initial mitre att&ck standardization (#8446)

* added feature sorting flows by protocol

* changed protocols comparison order

* initial commit for bitmap of server ports

* bitmap added to redis

* added debug string, bitmap not working

* Update alerts_list_per_license.rst

* Update alerts_list_per_license.rst

* initial mitre att&ck standardization

* Update ServerPortsBitmap.h

* updated mitre standardization
This commit is contained in:
Luca Ferretti 2024-06-12 15:55:10 +02:00 committed by GitHub
parent a3b5003298
commit 1b3a0ec19a
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
106 changed files with 1466 additions and 10 deletions

View file

@ -9,6 +9,8 @@ local flow_alert_keys = require "flow_alert_keys"
local classes = require "classes"
-- Make sure to import the Superclass!
local alert = require "alert"
-- Import Mitre Att&ck utils
local mitre = require "mitre_utils"
-- require "lua_utils"
@ -22,6 +24,13 @@ alert_remote_access.meta = {
alert_key = flow_alert_keys.flow_alert_remote_access,
i18n_title = "alerts_dashboard.remote_access_title",
icon = "fas fa-fw fa-info",
-- Mitre Att&ck Matrix values
mitre_values = {
mitre_tactic = mitre.tactic.initial_access,
mitre_tecnique = mitre.tecnique.ext_remote_services,
mitre_id = "T1133"
},
}
-- ##############################################