4b82d7c66c6c18e236f93500f88fd71a563eb76174ae75a46801c6a89740ba2d  .gitignore
3ed731b65d06150c138e2dadb0be0697550888a6b47eb8c45ecc9adba8b8e9bd  .pytest_cache/.gitignore
37dc88ef9a0abeddbe81053a6dd8fdfb13afb613045ea1eb4a5c815a74a3bde4  .pytest_cache/CACHEDIR.TAG
73fd6fccdd802c419a6b2d983d6c3173b7da97558ac4b589edec2dfe443db9ad  .pytest_cache/README.md
505ea4694dc6d2ddaf5642817c0a3dbe4e2976d76ca8187b8cef09737f4ebd20  .pytest_cache/v/cache/nodeids
40e074e779bc95e352087a66d0921dc6cf3740a6c1b59b108eb67bfd43e7151c  LICENSE
ab4b8e8eaea1ecc922f430d7a7b1cc69dac2181d80391ca3ca23ed52df9ffefb  README.md
bddb333d4064e4f54e2aa8bb21ba90b001eed09120da08e0991a7e6475905e48  dashboards/charts/01_architecture.png
d3d118cffd0d9c4437889f2962d0202227c0d4d8fb12fcf39adc5dcd9d585584  dashboards/charts/02_alert_funnel.png
084ff44721b889fc853c31358171121ee79600ee417f7f308ad5cc067b8f01a8  dashboards/charts/03_incident_severity.png
2f971bd23e631c9696bc06d7a67d9ca0c3d9b030cdfa4c6675d8750945d4600a  dashboards/charts/04_client_operations.png
f830ee62ee118149a8b098267dd14801c2a85f9fe282061e982eba614583731d  dashboards/charts/05_telemetry_coverage.png
6c46be1e4e7b6fd6393c1a6f3b1477cad79c6aa189e1d2ef0083aa72efa43673  dashboards/charts/06_mitre_coverage.png
e0ab148932f04b727012f94dbb23ee3b5cb945dc2663176a116cee707d0f5e6a  dashboards/charts/07_daily_activity.png
b26b5a86123f73377ff5c9af55667e91c5f1e3a1c31cbfc4c445a54870c9fde2  dashboards/charts/08_kpi_summary.png
554a887d25c4a1a5e8ad52105cbbc606b9ce372e27ebdd9318499d7d970948dd  dashboards/data/dashboard_kpis.json
a2103d8599de8661a4410c08af276432fc97bcc5c18fec934e9d38c285541ca2  data/processed/alerts_raw.csv
75c6628418740d8a083a5cd834db60af64d37710640c2f8e0e4096bb82675635  data/processed/alerts_tuned.csv
141dea05842c6790643348cc323d9b2c77b37493cbc20c25c262d8a10ee93101  data/processed/asset_inventory.csv
6044c24491d7b8668399a8a51dd8c9f97fe2e3724849dafa200ba31764e461e8  data/processed/events_normalized.csv
54190aba2495e3e3bbf1f1cc9adead7d3f500e02d1aa6aa5742a1622c61adc4d  data/processed/exclusion_register.csv
3e81c9567ad5ad56cb97dd16070ca86b8e881f2650d616ac6dc30ab4b0ec92b6  data/processed/false_positive_cases.csv
793e3215839c719691ee4fe78e3197d44e44134d39d412a8f876ae458cd5a073  data/processed/incidents.csv
1421132193e74e1feddff60fe8a73fb52344e2f7a8feb2010ee872a61dc4a8c0  data/processed/mitre_coverage.csv
a73e585486742fbdc009656132e6d9c48a7fab845c414c55415ff13c4a71dbd9  data/processed/telemetry_coverage.csv
8f292cffa00ac0d14e01be47e22260faf15b672b37724b30b1bfc846b3f752a9  data/raw/cloud_sample.csv
c32e2bf8b2ae4e4107f93e84a7106c21ffd31bd1457dd97aeee9e278ce1599c1  data/raw/endpoint_sample.csv
56b097b39da680afbcd07250a151ec44ea2e08d500ac951d8a15c6e52f58f245  data/raw/identity_sample.csv
423a19f9a1daf185e9aabbe51e0a2e2438257775180ffaeeed4250a7a8a168a5  data/raw/mobile_sample.csv
df80a3ca1380effb6520f9dcab2e1fef59f3b847dfe166c7d8c50b125ee8a5d8  data/raw/network_sample.csv
5afcb60b82cfa7489566d4ebab05ed47e3e4212f9e8743d1f597234be24b3a4b  data/reference/clients.csv
e878c742f43ddd7052c51a2049e3dd35b796f657235cdd85dad1526c1b274645  data/reference/detection_catalog.csv
dcd979241a300339060bea1d1b3130279c689e6954f021310daa3462ba592871  docs/HELIOS_Micro_SOC_XDR_Report.docx
8fa25438d6e8e6af6cf5c665dbae0666cb5296c239d215f136959e68aa9c59ee  docs/HELIOS_Micro_SOC_XDR_Report.pdf
f603bb0e6016f778dd768a1a276d0503a040e6279e25494d471035b049d30e03  docs/architecture.md
9b6688b6a452d0d81ab1f7260db1bcbfa50acfb6e775eb14f3954b6182b64b84  docs/client_executive_brief.md
2a3011f4f290d0966cabbf780c14ea7a81fc75577ead09cbdd18c5a201403d93  docs/data_dictionary.md
1156f91aa9d688cdcac800961e021d00ba17d7339d9cb7b5899a9d7823b697a8  docs/example_incident_report.md
1a7a1511087569667ac041083422598413b6b13e41bca1c3e539386b42684f99  docs/methodology.md
26321fa17059cdd61d18f39ef8335e36af70dabe0175517c43b2dfcac628ed26  docs/sources.md
7a8de4cd1a788029d3b240e07fe818288a671189a9cf6806f763915dafafa782  docs/technical_specification.md
d264769eed74b306dec4099fad72bb01b1750eab2bb32cdde41befde0d722c67  evidence/rule_test_results.csv
fb08bed08d0d80bab672aaba882d6a5773d76cd4df7ecebf1e85edce64d17a9f  infra/docker-compose.yml
c7dfae2f4f403ef67de3b05729e92985a8be28f8061e47b3a20c63d12e160950  model/HELIOS_Micro_SOC_XDR_Model.xlsx
552a6c860c88b66989535c48adb75088f289e4887da43b6723b8c4a64a7becf9  notebooks/01_telemetry_normalization.ipynb
03de6ffdb688a966d34576298584fd0cc2aad7604bdb5b8a1fa835821a70d140  notebooks/02_detection_tuning.ipynb
822502871e9230271c11f6aa1e57957febf0b2daf6a8c226c57e14bb99c8757d  notebooks/03_incident_response.ipynb
fa3ac80a7f95e00dc571873359e725bc84fb1402ad5c50953364fbc2f910c6c2  notebooks/04_metrics_qa.ipynb
51982deec6e1aece2cd06cd7209ff0b44208ca6cf469ae740b7eb21e88e82bca  playbooks/PB01_Endpoint_Malware.md
574a0fb45b07ba1e2a02223cc1d6272e001f0eef1b2b03aea08200d9a15c46dd  playbooks/PB02_Identity_Compromise.md
dd6f9653af8b47fe7e0907eb32780c7cf13371d2a5e800377d5b315eb113ca30  playbooks/PB03_Cloud_Privilege_Abuse.md
26cb95b0b1dda28c63b6faa4cca8adb0898d8249d3534bfef3943f434920489c  playbooks/PB04_Mobile_Risk.md
0e7884fb5d7d2098f88085201cc801c4ea4abd61e2d53c848f19c267be393764  playbooks/PB05_Ransomware.md
145930b1541a6892908d000c3f75721d05e111c3c11b16ccecdabf8dd44794e2  pyproject.toml
de1c90fc1ab9d8ea21533a229fc4b2394ea4264011d67d82409aba5cc691de1a  qa/PROJECT_INVENTORY.md
97e7e4659cefb75880a106db4a6d28f684362f239545128eb4edccc2761ea04c  qa/QA_REPORT.md
c18b5dd51b4fe16bde7395965288a932fc745e25e4d35fc04c7583e110882bcc  qa/acceptance_test_results.csv
a0494dcdca6ea15ea5a6e6fa24f1274ec99a6c90524acf037517fdc36dafdbce  qa/excel_dashboard_preview.png
1177180bfc55f81dc323cd269084ae25926025995441007cd1fb425419e9686e  qa/formula_inventory.csv
362135bdd0aca07c20621f87627a309b17dc3642fb8669ded740c86b9689fe5c  requirements.txt
32cd2f51916b798384ee77c1a6b45726be0fbf35b2a39aa53a7edb373743edf1  rules/correlation/r012_mobile_rooted.yml
81e92ea2dd6d397bbe1db2e7b37a1227706342cc972b382c2b0028e82bdbd945  rules/correlation/r013_risky_sideload_app.yml
d20cb0bbc01cfda8e3c4aafe4bfa8d5e1f0773e6571acf493eceb065b333aa7b  rules/correlation/r014_mobile_network_threat.yml
6a6a90e1851ef8c8700799ec29a170410681771413874f1426e89e0023e8bfd0  rules/correlation/r022_mfa_fatigue.yml
ef3bc6f33f2a2d62f1dba592d46ffc72b8ce7bceab3045bd1eef5bfb31afb9c5  rules/correlation/r023_legacy_auth_sensitive.yml
8da518a4b1dee44b4f6680db1bb52bea41624994cc3decacab506be11c5e226f  rules/kql/r006_failed_then_success.kql
0496354b42c292b9843bad86f25d2ed5d94aff6ce49b610bbe09f7627df4a874  rules/kql/r007_impossible_travel.kql
5ff86dc522642a37467d17d084f470a4fe692012754e057ac6e3f768956ce157  rules/kql/r008_oauth_consent_high_priv.kql
624225c553a53c1828612c83098c3527a09f6c57220519081f5fc435c861be83  rules/kql/r009_global_admin_assignment.kql
01d7d030bd5049a4135542b581398f1f1bd51186eadcf9b0993f6d6c13b87d5b  rules/kql/r010_public_storage_policy.kql
62beebc19c46748c9d5b40042678283e9f2d88c6bedbf503e9e8ae3f8e7b45c6  rules/kql/r011_high_volume_download.kql
b2f12cb6b8cfa0b4ebe68f5419568ce2d51a73e193f0e48c38b4057fe95352a1  rules/sigma/r001_powershell_encoded.yml
3881049b3f90edf0ed4715244c6020248ec23e08ae255dfbcd1da0baac236843  rules/sigma/r002_lsass_access.yml
958e3d64418aab894c62e8430541ccfb7dff7735ef16c7941f616f7f8e801c41  rules/sigma/r003_office_child_process.yml
ca537f624701be7259bf8b2353c4806d3386490ac2c74ae16808fa5de5525083  rules/sigma/r004_mass_file_rename.yml
77b25eb72a9b4f56d373d8dcc77e1b65ae34302a060997a414dd6cfe54e66b48  rules/sigma/r005_lolbin_download.yml
0353ecdc1f6f6d16734ffdaa670bb4ed618769a403eebf59d834dc5e8d8263f2  rules/sigma/r024_archive_staging.yml
2631ea79e06f36793965afb904fe000242595ac1880f05c8e6efc50de7e00f67  rules/suricata/helios.rules
2688f3cb1c401ca5e11e9997fb53a6fc39b95436b5c84bb2c751561d884c8260  rules/wazuh/helios_custom_rules.xml
f213ac34ac69f57c014a571e9cdddac28ea11df2a19b61c95208dd4a91457765  run_pipeline.py
c596b014587cd2e8fb30730925758572ece45f6f5f5641ee4b9353e5d24c09ff  src/helios_soc/__init__.py
168dbea2233ad55965bc33d6b4125f43434a9a7b5baa54d90137940c4a2db0e1  src/helios_soc/pipeline.py
769e79f77720a31f9c74f290dedf0114da52f20a7e8b74f03da8246191d62f92  tests/test_pipeline.py
65cddfb08584db23895a478582dd4bf0a66c96d85a635d1e8e3642a25183928e  tools/build_visual_assets.py
bf3a887b79ebb57d2da3510e7baf6f2bb6a67d1a2a334e5017e433519bfcb480  website/LOVABLE_PROMPT_FR.md
5d682f0eda5279c3c7b8962ed556fe4018ebfb983b265bf8edf56ae795b0ff70  website/README.md
4d28bb96688218f2b443c176ac02f560a748a6e92515ba6dc6f35a30c271580a  website/content_manifest.json
c7dfae2f4f403ef67de3b05729e92985a8be28f8061e47b3a20c63d12e160950  website/public/downloads/HELIOS_Micro_SOC_XDR_Model.xlsx
8fa25438d6e8e6af6cf5c665dbae0666cb5296c239d215f136959e68aa9c59ee  website/public/downloads/HELIOS_Micro_SOC_XDR_Report.pdf
97e7e4659cefb75880a106db4a6d28f684362f239545128eb4edccc2761ea04c  website/public/downloads/QA_REPORT.md
1a7a1511087569667ac041083422598413b6b13e41bca1c3e539386b42684f99  website/public/downloads/methodology.md
7a8de4cd1a788029d3b240e07fe818288a671189a9cf6806f763915dafafa782  website/public/downloads/technical_specification.md
e1ad1c34963743ca9d3c4d742d54c07fc6ec61199de83226fd88acaf7bab81e3  website/src/data/alert_funnel.json
cb94e5a4dc35873fc86ad4706a8ecb5e8037d2909ac9df00a37d6e0053fb1594  website/src/data/client_operations.json
554a887d25c4a1a5e8ad52105cbbc606b9ce372e27ebdd9318499d7d970948dd  website/src/data/dashboard_kpis.json
a0b2fa9384aa7cc9b33ef6d059bed94aa44bae9bde7b26f0ba344ae348f33085  website/src/data/detection_rules.json
bcaef30b50d27728415c5ee016a124a3ec36f2cd1413845cd27d4530dbf7000c  website/src/data/incident_severity.json
2807a324e0de0bbac399a19f713534e21175b2a98e25522f1137f372f9e0cc81  website/src/data/mitre_coverage.json
fc62b8726a2c95d7b6881e4e8db6b9b4c5ec5b5ead2bed395ef8053b6555dae1  website/src/data/qa_controls.json
651ede123b23bdb3601b1ba4acae39edbe0c7435e4efb0020e7372bede734a5f  website/src/data/roadmap.json
b8bab9e87162aec6c99d9bd417ebf4935fcdb7ada855e3b156c4756c893cb81e  website/src/data/telemetry_coverage.json
