Commit graph

531 commits

Author SHA1 Message Date
Alfredo Cardigliano
8ae9d8e989 Rename probe_ip to exporter_ip when used for exporters 2026-07-14 15:47:19 +02:00
Matteo Biscosi
02969a68d7 Removed CVEs and fixes non working Active Scan page and updated documentation 2026-06-29 14:46:34 +00:00
Matteo Biscosi
705c14a431 Revert "Removed vulnerability scan (#10490)"
This reverts commit 947019d8c7.
2026-06-28 10:52:21 +00:00
Manuel Ceroni
947019d8c7
Removed vulnerability scan (#10490)
* Removed vulnerability scan

* Removed other vs_utils references
2026-06-25 16:33:55 +02:00
Alfredo Cardigliano
8b009ac2f1 Move is<model> Lua functions to pro 2026-06-25 11:33:55 +02:00
Manuel Ceroni
648e668d23
Implemented BGP prefix update alert (#10373) 2026-05-25 12:32:21 +02:00
Luca Deri
80bc098a2a Added PQC flow detection
Some checks are pending
Build / build (push) Waiting to run
CIFuzz / Fuzzing (address) (push) Waiting to run
CodeQL / Analyze (push) Waiting to run
CodeQL / Analyze-1 (push) Waiting to run
2026-05-15 22:53:41 +02:00
Luca Deri
3c02147f03 Added non-OQC nDPI risk support 2026-05-15 19:56:24 +02:00
Manuel Ceroni
461ddd0d99
Implemented VPN detection alert (#10344) 2026-05-12 12:47:02 +02:00
Matteo Biscosi
0e713e32ac Updated wazuh alert with mitre info 2026-05-11 14:28:18 +00:00
Matteo Biscosi
257090ec73 Moved Wazuh alert to the host alert category (#10317)
Some checks are pending
Build / build (push) Waiting to run
CIFuzz / Fuzzing (address) (push) Waiting to run
CodeQL / Analyze (push) Waiting to run
CodeQL / Analyze-1 (push) Waiting to run
2026-05-05 16:49:00 +00:00
Matteo Biscosi
16aa3e0aa1 Added wazuh alert when info changes (#10317) 2026-05-05 14:51:03 +00:00
GabrieleDeri
1a2bafdf87
Added ai policy page and ai policy alert (#10301) 2026-04-24 17:15:57 +02:00
Matteo Biscosi
1a09f9876c Fixes alert settings button not working (#10225) 2026-03-27 10:32:01 +00:00
Luca Deri
389e832d1c (C) update 2026-01-19 16:23:53 +01:00
Manuel Ceroni
9c3705c697
Implementation of the SlowDoS alert structure (#9962) 2026-01-17 10:57:31 +01:00
Alfredo Cardigliano
f124dab10f Improve reported scan message 2026-01-07 15:21:50 +01:00
Alfredo Cardigliano
332c7d5df5 Add ProfinetTooManyErrorsAlert 2026-01-05 15:33:21 +01:00
Alfredo Cardigliano
e7c62c72c3 Add alert definitions for S7Comm 2025-12-16 11:20:15 +01:00
Matteo Biscosi
3975ed3018 Fixes flow alert description (#9873) 2025-12-04 11:47:21 +01:00
Manuel Ceroni
ff3c9605a5
Fixed quota exceeded alert (#9872) 2025-12-03 17:54:50 +01:00
Matteo Biscosi
bdae6129a0 Modified blacklisted flow alert description 2025-11-21 12:46:34 +01:00
Luca Deri
5f30641db3 Localized scan realtime alert message and improved message 2025-10-28 22:08:04 +01:00
Luca Deri
fbc55ab340 Implemenred support for flow risk NDPI_MISMATCHING_PROTOCOL_WITH_IP 2025-10-18 00:06:26 +02:00
Luca Deri
97c0bbb039 Improved alert formatting 2025-09-28 10:12:36 +02:00
Luca Deri
0e4014d7bf Minor formatting changes 2025-09-27 22:28:14 +02:00
Luca Deri
e13a7208e8 Improved alert reporting 2025-09-27 15:37:12 +02:00
Luca Deri
681d7703c9 Impoved alert formatting 2025-09-11 19:30:07 +02:00
Luca Deri
bdbf22de07 Improved AS changes script 2025-09-11 18:01:08 +02:00
Luca Deri
fe25a7a531 AS ranking alert changes 2025-09-11 17:04:54 +02:00
Alfredo Cardigliano
5fd9089eeb Add alert details page to AS alerts 2025-09-11 15:51:44 +02:00
Alfredo Cardigliano
94ef20b5d6 Safety check 2025-09-11 12:53:42 +02:00
Luca Deri
810ac15922 Fixed AS ranking alert 2025-09-09 23:09:33 +02:00
Luca Deri
e7dbf49932 AS ranking changes 2025-09-09 16:54:32 +02:00
Manuel Ceroni
d3b3a6b681
Removed AS from the message of the AS ranking changed alert (#9633) 2025-09-08 11:55:15 +02:00
Manuel Ceroni
837dc962b6
Implemented AS ranking changed alert (#9626) 2025-09-08 10:11:13 +02:00
Manuel Ceroni
62ef822ad4
Changed the message of the ASN Traffic Rule Alert (#9563) 2025-08-28 12:47:43 +02:00
Manuel Ceroni
33ad9fc7b6
Various fixes to ASN Traffic Rules (#9555)
* Various fixes to ASN Traffic Rules

* Formatted ASN names for ASN traffic rules alerts
2025-08-25 14:51:46 +02:00
Alfredo Cardigliano
ba382f7316 Add AS alert entity. Fix AS threshold crossed. 2025-08-25 14:45:22 +02:00
Manuel Ceroni
5e48729f68
Implemented ASN traffic rules (#9531) 2025-08-19 23:17:25 +02:00
Alfredo Cardigliano
aebf4ccf37 Add nEdge Policy Violation check 2025-08-14 12:33:38 +02:00
Luca
9568fa96aa Added support for unresolved hostname risk 2025-08-04 22:52:19 +02:00
Matteo Biscosi
13ebc1e8d0 Possible fix for issue description and removed Connection Refused alert (#9233) 2025-05-23 11:21:06 +02:00
Matteo Biscosi
52a9c5c0e8 Fixes unexpected server alerts not working 2025-05-22 12:30:10 +02:00
Manuel Ceroni
534048ac4f
Fixed empty description column (#9216) 2025-05-16 12:00:11 +02:00
Matteo Biscosi
3d6d26422a Fixes bidirectional traffic check description 2025-05-13 17:04:03 +02:00
Alfredo Cardigliano
f4e5625669 Add safety check 2025-04-15 11:21:17 +02:00
Alfredo Cardigliano
8e9532680d Fix elephant flows description. Print exceeding threshold only. #9075 2025-04-14 14:36:49 +02:00
Manuel Ceroni
26c23347e7
Improved Scan Alerts with MITRE and fixes (#9127) 2025-04-08 11:33:53 +02:00
Manuel Ceroni
9127b22b76
Improved Scan Realtime Alert (#9122) 2025-04-07 16:26:08 +02:00