- AnalysisManager: static analyzers run concurrently via a ThreadPoolExecutor;
dynamic stays parallel for yara/pe_sieve/moneta/patriot, hsb runs solo
after to keep its sleep-timing measurements clean. Per-tool start +
finish + wall-time logged so progress is visible.
- /analyze/all redesign: stat tiles (stages / alerts / elapsed),
phase-banded rows, color-coded state pills, agent-down preflight
marks unreachable EDR profiles SKIPPED instead of burning the timeout,
done banner only links to stages that actually produced data.
- file_info hero: buttons fully data-driven — Static / Dynamic /
HolyGrail / per-EDR-profile only render if the corresponding saved
JSON exists for the sample.
- analyze_edr no longer writes a JSON for pre-execution failures
(agent_unreachable / busy / error). The error still surfaces in the
HTTP response; the saved-view route stops rendering fake results.
- Logging: single root-level handler, compact formatter — HH:MM:SS,
fixed-width colored level, dim module name with package prefixes
stripped, werkzeug renamed to http and access lines reformatted to
METHOD path → status. urllib3 / requests muted to WARNING.
BlackSnufkin
193a06d4c9