duffyduck 389b878dbd Monitoring: Threshold-Debounce auf sliding-window (statt floor-to-hour) ...

Bug: zweimal CRITICAL-Alert für dieselbe Brute-Force-Erkennung kam an.

Ursache: detectThresholds() hat als Cutoff für den "existing"-Check
floor(now, hour) genutzt. Bei Stundenwechsel resettete der Bucket
und der nächste Cron-Lauf fand nichts mehr "in der aktuellen Stunde"
→ erzeugte zweites SUSPICIOUS-Event → zweite Mail.

Fix: gleitendes 60min-Fenster (now - 60min). Pro IP gibt es jetzt
zuverlässig max. 1 CRITICAL-Alert pro Stunde, unabhängig von der
absoluten Uhrzeit.

Live-verifiziert in DB: zwei Alerts kamen um 07:41 und 08:00 –
genau das Pattern, das der Stunden-Reset erzeugt.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

2026-05-01 10:11:52 +02:00

..

emailProvider

Fix: Provider-Domain greift sofort + Domain-Validierung

2026-04-23 15:51:16 +02:00

appSetting.service.ts

complete new audit system

2026-03-21 18:23:54 +01:00

audit.service.ts

complete new audit system

2026-03-21 18:23:54 +01:00

auth.service.ts

Security-Hardening Runde 5: Hack-Das-Ding (DSGVO-GAU + Timing + XSS)

2026-04-25 00:21:37 +02:00

authorization.service.ts

Datenschutz vollmacht fixed, two time counter added

2026-03-21 16:42:31 +01:00

backup.service.ts

Security-Hardening Runde 2: Zip-Slip, Mass Assignment, weitere IDORs, Path-Traversal

2026-04-23 22:59:28 +02:00

birthday.service.ts

Fix: Emoji im Plain-Text für Messenger entfernt

2026-04-23 12:55:06 +02:00

birthdayScheduler.service.ts

Version 1.0.0: Passwort-Reset + Rate-Limiting + Auto-Geburtstagsgrüße

2026-04-23 17:14:27 +02:00

cachedEmail.service.ts

complete new audit system

2026-03-21 18:23:54 +01:00

cancellation-period.service.ts

complete new audit system

2026-03-21 18:23:54 +01:00

consent-public.service.ts

gdpr audit implemented, email log, vollmachten, pdf delete cancel data privacy and vollmachten, removed message no id card in engergy car, and other contracts that are not telecom contracts, added insert counter for engery

2026-03-21 11:59:53 +01:00

consent.service.ts

complete new audit system

2026-03-21 18:23:54 +01:00

contract-duration.service.ts

complete new audit system

2026-03-21 18:23:54 +01:00

contract.service.ts

Typspezifische Zusatzinfos in Vertragslisten

2026-04-23 10:19:04 +02:00

contractCategory.service.ts

complete new audit system

2026-03-21 18:23:54 +01:00

contractCockpit.service.ts

complete new audit system

2026-03-21 18:23:54 +01:00

contractHistory.service.ts

complete new audit system

2026-03-21 18:23:54 +01:00

contractStatusScheduler.service.ts

Vertragsstatus-Trigger: Datum beim Upload miterfassen

2026-04-24 13:40:04 +02:00

contractTask.service.ts

complete new audit system

2026-03-21 18:23:54 +01:00

customer.service.ts

Fix: Anrede per Du/Sie wird nicht gespeichert

2026-04-23 13:10:03 +02:00

emailLog.service.ts

gdpr audit implemented, email log, vollmachten, pdf delete cancel data privacy and vollmachten, removed message no id card in engergy car, and other contracts that are not telecom contracts, added insert counter for engery

2026-03-21 11:59:53 +01:00

factoryDefaults.service.ts

Factory-Defaults: Export + Import von Stammdaten-Katalogen

2026-04-23 14:10:12 +02:00

fileDownload.service.ts

Security-Hardening Runde 8: DNS-Rebinding + Per-File-Ownership

2026-05-01 07:59:19 +02:00

gdpr.service.ts

gdpr audit implemented, email log, vollmachten, pdf delete cancel data privacy and vollmachten, removed message no id card in engergy car, and other contracts that are not telecom contracts, added insert counter for engery

2026-03-21 11:59:53 +01:00

imapService.ts

Security-Hardening Runde 8: DNS-Rebinding + Per-File-Ownership

2026-05-01 07:59:19 +02:00

invoice.service.ts

added place to telecommunication, added contract documents, added invoice to other contracts

2026-03-25 16:55:48 +01:00

pdfService.ts

save email as pdf likae attachment version 2

2026-02-04 19:49:09 +01:00

pdfTemplate.service.ts

PDF-Auftragsvorlagen-System, Objekttyp/Lage-Felder, Eigentümer-Fallback bei Bankverbindung

2026-04-05 19:16:47 +02:00

platform.service.ts

complete new audit system

2026-03-21 18:23:54 +01:00

provider.service.ts

complete new audit system

2026-03-21 18:23:54 +01:00

securityAlert.service.ts

Monitoring: Threshold-Debounce auf sliding-window (statt floor-to-hour)

2026-05-01 10:11:52 +02:00

securityMonitor.service.ts

Security-Hardening Runde 10: Security-Monitoring + Alerting

2026-05-01 09:25:47 +02:00

smtpService.ts

Security-Hardening Runde 8: DNS-Rebinding + Per-File-Ownership

2026-05-01 07:59:19 +02:00

stressfreiEmail.service.ts

complete new audit system

2026-03-21 18:23:54 +01:00

tariff.service.ts

complete new audit system

2026-03-21 18:23:54 +01:00

user.service.ts

complete new audit system

2026-03-21 18:23:54 +01:00