Alfredo Cardigliano
|
471e56a9ef
|
Fix nil access (url)
|
2021-07-06 16:21:47 +02:00 |
|
l3wiz
|
d24f94d14d
|
Added a modal when try to open external links (Issue #5618)
|
2021-07-02 19:28:33 +02:00 |
|
MatteoBiscosi
|
744a5e53c3
|
Added vlan to each host reference (#5595)
|
2021-07-02 13:13:00 +02:00 |
|
MatteoBiscosi
|
06b72839dd
|
Extended url length #5596
|
2021-07-02 11:54:39 +02:00 |
|
MatteoBiscosi
|
04865c8938
|
Implements #5596 added external href to suspicious file transfer
|
2021-07-02 10:39:58 +02:00 |
|
MatteoBiscosi
|
fcf4084a03
|
Fixes #5590 removed table.concat function and changed with tconcat
|
2021-07-01 16:30:23 +02:00 |
|
Alfredo Cardigliano
|
26868ca62c
|
Set missing entities in alert definitions
|
2021-07-01 09:03:02 +02:00 |
|
MatteoBiscosi
|
b487946452
|
Fixes #5590 concatenation using function
|
2021-06-30 18:32:36 +02:00 |
|
MatteoBiscosi
|
a04d1a25bf
|
Removed concatenation and used the tconcat function
|
2021-06-30 17:22:19 +02:00 |
|
MatteoBiscosi
|
be198c2a99
|
Added L7 iface proto behavior analysis and alert (#5499 #5474)
|
2021-06-29 16:50:56 +02:00 |
|
Alfredo Cardigliano
|
b6043c1e72
|
Fix (entities in am_threshold_cross alert definition and) alert type filter
|
2021-06-25 16:08:19 +02:00 |
|
MatteoBiscosi
|
1ad608e905
|
Changed behavior alert family key into entities id
|
2021-06-25 15:06:21 +02:00 |
|
Simone Mainardi
|
63168f5ff2
|
Implements 'Subject' column for interface alerts
Addresses #5563
|
2021-06-24 15:51:17 +02:00 |
|
MatteoBiscosi
|
68fb1ec1b1
|
Fixed wrong ifid number
|
2021-06-24 12:52:04 +02:00 |
|
l3wiz
|
572e209bd0
|
Added question tooltip when string is cut (Issue #5522)
|
2021-06-24 12:21:15 +02:00 |
|
MatteoBiscosi
|
47497ca666
|
Fixes behavior anomaly alert key not found
|
2021-06-23 22:55:08 +02:00 |
|
MatteoBiscosi
|
fd40e51428
|
Changed alert behavior location
|
2021-06-23 17:58:30 +02:00 |
|
MatteoBiscosi
|
a6aa647624
|
Removed path and timeseries string from behavior alerts
|
2021-06-23 16:23:45 +02:00 |
|
MatteoBiscosi
|
462eaa384b
|
Fixes ASes and Networks alert behavior
|
2021-06-23 15:14:03 +02:00 |
|
Alfredo Cardigliano
|
279ed66deb
|
Add alert type filter for all families
|
2021-06-23 12:53:20 +02:00 |
|
MatteoBiscosi
|
638bf881fd
|
Migrated periodicity update alert into flow alert
|
2021-06-21 17:47:03 +02:00 |
|
MatteoBiscosi
|
6549d19a99
|
Fixes alert formatting broken (#5536)
|
2021-06-21 16:16:22 +02:00 |
|
MatteoBiscosi
|
f4d4543fab
|
Changed behavior anomaly alert (#5521)
|
2021-06-21 09:41:53 +02:00 |
|
MatteoBiscosi
|
7f9cf7a181
|
Removed debug print
|
2021-06-18 15:27:42 +02:00 |
|
MatteoBiscosi
|
89071f0a9a
|
Fixes alert score/flow anomaly description (#5522)
|
2021-06-18 15:19:08 +02:00 |
|
MatteoBiscosi
|
8a1e315496
|
Fixed lateral movement alert description (#5524)
|
2021-06-18 11:37:25 +02:00 |
|
MatteoBiscosi
|
5a02d2a0d7
|
Fixed lateral movement not triggering
|
2021-06-18 11:08:44 +02:00 |
|
MatteoBiscosi
|
dd3a038a0f
|
Changed lateral movement description (#5517)
|
2021-06-18 10:07:48 +02:00 |
|
Luca Deri
|
34897cec6b
|
Fix for alert display
|
2021-06-18 08:51:39 +02:00 |
|
MatteoBiscosi
|
5c4142fdcb
|
Implements behavioral alerts (#5500 #5501)
|
2021-06-17 17:10:02 +02:00 |
|
MatteoBiscosi
|
cf363eaa10
|
Changed old info string into lateral movement
|
2021-06-17 12:05:26 +02:00 |
|
MatteoBiscosi
|
48554751f9
|
Removed duplicated info from lateral movement alert
|
2021-06-17 12:02:56 +02:00 |
|
MatteoBiscosi
|
a89c95dba4
|
Migrated Lateral Movement alert from interface to flow (Fixes #5485)
|
2021-06-17 11:07:29 +02:00 |
|
Simone Mainardi
|
25159f0a9b
|
Refactors {host,flow}_callbacks into {host,flow}_checks (lua)
|
2021-06-16 18:59:07 +02:00 |
|
Simone Mainardi
|
9a541f14ba
|
Cleanup unused alert_check_calls_drops.lua
|
2021-06-16 18:48:51 +02:00 |
|
Simone Mainardi
|
76fd315d1b
|
Refactors user_scripts into checks (lua)
|
2021-06-16 18:02:22 +02:00 |
|
Simone Mainardi
|
f39401e64a
|
Fixes ogin denied for user 'nil'
|
2021-06-14 14:32:28 +02:00 |
|
Luca Deri
|
c76cce1c4f
|
Renamed Host Ban to Dangerous Host
|
2021-06-09 22:54:17 +02:00 |
|
Simone Mainardi
|
fc2db1513b
|
Cleanup of unnecessary items in user scripts config. JSON
Fixes #5456
|
2021-06-08 18:38:58 +02:00 |
|
Simone Mainardi
|
1ca6effc02
|
Fixes nils in start/stop ntopng process alerts
|
2021-06-07 12:13:09 +02:00 |
|
Simone Mainardi
|
f242b94b6d
|
Fixes incomplete active monitoring messages upon check failures
Fixes #5420
|
2021-06-01 10:13:26 +02:00 |
|
Matteo Biscosi
|
756966c62b
|
Added nProbe license and maintenance infos to iface
|
2021-05-31 12:28:41 +02:00 |
|
Simone Mainardi
|
4352638cdf
|
Reworks and completes attacker/victim for all flow alerts
Addresses #5310
|
2021-05-28 17:03:37 +02:00 |
|
Simone Mainardi
|
0ac075c01c
|
Fixes attacker for suspicious DGA domains
Partially addresses #5310
|
2021-05-27 18:27:29 +02:00 |
|
Simone Mainardi
|
11ed4d076b
|
Fixes for nil ghost network alert
|
2021-05-26 14:36:05 +02:00 |
|
Matteo Biscosi
|
4e5e72bc12
|
Removed debug print
|
2021-05-25 19:15:35 +02:00 |
|
Matteo Biscosi
|
211fc3eb9f
|
Implements policy endpoint and fixed Dangerous Host alert
|
2021-05-24 16:39:30 +02:00 |
|
Matteo Biscosi
|
bcc717689f
|
Partially Implements traffic blocking (#5387)
|
2021-05-21 18:40:49 +02:00 |
|
Matteo Biscosi
|
83ff018198
|
Added fixed len to score anomaly alert category percentage
|
2021-05-17 18:27:36 +02:00 |
|
Matteo Biscosi
|
bc80a86d73
|
Added score breakdown to score anomaly alert
Implements #5339
|
2021-05-17 18:24:01 +02:00 |
|