soc/.gitignore

# OS/editor
.DS_Store
Thumbs.db
.vscode/
.idea/
*.swp
*.swo

# Logs/temp
*.log
*.pid
*.tmp
*.bak
*.orig
/tmp/

# Python
__pycache__/
*.py[cod]
.pytest_cache/
.mypy_cache/
.venv/
venv/

# Node
node_modules/
**/node_modules/

# Env/secrets
.env
.env.*
!.env.example
!**/.env.example
# *.pem
# *.key
# *.crt

# Docker / local runtime state
*.db
*.sqlite
*.sqlite3
*.tar

# Wazuh IOC CDB lists — runtime-updated by container (owned by UID 999)
*.cdb
wazuh-docker/single-node/config/wazuh_cluster/lists/malicious-ioc/malicious-ip
wazuh-docker/single-node/config/wazuh_cluster/lists/malicious-ioc/malicious-domains
wazuh-docker/single-node/config/wazuh_cluster/lists/malicious-ioc/malware-hashes

# Project runtime/generated folders
Shuffle/shuffle-database/
Shuffle/shuffle-files/

# Local data volumes
pgdata/
data/