v0.1.2

• Comprehensive Tracing: Added structured logging throughout all Cortex tools
  • Analyzer lookups now log search criteria and results
  • Job submissions include data type and analyzer details
  • Polling attempts are tracked with attempt counts and intervals
  • Job completions and failures are logged with full context
• Optimized Job Polling: Increased polling interval from 5 to 30 seconds to better accommodate analyzers that require extended processing time
• macOS Code Signing & Notarization:
  • All macOS binaries (Intel and Apple Silicon) are now signed with Apple Developer ID
  • Binaries are notarized through Apple's notary service
  • Users will no longer see Gatekeeper warnings when running the binary
• Improved GitHub Workflows: Enhanced release automation with better error handling and validation

Release v0.1.1

• New analyze_url_with_urlscan_io tool for comprehensive URL threat intelligence analysis
• New scan_hash_with_virustotal tool for file hash reputation checking
• Added expert SOC analyst prompt
• Enhanced AbuseFinder integration now supports email analysis in addition to IP, domain, FQDN, and URL
• Updated to rmcp 0.3.0 and cortex-client 0.1.1 for improved reliability
• Restructured codebase with modularized architecture and separate tool modules
• Added library + binary structure for better reusability
• Implemented configurable retry mechanisms with max_retries parameter for all tools
• Enhanced error handling with detailed diagnostic information and better timeout management
• All tools now accept optional analyzer_name parameter for flexible analyzer selection
• Improved observable validation with better error messages
• Enhanced test suite with integration tests and mock Cortex server
• Added support for MCP 2024-11-05 protocol with prompts integration
• Better tool discovery with improved schema generation
• Added code signing and notarization for macOS binaries - eliminates security warnings and allows direct execution
without manual overrides
• Comprehensive documentation updates with visual examples
• No breaking changes - all existing functionality remains compatible with optional new parameters

Release v0.1.0

first commit