Fixes suspicious DGA domain alert (#8978)

This commit is contained in:
Matteo Biscosi 2025-03-06 15:45:01 +01:00
parent e760f05912
commit 2ba9fcda17
2 changed files with 1331 additions and 1347 deletions

View file

@ -430,6 +430,9 @@ function alert_utils.formatFlowAlertMessage(ifid, alert, alert_json, add_score,
-- Add the link to the documentation
if alert_risk and alert_risk > 0 and not exclude_remediation_link then
if isEmptyString(msg) and not isEmptyString(alert.info) then
msg = alert.info
end
msg = string.format("%s %s",
msg, flow_risk_utils.get_remediation_documentation_link(alert_risk, alert_src))
local info_msg = alert_utils.get_flow_risk_info(alert_risk, alert_json)