feat: add red-blue correlation engine and learning system for investigation coverage#26

Merged

l50 merged 6 commits into

mainfrom

jayson/cap-822-add-aws-ssm-remote-execution-enhance-bluered-tooling

Jan 11, 2026

Commits on Jan 10, 2026

feat: add remote command execution via AWS SSM and blue team detection query templates
l50
committed
refactor: replace signal-based timeout with watchdog thread in investigation agent
l50
committed
feat: add robust log management, enforce query limits, and improve investigation flow
l50
committed

Commits on Jan 11, 2026