start project

app/models/suspicious_event.py

@@ -0,0 +1,22 @@
+"""suspicious_events table (Chapter 06) — Security section (Ch10)."""
+from __future__ import annotations
+
+from app.extensions import db
+
+
+class SuspiciousEvent(db.Model):
+    __tablename__ = "suspicious_events"
+
+    id: int = db.Column(db.Integer, primary_key=True)
+    log_file_id: int = db.Column(db.Integer, db.ForeignKey("log_files.id", ondelete="CASCADE"), nullable=False)
+    ip: str = db.Column(db.String(45), nullable=False)
+    timestamp = db.Column(db.DateTime, nullable=False)
+    path: str = db.Column(db.Text, nullable=False)
+    rule_matched: str = db.Column(db.String(128), nullable=False)
+    severity: str = db.Column(db.String(8), nullable=False)  # low|medium|high (provisional; Ch10 escalates)
+
+    __table_args__ = (
+        db.Index("ix_suspicious_events_timestamp", "timestamp"),
+        db.Index("ix_suspicious_events_ip", "ip"),
+        db.Index("ix_suspicious_events_severity", "severity"),
+    )