feat(dlp): implement SIEM/SOAR integrations (CEF, webhook, syslog, systemd timers)

2026-05-13 02:30:52 +03:00
parent 067457198d
commit fd2e9ac59d
15 changed files with 563 additions and 33 deletions
@@ -0,0 +1,9 @@
+aw_api_base: "http://127.0.0.1:5600/api/0"
+state_path: "/var/lib/activitywatch/dlp-integrations/webhook-state.json"
+retries: 4
+timeout_sec: 15
+backoff_base: 2.0
+per_bucket_limit: 300
+critical_webhooks:
+  - url: "https://hooks.slack.com/services/REPLACE/ME"
+    severity: ["high"]