Tomas Kracmar e348881083 feat: Admin Operations SIEM — alerts, notifications, pre-built rules ...

- Add pluggable notification system (webhook, Slack, Teams) with retry
- Add alert deduplication: same rule + actor within 15 min = one alert
- Add 10 pre-built admin-ops rule templates seeded on startup:
  - Failed Conditional Access, After-Hours Admin Activity
  - New Application Registration, Admin Role Assignment
  - License Change, Bulk User Deletion
  - Device Compliance Failure, Exchange Transport Rule Change
  - Service Principal Credential Added, External Sharing Enabled
- Add /api/alerts, /api/alerts/{id}/status, /api/alerts/summary endpoints
- Add alert dashboard to frontend with status filters and ack/resolve buttons
- Add alert summary badge in hero header (high/medium/low counts)
- New env vars: ALERT_WEBHOOK_URL, ALERT_WEBHOOK_FORMAT, ALERT_DEDUPE_MINUTES

2026-04-22 14:12:36 +02:00

..

frontend

feat: Admin Operations SIEM — alerts, notifications, pre-built rules

2026-04-22 14:12:36 +02:00

graph

style: apply ruff formatting to all backend files

2026-04-16 18:58:41 +02:00

models

feat: Redis caching + async queue for LLM scaling (v1.6.0)

2026-04-22 09:55:05 +02:00

routes

feat: Admin Operations SIEM — alerts, notifications, pre-built rules

2026-04-22 14:12:36 +02:00

sources

style: apply ruff formatting to all backend files

2026-04-16 18:58:41 +02:00

tests

feat: Admin Operations SIEM — alerts, notifications, pre-built rules

2026-04-22 14:12:36 +02:00

utils

style: apply ruff formatting to all backend files

2026-04-16 18:58:41 +02:00

audit_trail.py

feat: implement Phase 4 enhancements

2026-04-14 15:38:39 +02:00

auth.py

feat: service-level role gating for privacy-sensitive services (Option A)

2026-04-22 07:26:21 +02:00

config.py

feat: Admin Operations SIEM — alerts, notifications, pre-built rules

2026-04-22 14:12:36 +02:00

database.py

feat: Admin Operations SIEM — alerts, notifications, pre-built rules

2026-04-22 14:12:36 +02:00

Dockerfile

fix: bake version into Docker image at build time

2026-04-20 17:24:20 +02:00

jobs.py

style: ruff format

2026-04-22 10:08:32 +02:00

main.py

feat: Admin Operations SIEM — alerts, notifications, pre-built rules

2026-04-22 14:12:36 +02:00

maintenance.py

style: apply ruff formatting to all backend files

2026-04-16 18:58:41 +02:00

mapping_loader.py

feat: implement Phase 2 stabilization

2026-04-14 12:02:28 +02:00

mappings.yml

First version

2025-11-28 21:43:44 +01:00

mcp_common.py

feat: MCP server over SSE with OIDC auth

2026-04-21 07:38:12 +02:00

mcp_server.py

feat: MCP server over SSE with OIDC auth

2026-04-21 07:38:12 +02:00

metrics.py

style: apply ruff formatting to all backend files

2026-04-16 18:58:41 +02:00

middleware.py

feat: implement Phase 3 scaling

2026-04-14 14:58:50 +02:00

notifications.py

feat: Admin Operations SIEM — alerts, notifications, pre-built rules

2026-04-22 14:12:36 +02:00

redis_client.py

feat: Redis caching + async queue for LLM scaling (v1.6.0)

2026-04-22 09:55:05 +02:00

requirements-dev.txt

feat: implement Phase 2 stabilization

2026-04-14 12:02:28 +02:00

requirements.txt

feat: Redis caching + async queue for LLM scaling (v1.6.0)

2026-04-22 09:55:05 +02:00

rules.py

feat: Admin Operations SIEM — alerts, notifications, pre-built rules

2026-04-22 14:12:36 +02:00

siem.py

feat: implement Phase 4 enhancements

2026-04-14 15:38:39 +02:00

watermark.py

fix(auth): resolve JWT InvalidSignatureError and improve frontend UX

2026-04-16 11:32:45 +02:00