Mick a50fd35934 Filter STAR rules to Library only (creator @sentinelone.com) ...

load-star-rules now defaults to library_only=true, filtering rules where
the creator email ends in @sentinelone.com. Custom tenant rules are excluded
by default. Pass ?library_only=false to load all rules.
Button label updated to "Load Library STAR Rules" to make intent clear.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-05-19 15:42:09 -04:00

..

__init__.py

Initial commit: SIEM Toolkit for SentinelOne

2026-05-19 11:39:26 -04:00

coverage.py

Filter STAR rules to Library only (creator @sentinelone.com)

2026-05-19 15:42:09 -04:00

ingest.py

Improve coverage map matching, bar chart gradients, and add 1h time filter

2026-05-19 12:43:10 -04:00

quality.py

Add Parser Quality page: Live Event Sampler, Field Population Rate, Parser Test Runner

2026-05-19 12:53:48 -04:00

settings.py

Add Settings page with .env manager

2026-05-19 11:43:41 -04:00