marc 8dbd38f3bb Fix Parser Test Runner JSON mode, Filter Simulator PQ syntax, dropdown source ...

- backend/routers/quality.py
 * Add GET /api/quality/parsers (lists actual files in /app/parsers)
 * Support SDL JSON auto-extract parsers ($=json{parse=json}$)
 * Apply parser rewrite blocks with correct $0/$N backref translation
 * Accept single JSON / JSON array / NDJSON in test-parser body
 * Flatten JSON inside 'message' for Field Population coverage
- backend/routers/ingest.py
 * Rewrite simulate-filter PowerQuery to valid SDL syntax
 * Correct field name: src.name -> dataSource.name
- frontend/index.html
 * Parser dropdown loads from /api/quality/parsers
 * Add 'Last 7d' lookback option
 * Render JSON-mode test results with badges + payload counter

2026-05-20 19:40:24 +02:00

..

__init__.py

Initial commit: SIEM Toolkit for SentinelOne

2026-05-19 11:39:26 -04:00

coverage.py

Add Detection Fields Missing column + STAR_LIBRARY_ONLY setting

2026-05-19 15:46:05 -04:00

ingest.py

Fix Parser Test Runner JSON mode, Filter Simulator PQ syntax, dropdown source

2026-05-20 19:40:24 +02:00

quality.py

Fix Parser Test Runner JSON mode, Filter Simulator PQ syntax, dropdown source

2026-05-20 19:40:24 +02:00

settings.py

Add Detection Fields Missing column + STAR_LIBRARY_ONLY setting

2026-05-19 15:46:05 -04:00