From 34ae3df2d4770116bab4467294b090dd0a2a94c9 Mon Sep 17 00:00:00 2001
From: cschantz <admin@server.local>
Date: Sat, 13 Dec 2025 02:25:25 -0500
Subject: [PATCH] Add missing BOLD variable to historical attack analyzer
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Logic Review:
✅ Field extraction working correctly (|| delimiter)
✅ Associative array tracking working (cumulative scores)
✅ Compression detection working (gz, bz2)
✅ Syntax validated
✅ All test cases passed

Fixed:
- Added BOLD='\033[1m' color variable (was undefined)

Tested:
- Field parsing: 95||WEBSHELL,CMD||... → correct extraction
- Cumulative tracking: 95 + 90 = 185 ✅
- Compression: .gz→zcat, .bz2→bzcat, other→cat ✅
- Threshold filtering: Only reports scores ≥ threshold ✅

Ready for production use.
---
 tools/analyze-historical-attacks.sh | 1 +
 1 file changed, 1 insertion(+)

diff --git a/tools/analyze-historical-attacks.sh b/tools/analyze-historical-attacks.sh
index c56c1c1..5a7e354 100755
--- a/tools/analyze-historical-attacks.sh
+++ b/tools/analyze-historical-attacks.sh
@@ -32,6 +32,7 @@ YELLOW='\033[1;33m'
 GREEN='\033[0;32m'
 BLUE='\033[0;34m'
 CYAN='\033[0;36m'
+BOLD='\033[1m'
 NC='\033[0m'
 
 # Default options