15 commits

Author	SHA1	Message	Date
Luca Deri	c5e0db54b7	Added support for lateral movement detection	2020-10-11 18:30:21 +02:00
Luca Deri	7616249acd	Defined new keys for flows with severe retransmissions	2020-10-11 14:51:16 +02:00
Luca Deri	4565f8af04	Added plugin for detecting unexpected NTP servers	2020-10-10 10:54:19 +02:00
Luca Deri	6190b1e351	Added ... - alert_unexpected_dns_server = {NO_PEN, 63}, - alert_unexpected_smtp_server = {NO_PEN, 64}, - alert_unexpected_dhcp_server = {NO_PEN, 65}, alert keys	2020-10-09 10:37:44 +02:00
Simone Mainardi	814ee67cf9	Reworks nDPI Risks flow plugins to handle all risks and scores ... Fixes #4432	2020-09-23 17:58:51 +02:00
Luca Deri	8db941c31e	Improved IEC 104 plugin	2020-09-16 23:24:40 +02:00
Simone Mainardi	7f241d71d5	Implements attack mitigation via SNMP ... Implements #3833 along with companion pro commit	2020-08-24 15:05:35 +02:00
Alfredo Cardigliano	e8fcbd2a90	Trigger host alerts for collected syslog messages (also to companions)	2020-05-18 12:52:38 +02:00
Simone Mainardi	c543df45f9	Reworks suspicious file transfers	2020-05-13 19:38:24 +02:00
Luca Deri	e315158c1d	Added plugin for handling flow risks reported by nDPI	2020-05-12 12:18:50 +02:00
Simone Mainardi	f6952358e7	Uniforms handling of alert ids ... Implements #3823	2020-04-23 10:27:05 +02:00
Simone Mainardi	ac8bd534ea	Implents PEN for alert keys ... Implements #3823	2020-04-22 13:21:40 +02:00
Simone Mainardi	78b334e4eb	Refactors alerts and flow statuses in builtin and plugins ... Implements #3811 Implements #3812 Refactors builtin alerts Refactors builtin flow statuses	2020-04-21 22:27:49 +02:00
emanuele-f	0be2da4f57	Cleanup remaining references to RTT	2020-04-20 12:21:39 +02:00
Simone Mainardi	4177ee61ab	Implements constant flow and alert ids ... Enlarges AlertType size Changes alerts database	2020-04-14 22:20:44 +02:00