- Layer 4 EntropyScanner: Shannon entropy, Base32/Base64 detection, CVE-2025-55284 ping/nslookup exfil, EchoLeak markdown pattern, DNS tunneling (iodine/dnscat) - Layer 5 UnicodeScanner: ASCII Smuggling (U+E0000 Tags Block), Variant Selectors, Zero-Width steganography, CamoLeak image-ordering (CVE-2025-53773), homoglyphs, BiDi override, high-entropy URL params - 30 DNS covert channel rules (dns-001 to dns-030) - ATLASMapper: 29 techniques (ATLAS v5.4.0 Feb 2026), added AML.T0062 (Agent Tool Invocation), AML.TA0015 (C2 tactic), memory poisoning, multi-agent trust, CamoLeak, Unicode steganography mappings - Rule count: 72 → 102 - Build: tsup 316ms, zero TypeScript errors
31 lines
696 B
YAML
31 lines
696 B
YAML
services:
|
|
postgres:
|
|
image: pgvector/pgvector:pg17
|
|
container_name: shieldx-postgres
|
|
environment:
|
|
POSTGRES_DB: shieldx
|
|
POSTGRES_USER: shieldx
|
|
POSTGRES_PASSWORD: shieldx_dev_password
|
|
ports:
|
|
- "5432:5432"
|
|
volumes:
|
|
- shieldx-postgres-data:/var/lib/postgresql/data
|
|
healthcheck:
|
|
test: ["CMD-SHELL", "pg_isready -U shieldx -d shieldx"]
|
|
interval: 5s
|
|
timeout: 5s
|
|
retries: 5
|
|
|
|
chromadb:
|
|
image: chromadb/chroma:latest
|
|
container_name: shieldx-chroma
|
|
ports:
|
|
- "8000:8000"
|
|
volumes:
|
|
- shieldx-chroma-data:/chroma/chroma
|
|
profiles: ["chroma"]
|
|
|
|
volumes:
|
|
shieldx-postgres-data:
|
|
shieldx-chroma-data:
|