chronicle · dandye · May 7, 2026 · May 7, 2026 · May 7, 2026
diff --git a/.license-header.txt b/.license-header.txt
@@ -1,4 +1,4 @@
-Copyright 2025 Google LLC
+Copyright 2026 Google LLC
 
 Licensed under the Apache License, Version 2.0 (the "License");
 you may not use this file except in compliance with the License.

diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
@@ -151,7 +151,7 @@ repos:
     rev: v2.4.1
     hooks:
       - id: codespell
-        args: ['--skip', '*.zip,*.log,*.json', '--ignore-words-list', 'crate,ans,ect,hist,nd']
+        args: ['--skip', '*.zip,*.log,*.json', '--ignore-words-list', 'crate,ans,ect,hist,nd,thw']
         exclude: '^(\.git/|__pycache__|\.egg-info|dist/|build/|docs/_build/)'
 
   # YAML validation specific to our timestamp configs

diff --git a/cloudbuild.yaml b/cloudbuild.yaml
@@ -8,4 +8,4 @@ images:
 
 # Option 2: Build from local wheel (uses local changes)
 # To use: gcloud builds submit --config cloudbuild-wheel.yaml
-# See cloudbuild-wheel.yaml for building with local wheel file
+# See cloudbuild-wheel.yaml for building with local wheel file
diff --git a/docs/conf.py b/docs/conf.py
@@ -1,6 +1,6 @@
 #!/usr/bin/env python3
 # -*- coding: utf-8 -*-
-# Copyright 2025 Google LLC
+# Copyright 2026 Google LLC
 #
 # Licensed under the Apache License, Version 2.0 (the "License");
 # you may not use this file except in compliance with the License.

diff --git a/src/logstory/__init__.py b/src/logstory/__init__.py
@@ -1,4 +1,4 @@
-# Copyright 2025 Google LLC
+# Copyright 2026 Google LLC
 #
 # Licensed under the Apache License, Version 2.0 (the "License");
 # you may not use this file except in compliance with the License.

diff --git a/src/logstory/auth.py b/src/logstory/auth.py
@@ -1,4 +1,4 @@
-# Copyright 2025 Google LLC
+# Copyright 2026 Google LLC
 #
 # Licensed under the Apache License, Version 2.0 (the "License");
 # you may not use this file except in compliance with the License.
@@ -75,7 +75,7 @@

  if api_type == "legacy" and not is_malachite_credential:
    # This is a warning case - might still work but not typical
    import warnings

    warnings.warn(
        "Using non-malachite credentials with legacy API "
@@ -136,7 +136,7 @@
     if self._credentials:
       return self._credentials
 
-    # Priority: service_account_info > credentials_path > secret_manager
+    # Priority: service_account_info then credentials_path then secret_manager
     if self.service_account_info:
       self._credentials = service_account.Credentials.from_service_account_info(
           self.service_account_info, scopes=self.SCOPES
@@ -149,7 +149,7 @@
      )
    elif self.secret_manager_credentials:
      # Import here to avoid dependency if not using Secret Manager
      from google.cloud import secretmanager

      client = secretmanager.SecretManagerServiceClient()
      request = {"name": f"{self.secret_manager_credentials}/versions/latest"}
@@ -217,7 +217,7 @@
      )
    else:
      # Try Application Default Credentials
      import google.auth

      base_credentials, _ = google.auth.default(scopes=self.SCOPES)


diff --git a/src/logstory/ingestion.py b/src/logstory/ingestion.py
@@ -1,4 +1,4 @@
-# Copyright 2025 Google LLC
+# Copyright 2026 Google LLC
 #
 # Licensed under the Apache License, Version 2.0 (the "License");
 # you may not use this file except in compliance with the License.
@@ -133,7 +133,7 @@
       self,
       log_type: str,
       entries: list[dict[str, Any]],
-      labels: list[dict[str, str]],
+      labels: list[dict[str, str]],  # noqa: ARG002
   ) -> None:
     """Post entities using legacy API."""
     uri = f"{self.get_base_url()}/v2/entities:batchCreate"
@@ -236,7 +236,7 @@
    list_url = f"{self.get_base_url()}/v1alpha/{parent}/forwarders"
    response = self.http_client.get(list_url)

    if response.status_code == 200:
      forwarders = response.json().get("forwarders", [])
      for forwarder in forwarders:
        if forwarder.get("displayName") == self.forwarder_name:
@@ -260,7 +260,7 @@
    }

    response = self.http_client.post(create_url, json=payload)
    if response.status_code == 200:
      forwarder = response.json()
      self._forwarder_id = forwarder["name"].split("/")[-1]
      self._forwarder_cache[self.forwarder_name] = self._forwarder_id
@@ -394,7 +394,7 @@

  def _check_response(self, response: real_requests.Response) -> None:
    """Check API response for errors."""
    if response.status_code >= 400:
      try:
        response_data = response.json()
      except ValueError:

diff --git a/src/logstory/logstory.py b/src/logstory/logstory.py
@@ -1,4 +1,4 @@
-# Copyright 2025 Google LLC
+# Copyright 2026 Google LLC
 #
 # Licensed under the Apache License, Version 2.0 (the "License");
 # you may not use this file except in compliance with the License.
@@ -41,7 +41,7 @@
    except Exception:
      __version__ = "unknown"
    typer.echo(f"logstory {__version__}")
    raise typer.Exit()


 # Create Typer app and command groups
@@ -112,8 +112,8 @@
  credentials_json = os.getenv("LOGSTORY_CREDENTIALS")
  if credentials_json:
    # Write to temp file and return path
    import json
    import tempfile

    try:
      # Validate it's valid JSON
@@ -315,7 +315,7 @@

  # Handle --open flag as a special case
  if open_usecase:
    import subprocess  # nosec B404

    usecase_dirs = glob.glob(
        os.path.join(os.path.dirname(os.path.abspath(__file__)), "usecases/*")

diff --git a/src/logstory/logtypes_entities_timestamps.yaml b/src/logstory/logtypes_entities_timestamps.yaml
@@ -1,4 +1,4 @@
-# Copyright 2025 Google LLC
+# Copyright 2026 Google LLC
 #
 # Licensed under the Apache License, Version 2.0 (the "License");
 # you may not use this file except in compliance with the License.

diff --git a/src/logstory/logtypes_events_timestamps.yaml b/src/logstory/logtypes_events_timestamps.yaml
@@ -1,4 +1,4 @@
-# Copyright 2025 Google LLC
+# Copyright 2026 Google LLC
 #
 # Licensed under the Apache License, Version 2.0 (the "License");
 # you may not use this file except in compliance with the License.

diff --git a/src/logstory/main.py b/src/logstory/main.py
@@ -1,4 +1,4 @@
-# Copyright 2025 Google LLC
+# Copyright 2026 Google LLC
 #
 # Licensed under the Apache License, Version 2.0 (the "License");
 # you may not use this file except in compliance with the License.

diff --git a/src/logstory/usecases/NETWORK_ANALYSIS/__init__.py b/src/logstory/usecases/NETWORK_ANALYSIS/__init__.py
@@ -0,0 +1,13 @@
+# Copyright 2026 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#      http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
diff --git a/src/logstory/usecases/__init__.py b/src/logstory/usecases/__init__.py
@@ -0,0 +1,13 @@
+# Copyright 2026 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#      http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
diff --git a/tests/analyze_all_timestamps.py b/tests/analyze_all_timestamps.py
@@ -1,5 +1,5 @@
 #!/usr/bin/env python3
-# Copyright 2025 Google LLC
+# Copyright 2026 Google LLC
 #
 # Licensed under the Apache License, Version 2.0 (the "License");
 # you may not use this file except in compliance with the License.

diff --git a/tests/test_auth.py b/tests/test_auth.py
@@ -1,4 +1,4 @@
-# Copyright 2025 Google LLC
+# Copyright 2026 Google LLC
 #
 # Licensed under the Apache License, Version 2.0 (the "License");
 # you may not use this file except in compliance with the License.

diff --git a/tests/test_change_map_implementation.py b/tests/test_change_map_implementation.py
@@ -1,5 +1,5 @@
 #!/usr/bin/env python3
-# Copyright 2025 Google LLC
+# Copyright 2026 Google LLC
 #
 # Licensed under the Apache License, Version 2.0 (the "License");
 # you may not use this file except in compliance with the License.

diff --git a/tests/test_double_update_fix.py b/tests/test_double_update_fix.py
@@ -1,5 +1,5 @@
 #!/usr/bin/env python3
-# Copyright 2025 Google LLC
+# Copyright 2026 Google LLC
 #
 # Licensed under the Apache License, Version 2.0 (the "License");
 # you may not use this file except in compliance with the License.

diff --git a/tests/test_group_only_replacement.py b/tests/test_group_only_replacement.py
@@ -1,5 +1,5 @@
 #!/usr/bin/env python3
-# Copyright 2025 Google LLC
+# Copyright 2026 Google LLC
 #
 # Licensed under the Apache License, Version 2.0 (the "License");
 # you may not use this file except in compliance with the License.

diff --git a/tests/test_logstory.py b/tests/test_logstory.py
@@ -1,4 +1,4 @@
-# Copyright 2025 Google LLC
+# Copyright 2026 Google LLC
 #
 # Licensed under the Apache License, Version 2.0 (the "License");
 # you may not use this file except in compliance with the License.

diff --git a/tests/test_main.py b/tests/test_main.py
@@ -1,4 +1,4 @@
-# Copyright 2025 Google LLC
+# Copyright 2026 Google LLC
 #
 # Licensed under the Apache License, Version 2.0 (the "License");
 # you may not use this file except in compliance with the License.

diff --git a/tests/test_sysmon_pattern_edge_cases.py b/tests/test_sysmon_pattern_edge_cases.py
@@ -1,5 +1,5 @@
 #!/usr/bin/env python3
-# Copyright 2025 Google LLC
+# Copyright 2026 Google LLC
 #
 # Licensed under the Apache License, Version 2.0 (the "License");
 # you may not use this file except in compliance with the License.

diff --git a/tests/test_timestamp_patterns.py b/tests/test_timestamp_patterns.py
@@ -1,5 +1,5 @@
 #!/usr/bin/env python3
-# Copyright 2025 Google LLC
+# Copyright 2026 Google LLC
 #
 # Licensed under the Apache License, Version 2.0 (the "License");
 # you may not use this file except in compliance with the License.

diff --git a/tests/test_windows_sysmon_patterns.py b/tests/test_windows_sysmon_patterns.py
@@ -1,5 +1,5 @@
 #!/usr/bin/env python3
-# Copyright 2025 Google LLC
+# Copyright 2026 Google LLC
 #
 # Licensed under the Apache License, Version 2.0 (the "License");
 # you may not use this file except in compliance with the License.

diff --git a/tests/test_yaml.py b/tests/test_yaml.py
@@ -1,4 +1,4 @@
-# Copyright 2025 Google LLC
+# Copyright 2026 Google LLC
 #
 # Licensed under the Apache License, Version 2.0 (the "License");
 # you may not use this file except in compliance with the License.
@@ -101,9 +101,9 @@ def validate_base_time_format(filepath):
           )
 
         dateformat = timestamp["dateformat"]
-        if dateformat == 'epoch':
+        if dateformat == "epoch":
           format_type = "epoch"
-        elif dateformat == 'windowsfiletime':
+        elif dateformat == "windowsfiletime":
           format_type = "windowsfiletime"
         else:
           format_type = "dateformat"
@@ -191,7 +191,7 @@ def validate_epoch_dateformat_consistency(filepath):
         )
 
       # Validate dateformat values
-      valid_magic_formats = ['epoch', 'windowsfiletime']
+      valid_magic_formats = ["epoch", "windowsfiletime"]
       if dateformat not in valid_magic_formats and not isinstance(dateformat, str):
         raise ValueError(
             f"Entry '{entry_name}' timestamp {i}: dateformat must be a string"

diff --git a/tests/timestamp_extractor.py b/tests/timestamp_extractor.py
@@ -1,5 +1,5 @@
 #!/usr/bin/env python3
-# Copyright 2025 Google LLC
+# Copyright 2026 Google LLC
 #
 # Licensed under the Apache License, Version 2.0 (the "License");
 # you may not use this file except in compliance with the License.

diff --git a/usecases/generate_usecase_docs.py b/usecases/generate_usecase_docs.py
@@ -1,5 +1,5 @@
 #!/usr/bin/env python3
-# Copyright 2025 Google LLC
+# Copyright 2026 Google LLC
 #
 # Licensed under the Apache License, Version 2.0 (the "License");
 # you may not use this file except in compliance with the License.