karl created branch main in karl/ghostwire 2026-10-11 05:58:53 +00:00
karl created repository karl/ghostwire 2026-10-11 05:56:59 +00:00
karl pushed to main at karl/citrixpot 2026-10-07 05:33:23 +00:00
4ab9411aca Improve Gateway authentication and static HTTP fidelity
karl pushed to main at karl/NetScaler_forensik 2026-10-05 14:54:17 +00:00
837a7ec184 Add public search indicators to default catalog and Sigma rules
karl pushed to main at karl/NetScaler_forensik 2026-10-05 14:44:32 +00:00
b709b311d0 Document completed supplemental data validation and coverage limits
karl pushed to main at karl/NetScaler_forensik 2026-10-05 14:18:18 +00:00
b4fd5fb6ff Expand offline review checks and fix relative output finalization
karl pushed to main at karl/NetScaler_forensik 2026-10-05 12:13:39 +00:00
83f53adb29 Add streaming filesystem triage and German usage guide
karl pushed to main at karl/NetScaler_forensik 2026-10-05 05:27:54 +00:00
ae5a1a1e54 Fix pySigma RE2 compatibility in fresh installations
karl pushed to main at karl/NetScaler_forensik 2026-10-05 05:01:35 +00:00
ff8dc9ee7a Validate result views on real evidence and expose file-hash matches
karl pushed to main at karl/NetScaler_forensik 2026-10-05 04:55:50 +00:00
7ee77c3fc2 Remove duplicate plain-text README and consolidate documentation
karl pushed to main at karl/NetScaler_forensik 2026-10-05 04:54:18 +00:00
8c3a90225f Simplify scan results with readable summary and matched-event CSV
karl pushed to main at karl/citrixpot 2026-10-04 05:03:29 +00:00
42561bfa34 Document supported vectors, simulation capabilities and coverage matrix
karl pushed to main at karl/citrixpot 2026-10-04 04:58:00 +00:00
4da3f54e77 Capture bounded SAML envelopes and document proxy limits
karl pushed to main at karl/citrixpot 2026-10-04 04:48:23 +00:00
d3b8967aa7 Improve Gateway fingerprints and header/body coverage
karl pushed to main at karl/citrixpot 2026-10-04 04:16:31 +00:00
c65f049223 Expand capture-only NetScaler NITRO simulation and crash recovery
karl created branch main in karl/NetScaler_forensik 2026-10-01 21:08:51 +00:00
karl pushed to main at karl/NetScaler_forensik 2026-10-01 21:08:51 +00:00
711c42b270 Initial release: offline NetScaler triage with Sigma rules and MIT license
karl created repository karl/NetScaler_forensik 2026-10-01 21:06:06 +00:00
karl pushed to main at karl/citrixpot 2026-09-28 18:13:27 +00:00
7b99db9e25 viewer: raw-bytes prefilter to skip JSON parsing on non-matching lines
karl pushed to main at karl/citrixpot 2026-09-28 18:11:21 +00:00
d74bd7ce56 viewer: stream artifacts, skip unchanged live refresh, debounce search