85 commits

Author	SHA1	Message	Date
Alfredo Cardigliano	32585a34d0	Fix query on attacker/victim	2021-05-17 09:51:59 +02:00
Alfredo Cardigliano	c8731f5bfa	Add filter support for host role (attacker/victim)	2021-05-14 19:37:56 +02:00
Alfredo Cardigliano	026571e6a7	Move all render code to datatable-utils. Cleanup attacker/victim rendering.	2021-05-14 19:01:39 +02:00
Alfredo Cardigliano	206f1bb608	Move 'add filter' button to the tags bar. Fix filter dialog for all families (#5292)	2021-05-14 15:53:30 +02:00
Alfredo Cardigliano	30e0bd8675	Add ability to filter by alert type (#5292)	2021-05-14 15:23:28 +02:00
Alfredo Cardigliano	f1c343ed83	Add cli/srv ip/port filters to flow alerts, ip filter to host alerts (#5292)	2021-05-14 11:15:08 +02:00
Alfredo Cardigliano	064c20db29	Implement support for alert filters using a dialog (WIP)	2021-05-13 19:02:28 +02:00
Simone Mainardi	bc6008be28	Reports all alerts inside a flow alert (not jsut the predominant) ... Implements #5316	2021-05-13 15:51:05 +02:00
Simone Mainardi	b7f12727e2	Implements spillover description column for flow alerts	2021-05-12 18:43:12 +02:00
Alfredo Cardigliano	b784ffa90c	Return an empty series when there are no alerts	2021-05-12 11:45:13 +02:00
Simone Mainardi	a743a1604d	Unifies names across alerts, pools and user scripts ... Fixes #5311	2021-05-12 10:07:26 +02:00
Simone Mainardi	bb3f8ed168	Implements efficient unexpected_new_device alert	2021-05-11 19:03:40 +02:00
Alfredo Cardigliano	03bf2bca5e	Fix attacker/victim records	2021-05-11 18:52:09 +02:00
Alfredo Cardigliano	bd190c22d1	Set record family when it applies	2021-05-11 18:13:48 +02:00
Alfredo Cardigliano	6c9b546383	Improve alert description for some families	2021-05-11 18:11:10 +02:00
Matteo Biscosi	1fa6159ab2	Implements attacker and victim sorting flow alert table	2021-05-11 17:24:10 +02:00
Alfredo Cardigliano	41b72c1125	Cleanup alert description (move configset link as additional field). Add ellipsis to long descriptions, with tooltips.	2021-05-11 17:18:13 +02:00
Alfredo Cardigliano	f801f86dc6	Add alert type to alert description and ability to filter on alert type for all alert families. (fix #5312)	2021-05-11 14:40:24 +02:00
Simone Mainardi	53ffd160de	Fixes sort by attacker/victim in host page	2021-05-11 14:36:58 +02:00
Alfredo Cardigliano	aea96c3bbc	Fix filter on alert_id	2021-05-11 14:06:07 +02:00
Matteo Biscosi	dd6ed25022	Fixes null value into flow alert page	2021-05-11 13:10:51 +02:00
Matteo Biscosi	c9b08d52a0	Implemented attacker and victim column ... Implements #5310	2021-05-11 12:46:49 +02:00
Alfredo Cardigliano	fc85cc20ef	Add alert name to the description. Add support for filtering on alert type (wip)	2021-05-11 12:33:51 +02:00
Alfredo Cardigliano	3ad0e12795	Add support for cli/srv port filtering in flow alerts	2021-05-10 18:08:42 +02:00
Simone Mainardi	74603b8fe6	Implements alerts summary page for engaged alerts	2021-05-10 12:20:27 +02:00
Matteo Biscosi	1bb5fac8be	Removed unused variable ... Implements #5302	2021-05-10 11:14:31 +02:00
Matteo Biscosi	aaadd8728f	Changed aesthetical attacker/victim alert table view ... Implements #5302	2021-05-10 11:12:14 +02:00
Alfredo Cardigliano	450b6c4575	Remove AlertsManager (no longer used). Add back entity value or 5-tuple to exported alerts (fix #5285)	2021-05-10 10:57:43 +02:00
Matteo Biscosi	11b37bc695	Added victim and attacker columns to flow/host alerts ... Implements #5302	2021-05-10 10:24:32 +02:00
Alfredo Cardigliano	0f6722629a	Rework series removing duplicated code and removing 0 series	2021-05-07 14:56:08 +02:00
Luca Deri	2d62b8ed76	Fix colors in alert graphs ... Fixed timepicker	2021-05-07 13:27:40 +02:00
Luca Deri	1a59a9cc80	Updated alarm widget	2021-05-07 11:38:24 +02:00
Alfredo Cardigliano	1b58740579	Add colors to alertt dashboard. Cleanup duplicated css.	2021-05-06 18:47:29 +02:00
Simone Mainardi	0a0a841b02	Adds hyperlinks to the alerts summary page	2021-05-06 18:28:04 +02:00
Simone Mainardi	c2448f736f	Fixes broken syntax in alert_store_utils.lua	2021-05-06 18:04:53 +02:00
Alfredo Cardigliano	24e703ae20	Merge client and server in flow alerts (fix #5288)	2021-05-06 17:02:30 +02:00
Simone Mainardi	c0a3b4c288	Implements alert report global page ... Implements #5291	2021-05-06 16:44:06 +02:00
Alfredo Cardigliano	e4ff578117	Dedup code for alert rest endpoints	2021-05-06 15:04:02 +02:00
Alfredo Cardigliano	5d57a07cdc	Rework L7 application in flow alerts (fix #5290)	2021-05-06 10:53:22 +02:00
Alfredo Cardigliano	adc665c847	Cleanup get proto name functions. Add master proto to flow alerts.	2021-05-06 10:31:16 +02:00
Simone Mainardi	337a70d7e5	Hides chains for inactive hosts	2021-05-05 17:35:24 +02:00
Alfredo Cardigliano	cdcd1c800a	Render severirty color (poc)	2021-05-05 15:41:31 +02:00
Alfredo Cardigliano	c7fa2a458d	Remove alert name column, improve description	2021-05-05 14:34:03 +02:00
Simone Mainardi	ddc3c3de6b	Implements ability to disable all alerts ... Implements #5283	2021-05-05 13:07:19 +02:00
Alfredo Cardigliano	d8080ef14c	Add score field to rest for all alert types. Set score color from severity.	2021-05-05 12:24:15 +02:00
Alfredo Cardigliano	24321cba24	Add mapScoreToSeverity call	2021-05-05 10:40:10 +02:00
Alfredo Cardigliano	ef65671794	Remove alert severity from Alerts. Always use score (convert to severity when required for UI or similar)	2021-05-05 09:54:14 +02:00
Matteo Biscosi	b7060cade7	Implements delete alerts button ... Implements #5268	2021-05-04 18:29:00 +02:00
Matteo Biscosi	b4529b2eac	Removed port from cli/srv flow page info when it is 0 ... Implements #5275	2021-05-04 09:54:05 +02:00
Matteo Biscosi	bb49a0552e	Removed unnecessary icons from alert flow page ... Implements #5276	2021-05-04 09:54:05 +02:00