Skip to content

v0.3.0

Choose a tag to compare

@Polliog Polliog released this 11 Dec 15:30
· 4 commits to main since this release

🛡️ SIEM Dashboard & ⚡ Horizontal Scaling

This release introduces a complete Security Information and Event Management (SIEM) dashboard, C# SDK support, and horizontal scaling infrastructure.

✨ What's New

SIEM Dashboard & Incident Management (#5)

  • New Security Dashboard at /dashboard/security with 6 real-time widgets:
    • Summary stats (detections, incidents, open, critical)
    • Top threats chart (Sigma rules by detection count)
    • Detection timeline (time-series visualization)
    • Affected services list
    • Severity distribution pie chart
    • MITRE ATT&CK heatmap
  • Complete incident lifecycle: open → investigating → resolved → false_positive
  • Automatic incident grouping by trace ID and time window
  • Comments thread and activity history
  • PDF report export for incident documentation

C# / .NET SDK (#9)

  • Official C# SDK for LogWard integration
  • Configure via URL, port, and API key without modifying existing logging calls

Horizontal Scaling Support (#20)

  • Stateless backend architecture (all state in Redis/PostgreSQL)
  • Multiple backend instances can run simultaneously
  • BullMQ worker scaling with concurrent job processing
  • Updated docker-compose.yml to support multiple replicas
  • Health check endpoint for load balancer integration

🐛 Bug Fixes

  • Fix Docker build on Alpine 3.23 (postgresql16-client package naming)
  • Fix time window boundary race conditions in incident auto-grouping
  • Fix SSE endpoint test timeouts

Full Changelog: v0.2.4...v0.3.0