Commit graph

392 commits

Author SHA1 Message Date
Daniele Zulberti
fedd1e3218 Added unexpected DHCP plugin 2020-10-10 20:22:06 +02:00
Luca Deri
4565f8af04 Added plugin for detecting unexpected NTP servers 2020-10-10 10:54:19 +02:00
Luca Deri
c323c6f351 Tiny change 2020-10-10 10:35:06 +02:00
Luca Deri
2093488db3 Minor fixe: when the list of DNS/SMTP servers is empty, no check is performed 2020-10-10 10:33:47 +02:00
Daniele Zulberti
d74caa9d2b Added unexpected SMTP plugin 2020-10-09 17:06:23 +02:00
Daniele Zulberti
cff77b49cf Added unexpected DNS plugin 2020-10-09 17:06:23 +02:00
Simone Mainardi
049bfdcf4a Implements bitmap-based limited privileges for non-admins
Implements #4489
2020-10-09 15:50:22 +02:00
Alfredo Cardigliano
bafccf2c06 Add malformed/dispatched syslog counters. Inc counters in the Suricata plugin. 2020-10-09 15:00:21 +02:00
gabryon99
ee80638073 fixed invalid graph unity (#4525) 2020-10-07 17:10:37 +02:00
gabryon99
026e191be8 improved am alert notifications 2020-10-06 11:16:38 +02:00
gabryon99
0a59f57125 fixed edit am 2020-10-06 10:12:07 +02:00
Simone Mainardi
e1f4bb80f7 Default flow risk handler now sets statuses
Implements #4398
2020-10-06 09:56:53 +02:00
gabryon99
89f23846c8 handled IPv6 (#4520) 2020-10-05 18:53:57 +02:00
gabryon99
93bafa569d improved table filtering and fixed #4507 2020-10-05 18:39:07 +02:00
gabryon99
811b3f8e3c removed references to old ImportModal 2020-10-05 18:39:07 +02:00
Simone Mainardi
f6c42554bc Fixes slow hash entries purging alert
Fixes #4527
2020-10-05 14:38:53 +02:00
Alfredo Cardigliano
50411c94e4 Add endpoints for exporting pools (wip) and all configurations. Improve the import API to import modules in order. (#4475) 2020-10-02 11:22:55 +02:00
gabryon99
02d3665670 reworking for Import/Export UI (#4128)
this commit includes the GUI to manage import/export/reset of SNMP, AM, User Scripts and Notification
2020-10-01 18:57:50 +02:00
Alfredo Cardigliano
339877a1d8 Add active monitoring reset endpoint (#4433) 2020-10-01 11:50:30 +02:00
Alfredo Cardigliano
0579477893 Fix include in am_import_export 2020-09-30 17:23:35 +02:00
gabryon99
7d77735ada moved active_monitoring page template into the am plugin folder
fix #4494
2020-09-28 15:28:56 +02:00
Simone Mainardi
2f2a2e63e4 Uses plugin modules as flow-risk handlers 2020-09-24 12:48:09 +02:00
gabryon99
7fab77bf4a separated am_stats view from control 2020-09-23 23:22:19 +02:00
gabryon99
ea8e30bac0 unified tab style across the pages (#4471) 2020-09-23 21:49:35 +02:00
Simone Mainardi
d7b688b955 Adds a no-action risk handler for risks already handled in other scripts 2020-09-23 18:02:57 +02:00
Simone Mainardi
814ee67cf9 Reworks nDPI Risks flow plugins to handle all risks and scores
Fixes #4432
2020-09-23 17:58:51 +02:00
Alfredo Cardigliano
8f7ab1af85 Add import_export active monitoring module (#4475) 2020-09-23 14:40:51 +02:00
gabryon99
c8eba2f222 fix action button style in active monitoring datatable
addresses #4473
2020-09-23 08:23:56 +02:00
Simone Mainardi
3ad4522e45 Implements additional plugin hooks
The following plugin hooks have been implemented

onEnable(hook, hook_config)
onDisable(hook, hook_config)
onUpdateConfig(hook, hook_config)
onLoad(hook, hook_config)
onUnload(hook, hook_config)

Documentation is part of the commit.

Implements #4451
Implements #4453
Implements #4454
Implements #4455
2020-09-21 18:25:14 +02:00
Alfredo Cardigliano
f83ccb70d5 Add external alert check on flow end event. Remove *if* preventing external alerts from being triggered. 2020-09-21 16:12:36 +02:00
Simone Mainardi
304c5404f2 Implement additional plugin hook script.onUpdateConfig
Implements #4451
2020-09-20 13:19:36 +02:00
Alfredo Cardigliano
d15738cd00 Ignore malformed alert events 2020-09-18 18:28:56 +02:00
Alfredo Cardigliano
8c887fae76 Add check to Suricata parser 2020-09-18 16:39:52 +02:00
Simone Mainardi
f12ad8c028 Increases default script thresholds
Fixes #4424 with companion pro commit
2020-09-18 11:17:46 +02:00
Simone Mainardi
020c1cd0a1 Fixes Error with 'P2P Traffic Alert' user script
Fixes #4447
2020-09-17 18:34:23 +02:00
Alfredo Cardigliano
6f98caf7a8 Add safety check for malformed logs 2020-09-17 14:52:29 +02:00
Simone Mainardi
8724ebdd9f Adds formatted output of endpoint recipients 2020-09-17 12:41:45 +02:00
Simone Mainardi
9341a43809 Adds user scripts categories mapping in C 2020-09-16 16:47:09 +02:00
Simone Mainardi
64f0922b6b Implements plugin onLoad call
Implements #4438
2020-09-16 10:48:12 +02:00
simonemainardi
d3c8d01d0f
Creates README.md for the plugins folder structure
Implements #4358
2020-09-15 12:15:26 +02:00
Simone Mainardi
f7e1ea9709 Reworks plugin loading and structure
Implements #4358
2020-09-15 11:33:53 +02:00
Simone Mainardi
4a18a3923f Makes endpoint names self-contained in plugins 2020-09-11 18:48:54 +02:00
Simone Mainardi
8d4266f094 Minor additions for the Elasticsearch notification endpoint 2020-09-11 16:47:30 +02:00
Luca Deri
a91bde8952 Reworked alert formatting adding new options and removing little redundancy
Tiny change in the discord plugin
2020-09-10 16:13:42 +02:00
gabryon99
a6516f3bac missing MAX_RECIPIENTS constant inside am_utils.js 2020-09-10 15:09:43 +02:00
Luca Deri
2893167b51 Added comments in the discord endpoint and removed dead code
Commentede dead code in example nd syslog alert endpoints
2020-09-10 14:54:24 +02:00
Simone Mainardi
0924b42828 Fixes endpoint type for builtin endpoint 2020-09-10 14:23:48 +02:00
Luca Deri
9239caebcb Added comments 2020-09-10 12:07:45 +02:00
Simone Mainardi
20db316136 Migrates Discord plugin as self-contained 2020-09-09 17:22:09 +02:00
gabryon99
63f3914e04 fixed string localization 2020-09-09 11:08:31 +02:00