vrr/ntopng
2
0
Fork 0
mirror of https://github.com/ntop/ntopng.git synced 2026-05-01 00:19:33 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 3

Remove JA3 leftovers. Update alert keys. Rename malivious JA3 to malicious Fingerprint.

Browse source
This commit is contained in:
Alfredo Cardigliano 2024-09-02 18:34:09 +02:00
parent 3b5217c583
commit 3b0b60c422
16 changed files with 27 additions and 115 deletions
Download patch file Download diff file Expand all files Collapse all files

12
scripts/lua/modules/alert_definitions/flow/alert_ndpi_malicious_ja3.lua → scripts/lua/modules/alert_definitions/flow/alert_ndpi_malicious_fingerprint.lua
View file

@ -15,13 +15,13 @@ local mitre = require "mitre_utils"
-- ##############################################
local alert_ndpi_malicious_ja3 = classes.class(alert)
local alert_ndpi_malicious_fingerprint = classes.class(alert)
-- ##############################################
alert_ndpi_malicious_ja3.meta = {
alert_key = flow_alert_keys.flow_alert_ndpi_malicious_ja3,
i18n_title = "flow_checks_config.malicious_ja3",
alert_ndpi_malicious_fingerprint.meta = {
alert_key = flow_alert_keys.flow_alert_ndpi_malicious_fingerprint,
i18n_title = "flow_checks_config.malicious_fingerprint",
icon = "fas fa-fw fa-info-circle",
-- Mitre Att&ck Matrix values
@ -36,12 +36,12 @@ alert_ndpi_malicious_ja3.meta = {
-- @brief Prepare an alert table used to generate the alert
-- @return A table with the alert built
function alert_ndpi_malicious_ja3:init()
function alert_ndpi_malicious_fingerprint:init()
-- Call the parent constructor
self.super:init()
end
-- #######################################################
return alert_ndpi_malicious_ja3
return alert_ndpi_malicious_fingerprint