vrr/ntopng
2
0
Fork 0
mirror of https://github.com/ntop/ntopng.git synced 2026-04-30 07:59:35 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 3

Improved Scan Alerts with MITRE and fixes (#9127)

Browse source
This commit is contained in:
Manuel Ceroni 2025-04-08 11:33:53 +02:00 • committed by GitHub
parent bbcea89dff
commit 26c23347e7
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
2 changed files with 29 additions and 15 deletions
Download patch file Download diff file Expand all files Collapse all files

24
scripts/lua/modules/alert_definitions/host/host_alert_scan.lua
View file

@ -23,8 +23,12 @@ host_alert_scan.meta = {
i18n_title = "alerts_dashboard.scan_title",
icon = "fas fa-exclamation-triangle",
-- Mitre Att&ck Matrix values
mitre_values = {},
-- Mitre Att&ck Matrix values
mitre_values = {
mitre_tactic = mitre.tactic.reconnaissance,
mitre_technique = mitre.technique.active_scanning,
mitre_id = "T1595"
},
has_attacker = true,
}
@ -33,14 +37,14 @@ host_alert_scan.meta = {
-- @brief Prepare an alert table used to generate the alert
-- @return A table with the alert built
function host_alert_scan:init(ifid, attacker, victim, num_victims, attack)
self.super:init()
self.alert_type_params = {
ifid = ifid,
attacker = attacker,
victim = victim,
num_victims = num_victims,
attack = attack
}
self.super:init()
self.alert_type_params = {
ifid = ifid,
attacker = attacker,
victim = victim,
num_victims = num_victims,
attack = attack
}
end
-- #######################################################