Commit graph

4359 commits

Author SHA1 Message Date
Simone Mainardi
98d834ba89 Fixes broken elephant flow script configuration
Fixes #5380
2021-05-20 15:07:21 +02:00
Luca Deri
8a4c653268 Implemented policy export 2021-05-20 13:09:05 +02:00
Matteo Biscosi
319244e3e9 Fixes prefs button colors (#5382) 2021-05-20 12:58:03 +02:00
Matteo Biscosi
3661df6d51 Fixes prefs button not outlining the selected one
Implements #5382
2021-05-20 12:29:28 +02:00
Luca Deri
e066506aeb Updated policy code 2021-05-20 10:30:04 +02:00
Simone Mainardi
f5ae35e4b6 Minor fixes 2021-05-19 12:00:36 +02:00
gabryon99
1c1c3a68aa fixed switch alignments in preferences (#5354) 2021-05-19 11:58:33 +02:00
Matteo Biscosi
db58e800b3 Fixed historical table alignment
Implements #5351
2021-05-19 10:55:34 +02:00
Simone Mainardi
1b272d63a1 Fixes recipients not handled when setting policies 2021-05-19 10:36:48 +02:00
Alfredo Cardigliano
b99384494e Fix pools set policy 2021-05-18 18:06:44 +02:00
Alfredo Cardigliano
3a67f53b10 Implement pool policy editor 2021-05-18 16:48:53 +02:00
Matteo Biscosi
40612e713d Fixed closing modals not working 2021-05-18 13:11:55 +02:00
Simone Mainardi
1dce9e5842 Migrates to Bootstrap 5
Adds bootstrap-5.0.0-beta3-dist

Adds bootstrap-5.0.0

Updates bootstrap-5.0.0-beta3-dist to bootstrap-5.0.0-dist

initial migration to bs v5

porting to bs5

improvements on dropdown menu filter

fixed host map dropdown

removed excessive padding

fix button toggle

re-add blog news

removed text decoration for links

fix button layout (#5348)

remove underscore from href (#5347)
2021-05-18 11:39:59 +02:00
Matteo Biscosi
83ff018198 Added fixed len to score anomaly alert category percentage 2021-05-17 18:27:36 +02:00
Matteo Biscosi
bc80a86d73 Added score breakdown to score anomaly alert
Implements #5339
2021-05-17 18:24:01 +02:00
Matteo Biscosi
a2578c485e Removed icon multicast/local redundancy 2021-05-17 15:53:09 +02:00
Matteo Biscosi
020b1fd539 Removed confusing icons from alerts/hosts/flows tables 2021-05-17 15:51:10 +02:00
Matteo Biscosi
fdf8fbadb8 Fixes Host/Flow anomaly description
Implements #5337
Implements #5333
2021-05-17 14:53:20 +02:00
Alfredo Cardigliano
c3dfe67eb5 Add l7 proto and roles to flow alert filters 2021-05-17 14:23:18 +02:00
Matteo Biscosi
d06cd70c7b Fixed alert page crashing due to pro import 2021-05-17 12:01:00 +02:00
Alfredo Cardigliano
32585a34d0 Fix query on attacker/victim 2021-05-17 09:51:59 +02:00
Simone Mainardi
ccb61a7444 Harmonizes remaining hardcoded Lua scores 2021-05-15 11:00:20 +02:00
Simone Mainardi
38b47d5aa8 Unifies scores using nDPI for Lua-triggered alerts 2021-05-15 10:37:42 +02:00
Alfredo Cardigliano
c8731f5bfa Add filter support for host role (attacker/victim) 2021-05-14 19:37:56 +02:00
Alfredo Cardigliano
026571e6a7 Move all render code to datatable-utils. Cleanup attacker/victim rendering. 2021-05-14 19:01:39 +02:00
Matteo Biscosi
553a059557 Added getters and setters for host pools policy 2021-05-14 17:41:06 +02:00
Alfredo Cardigliano
cefcd8c021 Severity filter improvements 2021-05-14 16:05:44 +02:00
Alfredo Cardigliano
206f1bb608 Move 'add filter' button to the tags bar. Fix filter dialog for all families (#5292) 2021-05-14 15:53:30 +02:00
Alfredo Cardigliano
30e0bd8675 Add ability to filter by alert type (#5292) 2021-05-14 15:23:28 +02:00
Matteo Biscosi
4b31a0d21c Added score timeseries for vlan, as, subnet and country
Implements #5317
2021-05-14 14:58:18 +02:00
Alfredo Cardigliano
f1c343ed83 Add cli/srv ip/port filters to flow alerts, ip filter to host alerts (#5292) 2021-05-14 11:15:08 +02:00
Alfredo Cardigliano
064c20db29 Implement support for alert filters using a dialog (WIP) 2021-05-13 19:02:28 +02:00
Simone Mainardi
bc6008be28 Reports all alerts inside a flow alert (not jsut the predominant)
Implements #5316
2021-05-13 15:51:05 +02:00
Matteo Biscosi
4d5cd3b3af Added score stats to VLAN/Country/AS/Network 2021-05-13 11:09:16 +02:00
Simone Mainardi
b7f12727e2 Implements spillover description column for flow alerts 2021-05-12 18:43:12 +02:00
Simone Mainardi
6ae7664de0 Fixes missing interface and host score timeseries
Fixes #5300
2021-05-12 17:17:57 +02:00
Simone Mainardi
8cf7635fb6 Calibrates scores associated to flow risks 2021-05-12 15:10:52 +02:00
Simone Mainardi
d45ab54934 Harmonizes scores for Lua-triggered alerts
Addresses #5315
2021-05-12 12:56:12 +02:00
Alfredo Cardigliano
b784ffa90c Return an empty series when there are no alerts 2021-05-12 11:45:13 +02:00
Simone Mainardi
1c746a04c1 Cleanup unnecessary flags after sys/non-sys changes 2021-05-12 10:14:20 +02:00
Simone Mainardi
a743a1604d Unifies names across alerts, pools and user scripts
Fixes #5311
2021-05-12 10:07:26 +02:00
Simone Mainardi
bb3f8ed168 Implements efficient unexpected_new_device alert 2021-05-11 19:03:40 +02:00
Alfredo Cardigliano
03bf2bca5e Fix attacker/victim records 2021-05-11 18:52:09 +02:00
Alfredo Cardigliano
bd190c22d1 Set record family when it applies 2021-05-11 18:13:48 +02:00
Alfredo Cardigliano
6c9b546383 Improve alert description for some families 2021-05-11 18:11:10 +02:00
Matteo Biscosi
1fa6159ab2 Implements attacker and victim sorting flow alert table 2021-05-11 17:24:10 +02:00
Alfredo Cardigliano
41b72c1125 Cleanup alert description (move configset link as additional field). Add ellipsis to long descriptions, with tooltips. 2021-05-11 17:18:13 +02:00
Alfredo Cardigliano
3180f83e5f Fix network entity name to match the user scripts configuration 2021-05-11 16:04:27 +02:00
Simone Mainardi
6deadca5fb Fixes redir. URL when switching between sys/non-sys 2021-05-11 14:52:49 +02:00
Alfredo Cardigliano
f801f86dc6 Add alert type to alert description and ability to filter on alert type for all alert families. (fix #5312) 2021-05-11 14:40:24 +02:00