Daniele Zulberti
fedd1e3218
Added unexpected DHCP plugin
2020-10-10 20:22:06 +02:00
Luca Deri
4565f8af04
Added plugin for detecting unexpected NTP servers
2020-10-10 10:54:19 +02:00
Luca Deri
c323c6f351
Tiny change
2020-10-10 10:35:06 +02:00
Luca Deri
2093488db3
Minor fixe: when the list of DNS/SMTP servers is empty, no check is performed
2020-10-10 10:33:47 +02:00
Daniele Zulberti
d74caa9d2b
Added unexpected SMTP plugin
2020-10-09 17:06:23 +02:00
Daniele Zulberti
cff77b49cf
Added unexpected DNS plugin
2020-10-09 17:06:23 +02:00
Simone Mainardi
049bfdcf4a
Implements bitmap-based limited privileges for non-admins
...
Implements #4489
2020-10-09 15:50:22 +02:00
Alfredo Cardigliano
bafccf2c06
Add malformed/dispatched syslog counters. Inc counters in the Suricata plugin.
2020-10-09 15:00:21 +02:00
gabryon99
ee80638073
fixed invalid graph unity ( #4525 )
2020-10-07 17:10:37 +02:00
gabryon99
026e191be8
improved am alert notifications
2020-10-06 11:16:38 +02:00
gabryon99
0a59f57125
fixed edit am
2020-10-06 10:12:07 +02:00
Simone Mainardi
e1f4bb80f7
Default flow risk handler now sets statuses
...
Implements #4398
2020-10-06 09:56:53 +02:00
gabryon99
89f23846c8
handled IPv6 ( #4520 )
2020-10-05 18:53:57 +02:00
gabryon99
93bafa569d
improved table filtering and fixed #4507
2020-10-05 18:39:07 +02:00
gabryon99
811b3f8e3c
removed references to old ImportModal
2020-10-05 18:39:07 +02:00
Simone Mainardi
f6c42554bc
Fixes slow hash entries purging alert
...
Fixes #4527
2020-10-05 14:38:53 +02:00
Alfredo Cardigliano
50411c94e4
Add endpoints for exporting pools (wip) and all configurations. Improve the import API to import modules in order. ( #4475 )
2020-10-02 11:22:55 +02:00
gabryon99
02d3665670
reworking for Import/Export UI ( #4128 )
...
this commit includes the GUI to manage import/export/reset of SNMP, AM, User Scripts and Notification
2020-10-01 18:57:50 +02:00
Alfredo Cardigliano
339877a1d8
Add active monitoring reset endpoint ( #4433 )
2020-10-01 11:50:30 +02:00
Alfredo Cardigliano
0579477893
Fix include in am_import_export
2020-09-30 17:23:35 +02:00
gabryon99
7d77735ada
moved active_monitoring page template into the am plugin folder
...
fix #4494
2020-09-28 15:28:56 +02:00
Simone Mainardi
2f2a2e63e4
Uses plugin modules as flow-risk handlers
2020-09-24 12:48:09 +02:00
gabryon99
7fab77bf4a
separated am_stats view from control
2020-09-23 23:22:19 +02:00
gabryon99
ea8e30bac0
unified tab style across the pages ( #4471 )
2020-09-23 21:49:35 +02:00
Simone Mainardi
d7b688b955
Adds a no-action risk handler for risks already handled in other scripts
2020-09-23 18:02:57 +02:00
Simone Mainardi
814ee67cf9
Reworks nDPI Risks flow plugins to handle all risks and scores
...
Fixes #4432
2020-09-23 17:58:51 +02:00
Alfredo Cardigliano
8f7ab1af85
Add import_export active monitoring module ( #4475 )
2020-09-23 14:40:51 +02:00
gabryon99
c8eba2f222
fix action button style in active monitoring datatable
...
addresses #4473
2020-09-23 08:23:56 +02:00
Simone Mainardi
3ad4522e45
Implements additional plugin hooks
...
The following plugin hooks have been implemented
onEnable(hook, hook_config)
onDisable(hook, hook_config)
onUpdateConfig(hook, hook_config)
onLoad(hook, hook_config)
onUnload(hook, hook_config)
Documentation is part of the commit.
Implements #4451
Implements #4453
Implements #4454
Implements #4455
2020-09-21 18:25:14 +02:00
Alfredo Cardigliano
f83ccb70d5
Add external alert check on flow end event. Remove *if* preventing external alerts from being triggered.
2020-09-21 16:12:36 +02:00
Simone Mainardi
304c5404f2
Implement additional plugin hook script.onUpdateConfig
...
Implements #4451
2020-09-20 13:19:36 +02:00
Alfredo Cardigliano
d15738cd00
Ignore malformed alert events
2020-09-18 18:28:56 +02:00
Alfredo Cardigliano
8c887fae76
Add check to Suricata parser
2020-09-18 16:39:52 +02:00
Simone Mainardi
f12ad8c028
Increases default script thresholds
...
Fixes #4424 with companion pro commit
2020-09-18 11:17:46 +02:00
Simone Mainardi
020c1cd0a1
Fixes Error with 'P2P Traffic Alert' user script
...
Fixes #4447
2020-09-17 18:34:23 +02:00
Alfredo Cardigliano
6f98caf7a8
Add safety check for malformed logs
2020-09-17 14:52:29 +02:00
Simone Mainardi
8724ebdd9f
Adds formatted output of endpoint recipients
2020-09-17 12:41:45 +02:00
Simone Mainardi
9341a43809
Adds user scripts categories mapping in C
2020-09-16 16:47:09 +02:00
Simone Mainardi
64f0922b6b
Implements plugin onLoad call
...
Implements #4438
2020-09-16 10:48:12 +02:00
simonemainardi
d3c8d01d0f
Creates README.md for the plugins folder structure
...
Implements #4358
2020-09-15 12:15:26 +02:00
Simone Mainardi
f7e1ea9709
Reworks plugin loading and structure
...
Implements #4358
2020-09-15 11:33:53 +02:00
Simone Mainardi
4a18a3923f
Makes endpoint names self-contained in plugins
2020-09-11 18:48:54 +02:00
Simone Mainardi
8d4266f094
Minor additions for the Elasticsearch notification endpoint
2020-09-11 16:47:30 +02:00
Luca Deri
a91bde8952
Reworked alert formatting adding new options and removing little redundancy
...
Tiny change in the discord plugin
2020-09-10 16:13:42 +02:00
gabryon99
a6516f3bac
missing MAX_RECIPIENTS constant inside am_utils.js
2020-09-10 15:09:43 +02:00
Luca Deri
2893167b51
Added comments in the discord endpoint and removed dead code
...
Commentede dead code in example nd syslog alert endpoints
2020-09-10 14:54:24 +02:00
Simone Mainardi
0924b42828
Fixes endpoint type for builtin endpoint
2020-09-10 14:23:48 +02:00
Luca Deri
9239caebcb
Added comments
2020-09-10 12:07:45 +02:00
Simone Mainardi
20db316136
Migrates Discord plugin as self-contained
2020-09-09 17:22:09 +02:00
gabryon99
63f3914e04
fixed string localization
2020-09-09 11:08:31 +02:00