teruelictis

• Use biliard to avoid "daemonic processes are not allowed to have children" in celery
• Restore doc_type="generic_event" used by timesketch even if it'll be deprecated in elastic 8

poecilogale

• Little refactoring to improve usage as imported library
• Add threat info to alerts if present
• Aligned dependencies to Timesketch requirements
• Added support for pip > 20 build

marbled polecat

news:

• Add support for "Comprehensive Investigative Details" .mans enhancement as #1
• Fixes NoneType found as #3
• Support clockskew as #5
• Fixes mans without hits.json as #6
• Improved logging

ermine

Small fixes

Some small fixes after new bulk test:

• Added timestamp field in microseconds (useful for timesketch context query)
• Added "processes-api" to processes items
• If object type has not been considered in dict skip it
• Check if selected time related fields are present, if not skip them
• Some alert were not taken correctly
• Some process_id for alerts are stored as string
• Some internal csv are not utf8 compliant
• Filedownloadhistory has different "time-related" keys for manual or auto download.

1.0

added pypi badge