vrr/ntopng
2
0
Fork 0
mirror of https://github.com/ntop/ntopng.git synced 2026-04-29 23:49:33 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 3

Updated ndpi flow risk alerts

Browse source
This commit is contained in:
MatteoBiscosi 2022-05-31 17:15:21 +02:00
parent a690f0989a
commit 167cf6484a
11 changed files with 326 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

31
scripts/lua/modules/check_definitions/flow/ndpi_clear_text_credentials.lua Normal file
View file

@ -0,0 +1,31 @@
--
-- (C) 2019-22 - ntop.org
--
local checks = require("checks")
local flow_alert_keys = require "flow_alert_keys"
-- #################################################################
local script = {
-- Script category
category = checks.check_categories.security,
-- This script is only for alerts generation
alert_id = flow_alert_keys.flow_alert_ndpi_clear_text_credentials,
default_enabled = true,
default_value = {
},
gui = {
i18n_title = "flow_risk.ndpi_clear_text_credentials",
i18n_description = "flow_risk.ndpi_clear_text_credentials_descr",
}
}
-- #################################################################
return script

31
scripts/lua/modules/check_definitions/flow/ndpi_dns_large_packet.lua Normal file
View file

@ -0,0 +1,31 @@
--
-- (C) 2019-22 - ntop.org
--
local checks = require("checks")
local flow_alert_keys = require "flow_alert_keys"
-- #################################################################
local script = {
-- Script category
category = checks.check_categories.security,
-- This script is only for alerts generation
alert_id = flow_alert_keys.flow_alert_ndpi_dns_large_packet,
default_enabled = true,
default_value = {
},
gui = {
i18n_title = "flow_risk.ndpi_dns_large_packet",
i18n_description = "flow_risk.ndpi_dns_large_packet_descr",
}
}
-- #################################################################
return script