Simone Mainardi
|
46e3c10c36
|
Typos
|
2021-01-11 14:38:02 +01:00 |
|
Luca Deri
|
a1178a0791
|
Updated (C)
|
2021-01-02 12:08:23 +01:00 |
|
matteo
|
e24ef4ef35
|
Revert "Migrates alerts to an object-oriented implementation"
This reverts commit fbc283f12f.
|
2020-12-22 13:13:57 +01:00 |
|
matteo
|
fbc283f12f
|
Migrates alerts to an object-oriented implementation
|
2020-12-22 13:00:25 +01:00 |
|
Simone Mainardi
|
3baa932a01
|
Migrates alerts to an object-oriented implementation
Migrates alert_malicious_signature alert_elephant_local_to_remote alert_elephant_remote_to_local
Migrates long_lived
Migrates alert_flow_blocked
Migrates alert_tls_old_version
Migrates alert_tls_certificate_mismatch
Migrates alert_tls_certificate_expired
Migrates alert_tls_unsafe_ciphers
Migrates alert_tls_certificate_selfsigned
Migrates alert_potentially_dangerous_protocol
Migrates alert_snmp_device_reset
Migrates alert_port_mac_changed
Migrates alert_port_duplexstatus_change
Mirgates alert_port_errors
Migrates alert_port_status_change
Migrates alert_port_load_threshold_exceeded
Migrates alert_data_exfiltration
Migrates alert_dns_data_exfiltration
Migrates alert_suspicious_tcp_probing alert_suspicious_tcp_syn_probing alert_tcp_connection_refused
Migrates alert_dns_invalid_query
Migrates alert_attack_mitigation_via_snmp
Migrates alert_lateral_movement
Migrates alert_periodicity_update
Migrates alert_dns_positive_error_ratio
Migrates alert_iec104_error
|
2020-12-22 09:56:38 +01:00 |
|
Simone Mainardi
|
b3dc39c641
|
Refactors alert_severities into an independend Lua module
|
2020-11-30 15:28:17 +01:00 |
|
Simone Mainardi
|
cd4a513b0f
|
Implements snmp_consts.lua with SNMP consts
|
2020-06-10 15:40:47 +02:00 |
|
Simone Mainardi
|
8a3e65ac50
|
Requires snmp_utils as local module
|
2020-06-10 12:17:25 +02:00 |
|
Simone Mainardi
|
290175b16f
|
Refactors alrt builders into creators
Refactors builders into creators: calls
|
2020-04-27 15:53:56 +02:00 |
|
Simone Mainardi
|
2739aac076
|
Implements alert builders for each alert definition
[AlertsK] Implements alert consts builder
[AlertsK] alert_threshold_cross.lua
[AlertsK] too_many_drops.lua
[AlertsK] alert_test_failed.lua
[AlertsK] alert_flows_flood.lua alert_tcp_syn_flood.lua lert_tcp_syn_scan.lua
[AlertsK] alert_snmp_topology_changed.lua
[AlertsK] snmp_device_reset.lua
[AlertsK] alert_slow_periodic_activity.lua
[AlertsK] alert_port_status_change.lua
[AlertsK] alert_port_status_change.lua
[AlertsK] alert_port_load_threshold_exceeded.lua
[AlertsK] alert_port_errors.lua
[AlertsK] alert_port_duplexstatus_change.lua
[AlertsK] alert_periodic_activity_not_executed.lua
[AlertsK] alert_misbehaving_flows_ratio.lua
[AlertsK] alert_influxdb_error.lua
[AlertsK] alert_influxdb_dropped_points.lua
[AlertsK] alert_dropped_alerts.lua
[AlertsK] alert_am_threshold_cross.lua
[AlertsK] alert_broadcast_domain_too_large.lua
[AlertsK] alert_device_connection.lua
[AlertsK] alert_device_connection.lua
[AlertsK] alert_host_pool_connection.lua alert_host_pool_disconnection.lua
[AlertsK] alert_ghost_network.lua
[AlertsK] alert_ip_outsite_dhcp_range.lua
[AlertsK] alert_list_download_failed.lua
[AlertsK] alert_login_failed.lua
[AlertsK] alert_mac_ip_association_change.lua
[AlertsK] alert_slow_purge.lua
[AlertsK] alert_request_reply_ratio.lua
[AlertsK] alert_quota_exceeded.lua
[AlertsK] alert_process_notification.lua
[AlertsK] alert_nfq_flushed.lua
[AlertsK] alert_misconfigured_app.lua alert_new_device.lua
[AlertsK] alert_influxdb_export_failure.lua
[AlertsK] alert_unresponsive_device.lua
[AlertsK] alert_user_activity.lua
[AlertsK] alert_user_script_calls_drops.lua
[AlertsK] minor fix
|
2020-04-24 15:35:44 +02:00 |
|
Simone Mainardi
|
78b334e4eb
|
Refactors alerts and flow statuses in builtin and plugins
Implements #3811
Implements #3812
Refactors builtin alerts
Refactors builtin flow statuses
|
2020-04-21 22:27:49 +02:00 |
|