Commit graph

165 commits

Author SHA1 Message Date
Simone Mainardi
0987014edb Fixes alert_lateral_movement exceptions on certain versions 2021-10-07 10:43:11 +02:00
Simone Mainardi
cd36f86a2f Simplifies Lua risks (avoids an extra table to be in sync) 2021-10-01 16:32:14 +02:00
MatteoBiscosi
4b197ca2cc Changed alert name (#5805) 2021-10-01 15:52:51 +02:00
Simone Mainardi
6da5283ae2 Removes package.path changes possibly causing nil indexing 2021-10-01 11:24:10 +02:00
MatteoBiscosi
1ab8bbe2cd Fixes attempt to index a nil value (global 'dirs') 2021-10-01 11:02:13 +02:00
Simone Mainardi
4509027c1c Fixes attempt to index a nil value (global 'dirs') 2021-10-01 10:27:38 +02:00
Simone Mainardi
b01f8e50b8 Fixes TLS version for obsolete TLS alerts via ZMQ
Addresses #5860
2021-09-13 10:21:33 +02:00
Simone Mainardi
5f70c1eff7 Implements support for obsolete client SSH version
Addresses #5861
2021-09-10 12:32:42 +02:00
Simone Mainardi
4b55e02899 Reworks check for Obsolete SSH that was not handling cli and srv
Addresses #5861
2021-09-10 11:58:46 +02:00
MatteoBiscosi
b82cbe76c9 Reduced length of suspicious dga domain (#5804) 2021-08-26 12:15:19 +02:00
MatteoBiscosi
70e32fd566 Changed redirect icon loc. and added redirect to SuspiciousDgaDomain alert (#5806) 2021-08-26 10:51:12 +02:00
MatteoBiscosi
156f85e522 Fixes periodicity changed alert link to the map 2021-08-11 16:06:22 +02:00
Simone Mainardi
f6560d1974 Implements and rework alert for flow periodicity change 2021-08-11 15:11:44 +02:00
Simone Mainardi
768c22b6cb Fixes lateral movement link with VLANs 2021-08-11 11:05:40 +02:00
Simone Mainardi
7710386b3c Fixes lateral movement alert links 2021-08-11 10:57:31 +02:00
MatteoBiscosi
4f1a518f7b Removed lua_utils require from lateral movement alert 2021-08-11 09:26:26 +02:00
MatteoBiscosi
d432f28ecd Fixes lateral movement alert not working 2021-08-09 16:25:28 +02:00
Vasilis Tako
4da05360f8 Changed back url from title to href attribute on anchor tags (Issue #5618) 2021-08-04 15:20:04 +02:00
Vasilis Tako
0b0107ab34 Added confirm modal when try to open all external links (Issue #5618) 2021-08-03 19:12:30 +02:00
Simone Mainardi
aef24d06b0 Implements TLS cert validity check and corresponding test
Addresses https://github.com/ntop/ntopng/issues/5434
Addresses https://github.com/ntop/nDPI/issues/1196
2021-07-14 18:04:00 +02:00
Simone Mainardi
eb41fd4c8f Fixes elephant and long-lived flow alerts visualization
Fixes #5646
2021-07-09 12:12:17 +02:00
Simone Mainardi
04a5a6ea78 Fixes DGA domains not properly handled over ZMQ
Fixes #5649
2021-07-07 19:20:39 +02:00
Alfredo Cardigliano
471e56a9ef Fix nil access (url) 2021-07-06 16:21:47 +02:00
l3wiz
d24f94d14d Added a modal when try to open external links (Issue #5618) 2021-07-02 19:28:33 +02:00
MatteoBiscosi
744a5e53c3 Added vlan to each host reference (#5595) 2021-07-02 13:13:00 +02:00
MatteoBiscosi
06b72839dd Extended url length #5596 2021-07-02 11:54:39 +02:00
MatteoBiscosi
04865c8938 Implements #5596 added external href to suspicious file transfer 2021-07-02 10:39:58 +02:00
l3wiz
572e209bd0 Added question tooltip when string is cut (Issue #5522) 2021-06-24 12:21:15 +02:00
MatteoBiscosi
47497ca666 Fixes behavior anomaly alert key not found 2021-06-23 22:55:08 +02:00
MatteoBiscosi
fd40e51428 Changed alert behavior location 2021-06-23 17:58:30 +02:00
MatteoBiscosi
a6aa647624 Removed path and timeseries string from behavior alerts 2021-06-23 16:23:45 +02:00
MatteoBiscosi
462eaa384b Fixes ASes and Networks alert behavior 2021-06-23 15:14:03 +02:00
MatteoBiscosi
638bf881fd Migrated periodicity update alert into flow alert 2021-06-21 17:47:03 +02:00
MatteoBiscosi
f4d4543fab Changed behavior anomaly alert (#5521) 2021-06-21 09:41:53 +02:00
MatteoBiscosi
8a1e315496 Fixed lateral movement alert description (#5524) 2021-06-18 11:37:25 +02:00
MatteoBiscosi
5a02d2a0d7 Fixed lateral movement not triggering 2021-06-18 11:08:44 +02:00
MatteoBiscosi
dd3a038a0f Changed lateral movement description (#5517) 2021-06-18 10:07:48 +02:00
Luca Deri
34897cec6b Fix for alert display 2021-06-18 08:51:39 +02:00
MatteoBiscosi
5c4142fdcb Implements behavioral alerts (#5500 #5501) 2021-06-17 17:10:02 +02:00
MatteoBiscosi
cf363eaa10 Changed old info string into lateral movement 2021-06-17 12:05:26 +02:00
MatteoBiscosi
48554751f9 Removed duplicated info from lateral movement alert 2021-06-17 12:02:56 +02:00
MatteoBiscosi
a89c95dba4 Migrated Lateral Movement alert from interface to flow (Fixes #5485) 2021-06-17 11:07:29 +02:00
Simone Mainardi
25159f0a9b Refactors {host,flow}_callbacks into {host,flow}_checks (lua) 2021-06-16 18:59:07 +02:00
Simone Mainardi
fc2db1513b Cleanup of unnecessary items in user scripts config. JSON
Fixes #5456
2021-06-08 18:38:58 +02:00
Simone Mainardi
4352638cdf Reworks and completes attacker/victim for all flow alerts
Addresses #5310
2021-05-28 17:03:37 +02:00
Simone Mainardi
0ac075c01c Fixes attacker for suspicious DGA domains
Partially addresses #5310
2021-05-27 18:27:29 +02:00
Simone Mainardi
bfc9e72193 Fixes label for zero TCP window alerts 2021-05-10 13:02:53 +02:00
Simone Mainardi
87d8c89107 Fixes missing certificate names in TLS mismatch alerts
Fixes #5299
2021-05-10 09:25:09 +02:00
Simone Mainardi
27fcd52bf9 Improves message for obsolete TLS
Addresses #5299
2021-05-10 08:55:49 +02:00
Matteo Biscosi
c550b53352 Fixes missing info in TLS Certificate Expired
Implements #5270
2021-05-06 11:50:27 +02:00