Commit graph

14 commits

Author SHA1 Message Date
Simone Mainardi
389f9c2beb Reworks TCP issues flow user script 2020-10-30 15:56:36 +01:00
Simone Mainardi
0c7429bc2f Changes tcp and tcp_syn probing flow severity to info 2020-10-22 10:30:23 +02:00
Simone Mainardi
759948a218 Fixes flow risk status severity 2020-10-20 10:34:36 +02:00
Simone Mainardi
823d8a8689 Fixes flow status severity drilldown 2020-10-20 09:41:10 +02:00
Simone Mainardi
27c1318ab6 Fixes risk not shown in generated flow-risk alerts
Fixes #4594
2020-10-19 11:10:19 +02:00
Simone Mainardi
d3dda0bb82 Unifies misbehaving with alerted flows
Implements #4596
2020-10-16 18:58:20 +02:00
Simone Mainardi
ce4d69a273 Moves alert and status definitions under lua/modules/ 2020-10-12 15:03:39 +02:00
Simone Mainardi
814ee67cf9 Reworks nDPI Risks flow plugins to handle all risks and scores
Fixes #4432
2020-09-23 17:58:51 +02:00
Simone Mainardi
c543df45f9 Reworks suspicious file transfers 2020-05-13 19:38:24 +02:00
Simone Mainardi
0d7ed3f0ed Extends binary and unknown port alerts 2020-05-13 12:21:01 +02:00
Luca Deri
f4b25f30b3 Flow risk report improvemements 2020-05-12 12:57:36 +02:00
Luca Deri
e315158c1d Added plugin for handling flow risks reported by nDPI 2020-05-12 12:18:50 +02:00
Luca Deri
ff76407e68 Added detection of self-signed (< TLS 1.3) certificates 2020-05-08 09:53:31 +02:00
Simone Mainardi
78b334e4eb Refactors alerts and flow statuses in builtin and plugins
Implements #3811
Implements #3812

Refactors builtin alerts

Refactors builtin flow statuses
2020-04-21 22:27:49 +02:00