Commit graph

7535 commits

Author SHA1 Message Date
GabrieleDeri
1f99754da4
Moved network discovery to monitoring from dashboard (#9041)
* Fixed dist and error codes in scss

* Moved network discovery to monitoring from dashboard
2025-03-17 14:17:17 +01:00
Luca Deri
4c4f5d9468 Fixes cento flow collection 2025-03-14 23:08:54 +01:00
Matteo Biscosi
d5c82eec2b Added lucide as internal library 2025-03-14 20:02:04 +01:00
Luca Deri
3d1eac8b1b Fixes failure when opening (sometimes) the interface timeseries page 2025-03-14 15:40:04 +01:00
Manuel Ceroni
43ead976bb
Implemented QoE Issues Alert (#9033)
* Implemented QoE Issues Alert

* Fixed QoE Issue alert serializer
2025-03-14 11:41:25 +01:00
Matteo Biscosi
e649e8b8fb Added comments and fixed ordering issue in assets 2025-03-14 10:34:45 +01:00
Matteo Biscosi
ff7d2caafa Fixes sql query 2025-03-13 16:28:56 +01:00
Matteo Biscosi
0f7344c79a Fixes issues with assets insert in clickhouse 2025-03-13 10:10:26 +01:00
Alfredo Cardigliano
86a35a1494 Fix filters from fingerprint custom queries 2025-03-12 18:17:28 +01:00
Matteo Biscosi
5f876167e5 Added assets dashboard 2025-03-12 17:08:46 +01:00
Alfredo Cardigliano
97ca40a349 Add ja4 client fingerprint and custom queries 2025-03-12 16:57:10 +01:00
Manuel Ceroni
69e91bd875
Updated service scan check and changed limits in Scan Alert (#9026) 2025-03-11 12:33:42 +01:00
Manuel Ceroni
00c6efdce6
Implemented network and service scan checks, merging them with the port scan check into a single alert (Scan Alert) (#9024) 2025-03-10 21:19:05 +01:00
Alfredo Cardigliano
a29c7edb1f Add configuration of dhcp options 114/160 2025-03-10 14:34:55 +01:00
Matteo Biscosi
1d6cfd2374 Possible fix for inactive hosts error (#9011) 2025-03-10 10:39:20 +01:00
Matteo Biscosi
02eeb2c6c5 Possible fix for asset_utils error (#9011) 2025-03-07 10:20:07 +01:00
Matteo Biscosi
2ba9fcda17 Fixes suspicious DGA domain alert (#8978) 2025-03-06 15:45:20 +01:00
Matteo Biscosi
ba09b280cb Added check for asset_utils fail 2025-03-05 11:53:05 +01:00
Matteo Biscosi
34b559e66d Added attacker in port scan (#9009) 2025-03-05 11:52:56 +01:00
Manuel Ceroni
83d6fb24da
Port scan alert aggregation (#9021) 2025-03-04 16:12:13 +01:00
Alfredo Cardigliano
d884c9bc14 Add alert set_as_attacker / set_as_victim for lua alerts on hosts 2025-03-03 08:55:19 +01:00
Luca
a72491832f Periodic flow check is now disabled by default 2025-02-28 18:58:34 +01:00
manuelceroni
bbbcd6510a Changed interval size and priority for port scan alerts 2025-02-28 13:14:17 +01:00
Alfredo Cardigliano
ab9224d2ce Extend lua alerts API with alert:set_require_attention() 2025-02-28 11:58:08 +01:00
Matteo Biscosi
a251974b21 Fixes misstyping 2025-02-28 11:18:23 +01:00
Matteo Biscosi
fb44f88f34 Fixes missing where and query not working (#8999) 2025-02-28 11:15:41 +01:00
GabrieleDeri
c45d7d3347
Fixed missing import of host pool and silence duplicate alerts (#9008)
* Fixed missing import of host pool and silence duplicate alerts in notification config import

* Removed debug print
2025-02-27 23:33:50 +01:00
Manuel Ceroni
d4b7a3d375
Implemented port scan alert (clickhouse) (#9006) 2025-02-27 10:44:18 +01:00
Matteo Biscosi
c6c47f727e Added QoE timeseries and stats into various entities (#8984) 2025-02-26 18:13:11 +01:00
Alfredo Cardigliano
4963dddfbf Add more recipient stats for all endpoints 2025-02-26 16:39:27 +01:00
Alfredo Cardigliano
cc71465273 Fix example 2025-02-26 14:46:27 +01:00
GabrieleDeri
3e13ef3f06
Fixed broken iec104 REST, added missing params error code #9001 (#9002) 2025-02-26 14:35:24 +01:00
Matteo Biscosi
59f5b4267c Moved QoE function to a new modules and added labels to QoE charts 2025-02-26 11:39:42 +01:00
Luca Deri
b5c2604da8 Fixed webhook timeout. Added tracings
Improved webhook messages
2025-02-26 10:36:34 +01:00
Matteo Biscosi
1db56458d6 Added QoE filter to live flows (#8982) 2025-02-26 10:12:27 +01:00
Matteo Biscosi
a0700827c9 Added bs5 tooltips to historical data 2025-02-25 15:04:13 +01:00
Matteo Biscosi
93d7557daf Moved qoe score to enterprise L version 2025-02-25 14:06:33 +01:00
Matteo Biscosi
a1d70927eb Added qoe labels to historical 2025-02-25 12:05:49 +01:00
Alfredo Cardigliano
4fa955544c Add QoE score to historical flows 2025-02-25 10:02:44 +01:00
GabrieleDeri
117b6e3f0c
Added documentation for duplicate alerts silencing logic (#8992) 2025-02-25 09:26:46 +01:00
GabrieleDeri
fe18eff11d
Started fixing rest Documentation and postman collection creation (#8987) 2025-02-24 11:46:44 +01:00
Luca Deri
2630523059 QoE improvements 2025-02-23 21:11:12 +01:00
Matteo Biscosi
e541c21dc7 Fixes historical flow details not working correctly 2025-02-21 16:34:01 +01:00
Alfredo Cardigliano
5bfdb2b335 Add SRC2DST_PACKETS/DST2SRC_PACKETS columns definition. Complete SRC2DST_BYTES/DST2SRC_BYTES definition. 2025-02-21 10:06:38 +01:00
Matteo Biscosi
2f6261fc57 Fixes infrastructure query link 2025-02-20 17:22:59 +01:00
Alfredo Cardigliano
6b43730bdd Extend conversations custom query with packets/bytes per direction 2025-02-20 17:01:08 +01:00
Alfredo Cardigliano
90400a1628 Fix nan 2025-02-20 15:30:15 +01:00
Alfredo Cardigliano
1e78c6c720 Fix mac page 2025-02-20 12:15:21 +01:00
Manuel Ceroni
4ad05ce8e5
Implemented an alert for anomalous Redis reads and writes number (#8969) 2025-02-19 17:48:47 +01:00
Alfredo Cardigliano
2c1908b43e Fix dup condition 2025-02-19 09:47:19 +01:00