  and
  claude
  committed
  4450c89
- chore: bump version to v0.2.9
  
  robotizeit
  and
  claude
  committed
  bd08830
- Merge pull request #14 from trydirect/feature/php2shell-attempt-ban
  vsilent
  authored
  a5ab4cb
- fix(website): serve sitemap.xml and robots.txt from Next.js
  
  robotizeit
  and
  claude
  committed
  39fa82b
- Merge pull request #15 from trydirect/fix/website-sitemap
  vsilent
  authored
  1c915de
Commits on Nov 1, 2026
- feat(website): add PHP2Shell version check and fail2ban alternative pages
  robotizeit
  committed
  232a612
- Merge pull request #16 from trydirect/fix/website-sitemap
  vsilent
  authored
  9043482
Commits on Nov 2, 2026
Commits on Nov 3, 2026
- Merge pull request #19 from trydirect/fix/ui-polish
  vsilent
  authored
  c0de0a5
Commits on Nov 5, 2026
- docs(website): add a security article for AI-built startups
  robotizeit
  committed
  192023a
- Merge pull request #20 from trydirect/feat/website-ai-startup-security
  vsilent
  authored
  73a5cf1
Commits on Nov 9, 2026
Commits on Nov 11, 2026
- ci: post published releases to Discord via webhook
  robotizeit
  committed
  e251fb0
- Merge pull request #23 from trydirect/chore/bump-v0.3.0
  vsilent
  authored
  f3d2516
Commits on Nov 12, 2026
- feat: add Discord and Telegram notification channels
  robotizeit
  committed
  38729ab
- chore: fix crates.io metadata and trim the package
  robotizeit
  committed
  10a85b3
Commits on Nov 13, 2026
- feat: read config from ~/.config/stackdog and add stackdog init
  robotizeit
  committed
  53a8b23
- Merge pull request #24 from trydirect/feat/notification-channels
  vsilent
  authored
  64b4c5d
- Merge pull request #25 from trydirect/feat/registry-publish
  vsilent
  authored
  d5ca879
- Merge remote-tracking branch 'origin/main' into feat/xdg-config
  
  Copilot
  and
  vsilent
  authored
  8a68660
- Merge pull request #26 from trydirect/feat/xdg-config
  vsilent
  authored
  71d887b
- style: match the format check's rustfmt output
  robotizeit
  committed
  727cd3b
- style: match the format check's rustfmt output
  robotizeit
  committed
  d33d1f8
- Merge pull request #27 from trydirect/fix/format-xdg-config
  vsilent
  authored
  558d1df
- Merge pull request #28 from trydirect/feat/xdg-config
  vsilent
  authored
  b9e4382
- feat: match the package inventory against public CVE feeds
  robotizeit
  committed
  c451b4d
- Merge pull request #29 from trydirect/feat/cve-watch
  vsilent
  authored
  9f887da

Commits

Commits on Mar 10, 2021

Commits on Mar 12, 2021

Commits on Mar 23, 2021

Commits on Mar 29, 2021

Commits on May 10, 2021

Commits on May 17, 2021

Commits on Jun 16, 2021

Commits on Jun 21, 2021

Commits on Jul 26, 2021

Commits on Aug 30, 2021

Commits on Dec 27, 2021

Commits on Feb 7, 2022

Commits on Feb 9, 2022

Commits on Jul 23, 2024

Commits on Mar 14, 2026

Commits on Mar 16, 2026

Commits on Mar 17, 2026

Commits on Mar 19, 2026

Commits on Mar 30, 2026

Commits on Mar 31, 2026

Commits on Apr 2, 2026

Commits on Apr 3, 2026

Commits on Apr 4, 2026

Commits on Apr 5, 2026

Commits on Apr 6, 2026

Commits on Apr 7, 2026

Commits on Apr 8, 2026