Matteo Biscosi
5dfcf415cf
Fixes 0 port not filtered in nindex
2021-06-04 09:53:31 +02:00
lucapruneti
fc7efc2a0c
issue_5404_download_alert_format-inconsistent ( #5433 )
...
* Change host alert function name to json
* Refactored *_alert_store function with format_json, added csv format tohost alert
* Added .vscode directory to gitignore
* Refactor alert_store:to_csv function to single loop format
* Removed no_data value for no records in alert csv download
* Implemented csv export for alerts
* Merge with dev
* Removed row_id alert field to be exported in csv
* Refactored alert/*/list.lua with simple decision value format construct
* Refactored alerts csv export
* Fix removed output test files
* Added alert csv export for subdocuments
* Modified gitignore
2021-06-04 08:49:31 +02:00
Luca Deri
c7939fb212
Added JA3 handling via ZMQ
2021-06-04 00:10:07 +02:00
Matteo Biscosi
a616a8f06f
Changed name value and fixed self nil value
2021-06-03 17:39:13 +02:00
Alfredo Cardigliano
f6f089c69e
Add top mac and networks by alert count
2021-06-03 15:12:37 +02:00
Simone Mainardi
49d28ccb44
Removes a debug flag
2021-06-03 14:21:11 +02:00
Simone Mainardi
27d6f53c4b
Moves items_list.template to standard user_script_templates/
2021-06-03 11:40:56 +02:00
Simone Mainardi
0385651aaf
Fixes sporadic plugins load failures causing unexpected behaviors
2021-06-03 11:37:57 +02:00
Alfredo Cardigliano
d43f32f23f
Update skype protocol name
2021-06-03 11:32:49 +02:00
Alfredo Cardigliano
5d294f7cab
Add get_stats function to comput top alerts, hosts, cli/srv hosts from historical stats
2021-06-01 18:25:40 +02:00
Alfredo Cardigliano
e0be38121f
Add operator selection in add filter dialog for severity. Fixed bugs with operator handling in tagify support.
2021-06-01 15:24:55 +02:00
Matteo Biscosi
aa0167123b
Added empty string check to formatter
2021-06-01 12:30:51 +02:00
Alfredo Cardigliano
ee7c012926
Handle operators in (view only) tags
2021-06-01 10:53:46 +02:00
Simone Mainardi
f242b94b6d
Fixes incomplete active monitoring messages upon check failures
...
Fixes #5420
2021-06-01 10:13:26 +02:00
Alfredo Cardigliano
cfdf371ab5
Support lt/gt operators in alert severity
2021-06-01 09:59:54 +02:00
Simone Mainardi
66cd1fc8a3
Removes debug print left in blog_utils.lua
...
Addresses #5422
2021-05-31 14:41:25 +02:00
Simone Mainardi
0f5340e1a3
(C) update
2021-05-31 12:39:02 +02:00
Simone Mainardi
08fb295be9
Implements support for roles (attacker/victim) filtering of alerts
...
Implements #5425
2021-05-31 12:32:56 +02:00
Matteo Biscosi
756966c62b
Added nProbe license and maintenance infos to iface
2021-05-31 12:28:41 +02:00
Simone Mainardi
9453fca4cb
Reworks and completes attacker/victim for all host alerts
...
Addresses #5310
2021-05-31 11:17:03 +02:00
gabryon99
24f054f009
add missing username for blog notifications ( #5422 )
...
The notifications backend it worked fine, but the frontend was missing the username variable to be in able to display the 'New' badge correctly
2021-05-31 10:25:54 +02:00
Luca Deri
4c27f6f98c
Implemented handlig of hello message from nprobe
2021-05-28 19:34:11 +02:00
Alfredo Cardigliano
aa2e36d053
Increase color difference ( fix #5329 )
2021-05-28 17:51:18 +02:00
Simone Mainardi
4352638cdf
Reworks and completes attacker/victim for all flow alerts
...
Addresses #5310
2021-05-28 17:03:37 +02:00
Alfredo Cardigliano
72d6cc5e38
Add hyperlinks to alert numbers (implement #5334 )
2021-05-28 15:56:33 +02:00
gabryon99
78c3984f7c
fix for sidebar ( #5407 )
2021-05-28 12:50:18 +02:00
Matteo Biscosi
8d789023c7
Fixed alert views chart error
2021-05-28 12:18:56 +02:00
gabryon99
ebc76da1b6
fixes for dark mode and removed of minified files. ( #5391 )
2021-05-28 12:13:23 +02:00
Alfredo Cardigliano
5464f23d2f
Fix policy persistency changing other pool compoenents
2021-05-28 10:08:24 +00:00
Simone Mainardi
0ac075c01c
Fixes attacker for suspicious DGA domains
...
Partially addresses #5310
2021-05-27 18:27:29 +02:00
Simone Mainardi
0c9404bacc
Removes a debug print
2021-05-27 15:19:05 +02:00
Simone Mainardi
567655ad70
Fixes for active monitoring alerts
...
Fixes #5415
2021-05-27 15:18:10 +02:00
Luca Deri
8077acba0f
Typo
2021-05-27 14:49:31 +02:00
Matteo Biscosi
ee01902bff
Fixed host pool nil value
2021-05-27 14:46:25 +02:00
Matteo Biscosi
b678a2128e
Added jailed hosts refresh when removed a member and at startup
2021-05-27 11:38:32 +02:00
Luca Deri
2589f3f8d8
Removed debug messages
2021-05-26 23:56:19 +02:00
Luca Deri
66cadb1524
Added banned hosts check
2021-05-26 23:32:55 +02:00
Matteo Biscosi
d6cf8d4d1b
Removed gettimeofday and Fixed Jailed Pool members delete
2021-05-26 18:57:10 +02:00
Simone Mainardi
0657eb6c9f
Reworks flow alerts UI, filters, and unifies terminology
...
Fixes #5331
2021-05-26 15:56:00 +02:00
Simone Mainardi
11ed4d076b
Fixes for nil ghost network alert
2021-05-26 14:36:05 +02:00
Matteo Biscosi
9be61a0838
Blocked delete and possibility to modify the Jailed Host Pool
2021-05-26 10:21:54 +02:00
Matteo Biscosi
18b0a048be
Fixed time error while adding data to drop host pool
2021-05-26 10:01:39 +02:00
Alfredo Cardigliano
9bc4dbe078
Move ips pool creation after recipients initialization
2021-05-26 09:52:13 +02:00
Simone Mainardi
8cfb7b608a
Allows alert access to admins and non-admins w/o allowed networks
...
Implements #5324
2021-05-26 09:50:28 +02:00
Matteo Biscosi
4e5e72bc12
Removed debug print
2021-05-25 19:15:35 +02:00
Simone Mainardi
0855f627a0
Allows alert access to admins and non-admins w/o allowed networks
...
Addresses #5324
2021-05-25 18:14:17 +02:00
Matteo Biscosi
c7b6e038cb
Implements add host to drop pool by alert callback ( #5405 )
2021-05-25 17:57:26 +02:00
Alfredo Cardigliano
ba67279074
Fix formatters
2021-05-25 12:57:50 +02:00
Alfredo Cardigliano
a097c85052
Remove attacker2victim/victim2attacker columns. Add icons for attacker/victim. Add has_attacker/has_victim fitlers. ( fix #5302 )
2021-05-25 12:42:44 +02:00
Matteo Biscosi
900a867a9b
Standardized host pool name
2021-05-25 12:15:22 +02:00
