7713 commits

Author	SHA1	Message	Date
Alfredo Cardigliano	25ee73bbe3	Fix alerts chart for alerts engaged before the time interval (#8795)	2024-12-30 12:02:54 +01:00
Alfredo Cardigliano	a5c59a2c48	Check max alert engage time to optimize queries (#8795)	2024-12-27 18:45:55 +01:00
Luca Deri	ac6788a311	Bug fix	2024-12-23 21:01:01 +01:00
Luca Deri	4b160de275	Improved host policy alert	2024-12-23 10:32:04 +01:00
Alfredo Cardigliano	e242395dd2	Show engaged time interval in alerts	2024-12-20 12:44:21 +01:00
Matteo Biscosi	d435f379b0	Removed check on entity id when printing the host	2024-12-19 18:27:51 +01:00
YellowMan	a747b6bebc	added asset management utils (#8883)	2024-12-19 18:26:33 +01:00
Matteo Biscosi	133f5339b3	Added host policy alert in lua	2024-12-19 10:23:46 +01:00
Matteo Biscosi	02760c9303	Unified alert details page for ch and not (#8825)	2024-12-18 16:12:00 +01:00
YellowMan	3fae0b6e65	Mac tracking list (#8881) ... * Local To Internet Connection Alert * migrate information in mac-address traking list page	2024-12-18 15:09:41 +01:00
Alfredo Cardigliano	b38ce0cef7	Fix pcap bpf from the host page	2024-12-18 12:43:00 +01:00
Alfredo Cardigliano	619ebfa11c	Add restricted networks configuration in nedge multicast forwarding	2024-12-17 12:00:29 +01:00
Matteo Biscosi	fc7fa607ae	Added missing local2remote and remote2local ts (#8837)	2024-12-17 11:14:20 +01:00
Matteo Biscosi	a514dc9cdb	Fixes periodicity changed description (#8853)	2024-12-17 11:06:52 +01:00
Matteo Biscosi	5faffe64bc	Possible fix for error while loading the recipient (#8876)	2024-12-17 10:57:01 +01:00
Matteo Biscosi	e89f07f238	Merged score threshold and dangerous hosts alerts (#8827)	2024-12-12 16:45:43 +01:00
Matteo Biscosi	6ec9b42771	Added non null check	2024-12-12 11:51:45 +01:00
YellowMan	dc24919182	fixed missing information in historical flow details (#8872)	2024-12-12 11:42:13 +01:00
Matteo Biscosi	c0c1773777	Added function to convert from flow to flow_alert	2024-12-12 11:06:12 +01:00
Matteo Biscosi	faa34b614c	Fixes alert score not correctlt working (#8851)	2024-12-11 19:25:30 +01:00
Matteo Biscosi	e3487d445f	Fixes alerts incorrectly displayed	2024-12-11 19:25:30 +01:00
YellowMan	c712750200	Remote to local insecure flow (#8871) ... * Fixed domain names contact alert behaviour * enanched remote to local insecure flow alert description * minor fix	2024-12-11 16:54:01 +01:00
Matteo Biscosi	5d76ee3ec7	Fixes score calculation error (#8868)	2024-12-11 12:32:20 +01:00
Matteo Biscosi	715cc5ddd9	Fixes compatibility with new alert format	2024-12-10 18:05:47 +01:00
Alfredo Cardigliano	e1c385985c	Fix backward compatibility	2024-12-10 14:40:32 +01:00
Alfredo Cardigliano	d8d7330f11	Rework alert serialization. Change alert info format (info for all triggered alerts are now generated)	2024-12-10 13:27:57 +01:00
Matteo Biscosi	c214ffca9a	Fixes blacklists timeseries not correctly showing values (#8817)	2024-12-09 13:28:55 +01:00
Alfredo Cardigliano	027a4ebbf4	Add missing require	2024-12-09 09:24:45 +01:00
Matteo Biscosi	609b059745	Added networks policies (#8812)	2024-12-05 16:51:26 +01:00
Alfredo Cardigliano	ae5128c620	Split protocol and alert info from ALERT_JSON: new PROTOCOL_INFO_JSON column	2024-12-05 15:13:16 +01:00
Matteo Biscosi	358660a56f	Added startup delete on all radius keys	2024-12-05 13:15:49 +01:00
Luca Deri	76e47112e8	Fixes invalid format error	2024-12-05 12:22:23 +01:00
YellowMan	2ffe95845d	Added application latency in historical flow information (#8855)	2024-12-05 10:10:05 +01:00
Matteo Biscosi	0ebe2b9e88	Fixes missing blacklist (#8841)	2024-12-02 18:34:00 +01:00
Matteo Biscosi	2a47b8667f	Fixes mac addresses alerts	2024-12-02 17:32:55 +01:00
Matteo Biscosi	07ef54c7cc	Added ACL violation ARP alert (#8696)	2024-12-02 13:07:56 +01:00
Matteo Biscosi	f160e11007	Added is in memory parameter and removed port 0 (#8843)	2024-11-29 12:02:58 +01:00
Matteo Biscosi	819f39830b	Added ACL Violation alert (#8696)	2024-11-28 18:02:53 +01:00
Matteo Biscosi	736932e977	Added error handling in case of edit/add/delete (#8696)	2024-11-28 11:23:18 +01:00
Luca Deri	fb06400fe2	Changed alert serialization	2024-11-28 09:34:57 +01:00
Luca Deri	084e295af8	Minor fixes	2024-11-27 15:26:31 +01:00
Luca Deri	6b4afa074a	Removed OS stats	2024-11-26 10:23:04 +01:00
Matteo Biscosi	d50cce28d3	First implementation of acl (#8696)	2024-11-25 19:37:01 +01:00
Luca Deri	6294343086	Reworked OS and hot fingerprint	2024-11-24 23:08:38 +01:00
Luca Deri	d3e469a316	Mergec TCP Probing and Probin attempt	2024-11-20 22:08:07 +01:00
Matteo Biscosi	70f257d909	Added manufacturer to historical flows (#8534)	2024-11-20 15:20:40 +01:00
Matteo Biscosi	170725e5eb	Removed not used import	2024-11-20 14:56:51 +01:00
Matteo Biscosi	40bb18ebdc	Fixes missing nDPI alerts description (#8570)	2024-11-20 13:59:58 +01:00
Alfredo Cardigliano	8c0094f354	Fix flow alerts lookup for non predominant alerts (alerts_map_h/alerts_map_l integer columns)	2024-11-20 11:44:06 +01:00
YellowMan	d396297985	Tcp Probing Attempt Alert (#8821) ... * Implemented TCP Probing Attempt Alert --------- Co-authored-by: DiPalmaGiuseppe <g.dipalma6@studenti.unipi.it>	2024-11-20 10:58:36 +01:00