Mick 21c8644443 Preserve parser_detected across syncs to prevent coverage regression ...

Before re-creating ActiveSource rows, snapshot existing parser_detected
values. When writing new rows, take max(new, previous) so a source that
was once confirmed as parsed (event.type present in the data lake) never
loses its Covered status due to a sampling gap, partial query result, or
SDL PowerQuery timeout during Sync All.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-05-22 12:07:03 -04:00

..

__init__.py

Initial commit: SIEM Toolkit for SentinelOne

2026-05-19 11:39:26 -04:00

coverage.py

Preserve parser_detected across syncs to prevent coverage regression

2026-05-22 12:07:03 -04:00

ingest.py

Cherry-pick improvements from PR #2 (marcredhat)

2026-05-22 10:11:42 -04:00

quality.py

Add unlabelled event detection, stub parser quality, Sync All, and modern UI redesign

2026-05-22 10:00:21 -04:00

query.py

Add health score, coverage trends, dependency map, PowerQuery playground, onboarding tracker

2026-05-22 11:09:43 -04:00

settings.py

Add unlabelled event detection, stub parser quality, Sync All, and modern UI redesign

2026-05-22 10:00:21 -04:00