7542 commits

Author	SHA1	Message	Date
Luca Deri	704bb92b5b	Asset rework	2025-03-18 18:01:44 +01:00
Alfredo Cardigliano	b077895c01	Fix format	2025-03-18 09:05:55 +01:00
Alfredo Cardigliano	b1fb4322f9	Fix correlation of suricata alerts for dns flows	2025-03-18 08:59:46 +01:00
Alfredo Cardigliano	8690becceb	Parse query id from syslog alerts	2025-03-17 20:14:56 +01:00
Alfredo Cardigliano	0cff924bf8	Fix ext alert formatter	2025-03-17 18:34:04 +01:00
Manuel Ceroni	f5ea2e1062	Updated scan alert to display network address instead of network ID (#9043)	2025-03-17 15:39:59 +01:00
GabrieleDeri	a1e077c6ac	Added Unknown manufacturer filter (#9042) ... * Fixed dist and error codes in scss * Moved network discovery to monitoring from dashboard * Added unknown MAC manufacturer filter in assets page #9036	2025-03-17 15:36:15 +01:00
GabrieleDeri	1f99754da4	Moved network discovery to monitoring from dashboard (#9041) ... * Fixed dist and error codes in scss * Moved network discovery to monitoring from dashboard	2025-03-17 14:17:17 +01:00
Luca Deri	4c4f5d9468	Fixes cento flow collection	2025-03-14 23:08:54 +01:00
Matteo Biscosi	d5c82eec2b	Added lucide as internal library	2025-03-14 20:02:04 +01:00
Luca Deri	3d1eac8b1b	Fixes failure when opening (sometimes) the interface timeseries page	2025-03-14 15:40:04 +01:00
Manuel Ceroni	43ead976bb	Implemented QoE Issues Alert (#9033) ... * Implemented QoE Issues Alert * Fixed QoE Issue alert serializer	2025-03-14 11:41:25 +01:00
Matteo Biscosi	e649e8b8fb	Added comments and fixed ordering issue in assets	2025-03-14 10:34:45 +01:00
Matteo Biscosi	ff7d2caafa	Fixes sql query	2025-03-13 16:28:56 +01:00
Matteo Biscosi	0f7344c79a	Fixes issues with assets insert in clickhouse	2025-03-13 10:10:26 +01:00
Alfredo Cardigliano	86a35a1494	Fix filters from fingerprint custom queries	2025-03-12 18:17:28 +01:00
Matteo Biscosi	5f876167e5	Added assets dashboard	2025-03-12 17:08:46 +01:00
Alfredo Cardigliano	97ca40a349	Add ja4 client fingerprint and custom queries	2025-03-12 16:57:10 +01:00
Manuel Ceroni	69e91bd875	Updated service scan check and changed limits in Scan Alert (#9026)	2025-03-11 12:33:42 +01:00
Manuel Ceroni	00c6efdce6	Implemented network and service scan checks, merging them with the port scan check into a single alert (Scan Alert) (#9024)	2025-03-10 21:19:05 +01:00
Alfredo Cardigliano	a29c7edb1f	Add configuration of dhcp options 114/160	2025-03-10 14:34:55 +01:00
Matteo Biscosi	1d6cfd2374	Possible fix for inactive hosts error (#9011)	2025-03-10 10:39:20 +01:00
Matteo Biscosi	02eeb2c6c5	Possible fix for asset_utils error (#9011)	2025-03-07 10:20:07 +01:00
Matteo Biscosi	2ba9fcda17	Fixes suspicious DGA domain alert (#8978)	2025-03-06 15:45:20 +01:00
Matteo Biscosi	ba09b280cb	Added check for asset_utils fail	2025-03-05 11:53:05 +01:00
Matteo Biscosi	34b559e66d	Added attacker in port scan (#9009)	2025-03-05 11:52:56 +01:00
Manuel Ceroni	83d6fb24da	Port scan alert aggregation (#9021)	2025-03-04 16:12:13 +01:00
Alfredo Cardigliano	d884c9bc14	Add alert set_as_attacker / set_as_victim for lua alerts on hosts	2025-03-03 08:55:19 +01:00
Luca	a72491832f	Periodic flow check is now disabled by default	2025-02-28 18:58:34 +01:00
manuelceroni	bbbcd6510a	Changed interval size and priority for port scan alerts	2025-02-28 13:14:17 +01:00
Alfredo Cardigliano	ab9224d2ce	Extend lua alerts API with alert:set_require_attention()	2025-02-28 11:58:08 +01:00
Matteo Biscosi	a251974b21	Fixes misstyping	2025-02-28 11:18:23 +01:00
Matteo Biscosi	fb44f88f34	Fixes missing where and query not working (#8999)	2025-02-28 11:15:41 +01:00
GabrieleDeri	c45d7d3347	Fixed missing import of host pool and silence duplicate alerts (#9008) ... * Fixed missing import of host pool and silence duplicate alerts in notification config import * Removed debug print	2025-02-27 23:33:50 +01:00
Manuel Ceroni	d4b7a3d375	Implemented port scan alert (clickhouse) (#9006)	2025-02-27 10:44:18 +01:00
Matteo Biscosi	c6c47f727e	Added QoE timeseries and stats into various entities (#8984)	2025-02-26 18:13:11 +01:00
Alfredo Cardigliano	4963dddfbf	Add more recipient stats for all endpoints	2025-02-26 16:39:27 +01:00
Alfredo Cardigliano	cc71465273	Fix example	2025-02-26 14:46:27 +01:00
GabrieleDeri	3e13ef3f06	Fixed broken iec104 REST, added missing params error code #9001 (#9002)	2025-02-26 14:35:24 +01:00
Matteo Biscosi	59f5b4267c	Moved QoE function to a new modules and added labels to QoE charts	2025-02-26 11:39:42 +01:00
Luca Deri	b5c2604da8	Fixed webhook timeout. Added tracings ... Improved webhook messages	2025-02-26 10:36:34 +01:00
Matteo Biscosi	1db56458d6	Added QoE filter to live flows (#8982)	2025-02-26 10:12:27 +01:00
Matteo Biscosi	a0700827c9	Added bs5 tooltips to historical data	2025-02-25 15:04:13 +01:00
Matteo Biscosi	93d7557daf	Moved qoe score to enterprise L version	2025-02-25 14:06:33 +01:00
Matteo Biscosi	a1d70927eb	Added qoe labels to historical	2025-02-25 12:05:49 +01:00
Alfredo Cardigliano	4fa955544c	Add QoE score to historical flows	2025-02-25 10:02:44 +01:00
GabrieleDeri	117b6e3f0c	Added documentation for duplicate alerts silencing logic (#8992)	2025-02-25 09:26:46 +01:00
GabrieleDeri	fe18eff11d	Started fixing rest Documentation and postman collection creation (#8987)	2025-02-24 11:46:44 +01:00
Luca Deri	2630523059	QoE improvements	2025-02-23 21:11:12 +01:00
Matteo Biscosi	e541c21dc7	Fixes historical flow details not working correctly	2025-02-21 16:34:01 +01:00