# Python
__pycache__/
*.py[cod]
*$py.class
*.so
.Python
build/
develop-eggs/
downloads/
eggs/
.eggs/
lib/
lib64/
parts/
sdist/
var/
wheels/
*.egg-info/
*.egg
dist/
MANIFEST

# Virtual environments
.venv/
venv/
env/
ENV/

# Test / tooling caches
.pytest_cache/
.mypy_cache/
.ruff_cache/
.coverage
.coverage.*
htmlcov/
.tox/

# Secrets / local config
.env
.env.*

# Lazy-downloaded ATT&CK data (large, regenerated on first use)
data/enterprise-attack.json
data/attack_lookup.json

# Runtime caches and downloaded artifacts (regenerated; may contain live malware)
data/cache/
data/artifacts/
*.part

# Real MCP config with filled-in API keys (commit only .mcp.json.example)
.mcp.json

# Editors / OS
.idea/
.vscode/
.DS_Store
Thumbs.db
