-
Notifications
You must be signed in to change notification settings - Fork 5
All issues
Issue creation is restricted in this repository
Issues
is:issue state:open
is:issue state:open
Search results
Phase 2 — Recycle Bin INFO2 / $I$R metadata parser (CFReDS gap G-003)
area:mcpArea: dart-mcp (typed forensic surface)Area: dart-mcp (typed forensic surface)phase-2Phase 2 — Agentic detection engineeringPhase 2 — Agentic detection engineeringpost-sansDefer until after SANS submission (Jun 15)Defer until after SANS submission (Jun 15)status:todoNot yet startedNot yet startedStatus: Open.#54 In Juwon1405/agentic-dart;Phase 2 — YARA rule library bundling (CFReDS gap G-004)
area:mcpArea: dart-mcp (typed forensic surface)Area: dart-mcp (typed forensic surface)discussionNeeds design discussion before implementingNeeds design discussion before implementingphase-2Phase 2 — Agentic detection engineeringPhase 2 — Agentic detection engineeringpost-sansDefer until after SANS submission (Jun 15)Defer until after SANS submission (Jun 15)status:todoNot yet startedNot yet startedStatus: Open.#55 In Juwon1405/agentic-dart;Phase 2 — IE6 / Outlook Express index.dat parser (CFReDS gap G-002)
area:mcpArea: dart-mcp (typed forensic surface)Area: dart-mcp (typed forensic surface)phase-2Phase 2 — Agentic detection engineeringPhase 2 — Agentic detection engineeringpost-sansDefer until after SANS submission (Jun 15)Defer until after SANS submission (Jun 15)status:todoNot yet startedNot yet startedStatus: Open.#53 In Juwon1405/agentic-dart;Phase 2 — Generic SOFTWARE/SYSTEM/SAM hive value extraction (CFReDS gap G-001)
area:mcpArea: dart-mcp (typed forensic surface)Area: dart-mcp (typed forensic surface)phase-2Phase 2 — Agentic detection engineeringPhase 2 — Agentic detection engineeringpost-sansDefer until after SANS submission (Jun 15)Defer until after SANS submission (Jun 15)status:todoNot yet startedNot yet startedStatus: Open.#48 In Juwon1405/agentic-dart;Phase 2 — Public DFIR dataset integration (NIST CFReDS / Ali Hadi / DFRWS / BOTS)
phase-2Phase 2 — Agentic detection engineeringPhase 2 — Agentic detection engineeringpost-sansDefer until after SANS submission (Jun 15)Defer until after SANS submission (Jun 15)roadmapRoadmap discussionRoadmap discussionstatus:todoNot yet startedNot yet startedStatus: Open.#47 In Juwon1405/agentic-dart;Activate v3 framework scaffolds at runtime (deferred during SANS window)
area:agentArea: dart-agent (loop)Area: dart-agent (loop)area:playbookArea: dart-playbook (YAML rules)Area: dart-playbook (YAML rules)phase-2Phase 2 — Agentic detection engineeringPhase 2 — Agentic detection engineeringpost-sansDefer until after SANS submission (Jun 15)Defer until after SANS submission (Jun 15)status:todoNot yet startedNot yet startedStatus: Open.#44 In Juwon1405/agentic-dart;Activate three dormant detection patterns (deferred during SANS window)
area:mcpArea: dart-mcp (typed forensic surface)Area: dart-mcp (typed forensic surface)phase-2Phase 2 — Agentic detection engineeringPhase 2 — Agentic detection engineeringpost-sansDefer until after SANS submission (Jun 15)Defer until after SANS submission (Jun 15)status:todoNot yet startedNot yet startedStatus: Open.#43 In Juwon1405/agentic-dart;Playbook v2 — automatic case-class detection in dart-agent loader
accuracyAccuracy / detection-rate workAccuracy / detection-rate workarea:agentArea: dart-agent (loop)Area: dart-agent (loop)area:playbookArea: dart-playbook (YAML rules)Area: dart-playbook (YAML rules)post-sansDefer until after SANS submission (Jun 15)Defer until after SANS submission (Jun 15)status:todoNot yet startedNot yet startedStatus: Open.Wiki — write 'Forking the playbook' guide for SOC analysts
area:docsArea: documentation / wikiArea: documentation / wikiarea:playbookArea: dart-playbook (YAML rules)Area: dart-playbook (YAML rules)post-sansDefer until after SANS submission (Jun 15)Defer until after SANS submission (Jun 15)status:todoNot yet startedNot yet startedStatus: Open.Playbook v2 — write case-class-specific playbooks for ransomware/vishing/identity
area:playbookArea: dart-playbook (YAML rules)Area: dart-playbook (YAML rules)phase-2Phase 2 — Agentic detection engineeringPhase 2 — Agentic detection engineeringpost-sansDefer until after SANS submission (Jun 15)Defer until after SANS submission (Jun 15)status:todoNot yet startedNot yet startedStatus: Open.Case-class playbook: identity-centric-v1 (Kerberoasting / AS-REP / Golden Ticket)
area:playbookArea: dart-playbook (YAML rules)Area: dart-playbook (YAML rules)phase-2Phase 2 — Agentic detection engineeringPhase 2 — Agentic detection engineeringpost-sansDefer until after SANS submission (Jun 15)Defer until after SANS submission (Jun 15)status:todoNot yet startedNot yet startedStatus: Open.Case-class playbook: vishing-initial-access-v1 (M-Trends 2026 #2 vector, 11%)
area:playbookArea: dart-playbook (YAML rules)Area: dart-playbook (YAML rules)phase-2Phase 2 — Agentic detection engineeringPhase 2 — Agentic detection engineeringpost-sansDefer until after SANS submission (Jun 15)Defer until after SANS submission (Jun 15)status:todoNot yet startedNot yet startedStatus: Open.