Commit graph

27 commits

Author SHA1 Message Date
Matteo Biscosi
41163ac7f6 Implements low risk alert type must be further split
Implements #5066
2021-02-25 19:09:17 +01:00
Simone Mainardi
c70c635e3f Fixes TLS-risks sometimes handled twice 2021-02-18 14:45:02 +01:00
Simone Mainardi
823c6ddc81 Fixes flow risks no longer triggering 2021-02-18 11:20:17 +01:00
Matteo Biscosi
0c0ba319c2 Modified default fields for flow risk alert 2021-02-17 11:55:07 +01:00
Matteo Biscosi
711bcb21d0 Added exclusion list to the flow risk script 2021-02-17 11:46:45 +01:00
Simone Mainardi
f4dff6f2e7 Implements risk-based filtering of flow alerts 2021-02-16 15:25:20 +01:00
Alfredo Cardigliano
f245caf83c Deterministic selection of flow risk 2021-02-12 17:47:54 +01:00
Alfredo Cardigliano
b3cf18d821 Rename alert_tls_old_version -> alert_tls_old_protocol_version everywhere for consistency 2021-01-29 11:10:43 +01:00
Matteo Biscosi
0fbe214a60 Removed default severity from some alerts 2021-01-29 10:51:31 +01:00
Matteo Biscosi
b1134b611f Added to double severity alert, single default alert
Implements #4919
2021-01-28 18:18:22 +01:00
Luca Deri
a1178a0791 Updated (C) 2021-01-02 12:08:23 +01:00
Simone Mainardi
f839b6ba76 Removes flow_consts requires no longer necessary 2020-12-22 18:06:50 +01:00
Matteo Biscosi
bcf2c2c1ed Migrates alerts to an object-oriented implementation 2020-12-22 14:48:00 +01:00
matteo
e24ef4ef35 Revert "Migrates alerts to an object-oriented implementation"
This reverts commit fbc283f12f.
2020-12-22 13:13:57 +01:00
matteo
fbc283f12f Migrates alerts to an object-oriented implementation 2020-12-22 13:00:25 +01:00
Simone Mainardi
b3dc39c641 Refactors alert_severities into an independend Lua module 2020-11-30 15:28:17 +01:00
Matteo Biscosi
0e341f3d0b
Modified flow scripts in view of the new trigger_status (#4710)
* Modified blacklisted script in view of the new flow_script API

* Modified plugins scripting in view of the new API

* Modified flow scripts with the new trigger API

* Fixed creators severity

Co-authored-by: matteo <biscosi@ntop.org>
2020-11-12 13:52:53 +01:00
Simone Mainardi
073fd5f6cd Fixes flow score to low for suspicious file transfer risk 2020-11-06 13:40:36 +00:00
Simone Mainardi
00f1ae731a Keeps configured enabled/disabled flow risks into account inside plugin 2020-10-19 11:56:41 +02:00
Simone Mainardi
27c1318ab6 Fixes risk not shown in generated flow-risk alerts
Fixes #4594
2020-10-19 11:10:19 +02:00
Luca Deri
a5076c0d27 Implemented multiselect to be used in #4589 2020-10-16 22:29:12 +02:00
Simone Mainardi
d3dda0bb82 Unifies misbehaving with alerted flows
Implements #4596
2020-10-16 18:58:20 +02:00
Simone Mainardi
e1f4bb80f7 Default flow risk handler now sets statuses
Implements #4398
2020-10-06 09:56:53 +02:00
Simone Mainardi
2f2a2e63e4 Uses plugin modules as flow-risk handlers 2020-09-24 12:48:09 +02:00
Simone Mainardi
d7b688b955 Adds a no-action risk handler for risks already handled in other scripts 2020-09-23 18:02:57 +02:00
Simone Mainardi
814ee67cf9 Reworks nDPI Risks flow plugins to handle all risks and scores
Fixes #4432
2020-09-23 17:58:51 +02:00
Simone Mainardi
f7e1ea9709 Reworks plugin loading and structure
Implements #4358
2020-09-15 11:33:53 +02:00