Mick 21c8644443 Preserve parser_detected across syncs to prevent coverage regression ...

Before re-creating ActiveSource rows, snapshot existing parser_detected
values. When writing new rows, take max(new, previous) so a source that
was once confirmed as parsed (event.type present in the data lake) never
loses its Covered status due to a sampling gap, partial query result, or
SDL PowerQuery timeout during Sync All.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-05-22 12:07:03 -04:00

..

routers

Preserve parser_detected across syncs to prevent coverage regression

2026-05-22 12:07:03 -04:00

services

Cherry-pick improvements from PR #2 (marcredhat)

2026-05-22 10:11:42 -04:00

db.py

Add health score, coverage trends, dependency map, PowerQuery playground, onboarding tracker

2026-05-22 11:09:43 -04:00

Dockerfile

Initial commit: SIEM Toolkit for SentinelOne

2026-05-19 11:39:26 -04:00

main.py

Add health score, coverage trends, dependency map, PowerQuery playground, onboarding tracker

2026-05-22 11:09:43 -04:00

requirements.txt

Initial commit: SIEM Toolkit for SentinelOne

2026-05-19 11:39:26 -04:00