Luca Deri
|
71fbbdbf58
|
Implemented custom host script (WIP)
|
2022-11-24 12:34:14 +01:00 |
|
Luca Deri
|
9bdff1b170
|
Improved custom flow script alert
|
2022-11-23 17:04:01 +01:00 |
|
Luca Deri
|
a687b9280a
|
Implemented custom script check
|
2022-11-23 11:11:45 +01:00 |
|
MatteoBiscosi
|
ef01259354
|
Fixes flow checks not found
|
2022-11-21 10:59:55 +01:00 |
|
MatteoBiscosi
|
4bc150e7c9
|
Removed debug tprint
|
2022-11-16 11:33:11 +01:00 |
|
MatteoBiscosi
|
b6692f3fea
|
Added TCP Packets issues check (#6899)
|
2022-11-16 11:28:16 +01:00 |
|
MatteoBiscosi
|
7bfc2fdde4
|
Fixes Flow risks not defined (#6939)
|
2022-10-21 13:37:08 +02:00 |
|
MatteoBiscosi
|
4728baed14
|
Fixes inconsistent naming in ntopng (#6716)
|
2022-10-17 12:52:47 +02:00 |
|
Alfredo Cardigliano
|
93dd74d906
|
Fix telegram notifications (fix #6915)
|
2022-10-03 12:29:23 +02:00 |
|
MatteoBiscosi
|
3681ca34dc
|
Added ndpi http suspicious content alert mapping
|
2022-07-15 11:40:20 +02:00 |
|
MatteoBiscosi
|
755c90e0c2
|
Changed from UDP unidirection to unidirectiont traffic
|
2022-06-21 15:11:54 +02:00 |
|
MatteoBiscosi
|
4f8c5c6cec
|
Moved UDP unidirection to nDPI alerts
|
2022-06-21 11:37:46 +02:00 |
|
Alfredo Cardigliano
|
df2829d409
|
Improve iec_invalid_transition format function (#6682)
|
2022-06-10 16:17:08 +02:00 |
|
MatteoBiscosi
|
b7a61835ba
|
Fixes dns large packets alert incorrectly triggered (#6674)
|
2022-06-10 10:34:03 +02:00 |
|
MatteoBiscosi
|
ba20719d4a
|
Fixes suspicious dga domain url not formatted
|
2022-06-09 18:19:03 +02:00 |
|
MatteoBiscosi
|
9622209308
|
Minor fixes to alerts
|
2022-06-09 18:12:04 +02:00 |
|
MatteoBiscosi
|
8214173ecd
|
Various changes to alerts (#6675)
|
2022-06-09 12:26:25 +02:00 |
|
MatteoBiscosi
|
4d037e911b
|
Possible fix for #6670
|
2022-06-08 17:59:10 +02:00 |
|
Luca Deri
|
9d364c69b4
|
Fixed TCP with no answer alert definition
|
2022-06-07 13:11:35 +02:00 |
|
MatteoBiscosi
|
3509b3b74b
|
Added dns fragmented alert
|
2022-05-31 18:34:22 +02:00 |
|
MatteoBiscosi
|
167cf6484a
|
Updated ndpi flow risk alerts
|
2022-05-31 17:15:21 +02:00 |
|
MatteoBiscosi
|
e2ad021161
|
Fixes external link (#6626)
|
2022-05-27 16:23:26 +02:00 |
|
MatteoBiscosi
|
e9147aa37d
|
Implemented connection failed alert (#6622)
|
2022-05-27 10:45:25 +02:00 |
|
MatteoBiscosi
|
6921aa9dce
|
Fixes external link url proto not correctly used (#6626)
|
2022-05-25 12:52:56 +02:00 |
|
MatteoBiscosi
|
c1e6f01d53
|
Fixes suspicious DGA domain nil value
|
2022-05-17 11:26:00 +02:00 |
|
Luca Deri
|
cdbb0e5380
|
Implements #6598
|
2022-05-15 16:57:48 +02:00 |
|
Luca Deri
|
7c038e29da
|
Implemented IEC104 Invalid Command Transition check/alert
|
2022-05-11 23:16:45 +02:00 |
|
MatteoBiscosi
|
e81f97d02d
|
Fixes https dga domain url (#6583)
|
2022-05-11 16:50:08 +02:00 |
|
MatteoBiscosi
|
37820b4940
|
Added dga domain URL check (#6583)
|
2022-05-10 17:16:10 +02:00 |
|
MatteoBiscosi
|
2bcf7c8dfa
|
Added Suspicious Entropy alert (#6563)
|
2022-05-04 22:11:44 +02:00 |
|
Luca
|
160279e5eb
|
Fix for blacklisted flow
|
2022-04-29 11:49:53 +02:00 |
|
MatteoBiscosi
|
79528b58bc
|
Fixed actrive monitoring table broken (#6548)
|
2022-04-26 16:39:56 +02:00 |
|
Luca Deri
|
8f75df9797
|
Blacklist name is now shown in blacklisted flows alerts
|
2022-04-26 14:56:15 +02:00 |
|
MatteoBiscosi
|
ff43144aea
|
Fixes incorrect suspicious DGA domain alert msg
|
2022-03-23 16:19:27 +01:00 |
|
Matteo Biscosi
|
4200342555
|
Fixes description duration not formatted (#6249)
|
2022-01-27 13:07:47 +01:00 |
|
Alfredo Cardigliano
|
257ece18c0
|
Copyright update (Lua)
|
2022-01-03 09:42:33 +01:00 |
|
MatteoBiscosi
|
4528e5a660
|
Added Broadcast non-UDP traffic alert and minor fixes to apexcharts
|
2021-12-17 13:33:11 +01:00 |
|
Simone Mainardi
|
886537299c
|
Adds traces for (string expected, got light userdata) exceptions
|
2021-10-07 10:48:09 +02:00 |
|
Simone Mainardi
|
48be233fea
|
Fixes alert_periodicity_changed failing to load graph_map_utils
|
2021-10-07 10:46:18 +02:00 |
|
Simone Mainardi
|
0987014edb
|
Fixes alert_lateral_movement exceptions on certain versions
|
2021-10-07 10:43:11 +02:00 |
|
Simone Mainardi
|
cd36f86a2f
|
Simplifies Lua risks (avoids an extra table to be in sync)
|
2021-10-01 16:32:14 +02:00 |
|
MatteoBiscosi
|
4b197ca2cc
|
Changed alert name (#5805)
|
2021-10-01 15:52:51 +02:00 |
|
Simone Mainardi
|
6da5283ae2
|
Removes package.path changes possibly causing nil indexing
|
2021-10-01 11:24:10 +02:00 |
|
MatteoBiscosi
|
1ab8bbe2cd
|
Fixes attempt to index a nil value (global 'dirs')
|
2021-10-01 11:02:13 +02:00 |
|
Simone Mainardi
|
4509027c1c
|
Fixes attempt to index a nil value (global 'dirs')
|
2021-10-01 10:27:38 +02:00 |
|
Simone Mainardi
|
b01f8e50b8
|
Fixes TLS version for obsolete TLS alerts via ZMQ
Addresses #5860
|
2021-09-13 10:21:33 +02:00 |
|
Simone Mainardi
|
5f70c1eff7
|
Implements support for obsolete client SSH version
Addresses #5861
|
2021-09-10 12:32:42 +02:00 |
|
Simone Mainardi
|
4b55e02899
|
Reworks check for Obsolete SSH that was not handling cli and srv
Addresses #5861
|
2021-09-10 11:58:46 +02:00 |
|
MatteoBiscosi
|
b82cbe76c9
|
Reduced length of suspicious dga domain (#5804)
|
2021-08-26 12:15:19 +02:00 |
|
MatteoBiscosi
|
70e32fd566
|
Changed redirect icon loc. and added redirect to SuspiciousDgaDomain alert (#5806)
|
2021-08-26 10:51:12 +02:00 |
|