commit log
- Port secmon ContainerEscapeMonitor::is_suspicious_mount to (jsecmon container) 36bd223 Jaime Fournier
- Port secmon SELinuxMonitor line parser to (jsecmon selinux) 7622e76 Jaime Fournier
- Port secmon KernelModuleMonitor::is_suspicious_module to (jsecmon kernmod) 3ae851a Jaime Fournier
- Port secmon NetworkMonitor::check_suspicious to (jsecmon netconn) aa0ff21 Jaime Fournier
- jsecmon: port SuspiciousPatterns process classifier as untyped layer 5044215 Jaime Fournier
- jsecmon: port monitor::dns_sniffer wire parser + dedup as untyped layer ad2b564 Jaime Fournier
- jsecmon: port stealth::obfuscate as a Typed Jerboa kernel 6247acc Jaime Fournier
- jsecmon: port secmon's buffer::ring as untyped (jsecmon buffer) ca55b01 Jaime Fournier
- yaml-rules: port secmon's user YAML detection-rule engine (untyped layer) 3fa78f1 Jaime Fournier
- sigma: port secmon's Sigma YAML rule importer (untyped layer) d690cc9 Jaime Fournier
- geoip: port secmon's GeoIP/ASN CSV loader + the geoip-gated impossible_travel detector fd77e11 Jaime Fournier
- threats: port frequency_spike, completing the detect_anomalies family e60c4fe Jaime Fournier
- triage-store: compute_triaged_ids bridge for triage-aware mode 098ac99 Jaime Fournier
- triage: port the remaining 12 false-positive rules (full 18-rule engine) 5addf08 Jaime Fournier
- threats: time-window aggregates (severity_cluster, off_hours, kill_chain) 6bc39a3 Jaime Fournier
- threats: sequence-pair chain detectors 165247c Jaime Fournier
- threats: SQL-aggregation detection rules (jsecmon threats) e4d33f0 Jaime Fournier
- storage: SQLite event store (jsecmon storage) on sqlite-native 5b5aa51 Jaime Fournier
- Add untyped (jsecmon detect) — kernel-driven detection, closing the pipeline 629e47b Jaime Fournier
- Add untyped (jsecmon analytics) risk ranking + incident grouping 76ad9e5 Jaime Fournier
- Add untyped (jsecmon triage) false-positive engine edb7bbb Jaime Fournier
- Add importable (jsecmon kernels) bridge library 94acf31 Jaime Fournier
- Prove the C ABI bridge: ordinary Jerboa drives the typed kernels f2401fc Jaime Fournier
- Port triage benign-event classifiers to Typed Jerboa 1ab7c88 Jaime Fournier
- Complete psk hex codec: decode + 32-byte precondition abbcb6b Jaime Fournier
- Port secmon per-host risk scoring to Typed Jerboa 433d9e1 Jaime Fournier
- Port secmon lolbin scoring to Typed Jerboa e3ba6d7 Jaime Fournier
- jsecmon: complete dga::score_domain end-to-end (multi-module) 08f621f Jaime Fournier
- jsecmon: add Bytes-based ASCII string toolkit (strbytes) 8d2c62b Jaime Fournier
- jsecmon: port dga score_domain scoring core (score-label) 83b8c5e Jaime Fournier
- jsecmon: port psk constant-time-eq + hex-encode crypto prims e45de92 Jaime Fournier
- jsecmon: port dga::shannon_entropy (nested for/fold + f64 math) 1e0c552 Jaime Fournier
- jsecmon: first verified kernel — dga::max_consonant_run in Typed Jerboa 3df4d37 Jaime Fournier