Luca Deri
|
a1178a0791
|
Updated (C)
|
2021-01-02 12:08:23 +01:00 |
|
Simone Mainardi
|
c1bdfb8722
|
Unifies flow_keys and status_keys
|
2020-12-22 19:14:16 +01:00 |
|
matteo
|
e24ef4ef35
|
Revert "Migrates alerts to an object-oriented implementation"
This reverts commit fbc283f12f.
|
2020-12-22 13:13:57 +01:00 |
|
matteo
|
fbc283f12f
|
Migrates alerts to an object-oriented implementation
|
2020-12-22 13:00:25 +01:00 |
|
Simone Mainardi
|
3baa932a01
|
Migrates alerts to an object-oriented implementation
Migrates alert_malicious_signature alert_elephant_local_to_remote alert_elephant_remote_to_local
Migrates long_lived
Migrates alert_flow_blocked
Migrates alert_tls_old_version
Migrates alert_tls_certificate_mismatch
Migrates alert_tls_certificate_expired
Migrates alert_tls_unsafe_ciphers
Migrates alert_tls_certificate_selfsigned
Migrates alert_potentially_dangerous_protocol
Migrates alert_snmp_device_reset
Migrates alert_port_mac_changed
Migrates alert_port_duplexstatus_change
Mirgates alert_port_errors
Migrates alert_port_status_change
Migrates alert_port_load_threshold_exceeded
Migrates alert_data_exfiltration
Migrates alert_dns_data_exfiltration
Migrates alert_suspicious_tcp_probing alert_suspicious_tcp_syn_probing alert_tcp_connection_refused
Migrates alert_dns_invalid_query
Migrates alert_attack_mitigation_via_snmp
Migrates alert_lateral_movement
Migrates alert_periodicity_update
Migrates alert_dns_positive_error_ratio
Migrates alert_iec104_error
|
2020-12-22 09:56:38 +01:00 |
|
Simone Mainardi
|
d13a4451d2
|
Changes for the migration to the new alerts_api.trigger_status
|
2020-11-12 11:48:59 +01:00 |
|
Luca Deri
|
ff76407e68
|
Added detection of self-signed (< TLS 1.3) certificates
|
2020-05-08 09:53:31 +02:00 |
|
Simone Mainardi
|
290175b16f
|
Refactors alrt builders into creators
Refactors builders into creators: calls
|
2020-04-27 15:53:56 +02:00 |
|
Simone Mainardi
|
efe4f9a8be
|
Unifies alerts generation format with flow statuses
|
2020-04-27 14:37:04 +02:00 |
|
Simone Mainardi
|
ab1690ad9e
|
Implements builders for each flow status definition
[FlowsK] alert_blacklisted_country.lua
[FlowsK] alert_flow_blacklisted.lua
[FlowsK] alert_device_protocol_not_allowed.lua
[FlowsK] external_alert.lua
[FlowsK] alert_potentially_dangerous_protocol.lua
[FlowsK] tls_certificate_mismatch.lua
[FlowsK] tls_certificate_expired.lua
[FlowsK] tls_malicious_signature.lua
[FlowsK] elephant_flows.lua
[FlowsK] not_purged.lua
[FlowsK] web_mining.lua
[FlowsK] potentially_dangerous.lua
[FlowsK] alert_flow_blocked.lua
|
2020-04-27 12:43:37 +02:00 |
|
Simone Mainardi
|
78b334e4eb
|
Refactors alerts and flow statuses in builtin and plugins
Implements #3811
Implements #3812
Refactors builtin alerts
Refactors builtin flow statuses
|
2020-04-21 22:27:49 +02:00 |
|