vrr/ntopng
2
0
Fork 0
mirror of https://github.com/ntop/ntopng.git synced 2026-04-29 07:29:32 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 3

Added Suspicious Entropy alert (#6563)

Browse source
This commit is contained in:
MatteoBiscosi 2022-05-04 22:11:02 +02:00
parent 283ebda29c
commit 2bcf7c8dfa
11 changed files with 170 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

31
scripts/lua/modules/check_definitions/flow/ndpi_suspicious_entropy.lua Normal file
View file

@ -0,0 +1,31 @@
--
-- (C) 2019-22 - ntop.org
--
local checks = require("checks")
local flow_alert_keys = require "flow_alert_keys"
-- #################################################################
local script = {
-- Script category
category = checks.check_categories.security,
-- This script is only for alerts generation
alert_id = flow_alert_keys.flow_alert_ndpi_suspicious_entropy,
default_enabled = true,
default_value = {
},
gui = {
i18n_title = "flow_risk.ndpi_suspicious_entropy",
i18n_description = "flow_risk.ndpi_suspicious_entropy_descr",
}
}
-- #################################################################
return script