Add JA3 signature link in alerts

This commit is contained in:
emanuele-f 2019-08-28 18:41:17 +02:00
parent b66b71fd7e
commit a37bb425ea
2 changed files with 6 additions and 2 deletions

View file

@ -2505,7 +2505,11 @@ end
function formatMaliciousSignature(flowstatus_info)
if(flowstatus_info.ja3_signature ~= nil) then
return(i18n("flow_details.malicious_ja3_signature", {signature = flowstatus_info.ja3_signature}))
return(i18n("flow_details.malicious_ja3_signature", {
signature = flowstatus_info.ja3_signature,
url = "https://sslbl.abuse.ch/ja3-fingerprints/" .. flowstatus_info.ja3_signature,
icon = " <i class=\"fa fa-external-link\"></i>",
}))
end
return(i18n("alerts_dashboard.malicious_signature_detected"))