First public release under the Vervet name (formerly Bro Hunter).
- Rebranded to Vervet; relicensed MIT -> Apache-2.0.
- One-command demo:
docker compose up -d --build-> populated dashboard on :8000. - Reads Zeek + Suricata logs; explainable per-host scoring with MITRE ATT&CK mapping.
- Fixed the unified threat engine, which previously crashed on any ingested alert or detected beacon (the per-host scoring path now runs end to end).
- Test suite green (233 passing); CI added.
Note: the OSS edition keeps its analysis index in memory. See the README roadmap for durable persistence.
Full notes in CHANGELOG.md.