44 commits

Author	SHA1	Message	Date
Alfredo Cardigliano	8a97f69c27	Fix checks configuration initialization (default values) for new risks	2023-10-19 18:37:26 +02:00
Luca Deri	06716a0d7b	Added logic to enable generic checks if without a configuration	2023-10-18 19:28:19 +02:00
Matteo Biscosi	f9a55743b6	Added malware host contacted check	2023-10-18 10:40:54 +00:00
Alfredo Cardigliano	180f61cb7f	Handle Flow Risks that should be checked on Flow End (e.g. Unidirectional flow) (#7224)	2023-07-11 08:16:46 +02:00
lucaderi	d395deac4e	Automated commit of clang-format CI changes.	2023-04-07 14:20:44 +00:00
Luca Deri	96e10b12a5	Added stub for RareDestination check/alert implementation #6416 and #6417	2023-03-22 15:11:53 +01:00
Matteo Biscosi	fc82eff56b	Updated alert to NDPI_NUMERIC_IP_HOST	2023-03-02 15:18:40 +00:00
Luca Deri	05ecf9eb90	Remove un-necessary VLANid type in order to simplify code and avoid un-necessary and's	2023-02-20 22:30:12 +01:00
MatteoBiscosi	ddb55b4d7e	Updated ndpi alerts (#7200)	2023-02-09 18:46:37 +01:00
Luca Deri	24bc8213d9	Fixed VLANBidirectionalTraffic code	2023-02-06 21:49:30 +01:00
Nicolò Maio	bf92a04df4	Update VLAN bidirectional traffic check, now is on protocol detected. (#7126) (#7208)	2023-02-06 17:51:44 +00:00
Nicolò Maio	7162045cdd	Add VLAN bidirectional traffic alert (#7126) (#7194) ... * Add VLAN bidirectional traffic alert (#7126) * Add alert description. (#7126)	2023-02-03 10:33:25 +01:00
Luca Deri	42a14874d5	Improved "Flow User Check Script" flow check	2023-01-30 22:22:51 +01:00
Luca Deri	f726b867c7	Updated (C)	2023-01-01 16:37:57 +01:00
Luca Deri	01719751a6	Improved tracings	2022-11-25 11:01:31 +01:00
Luca Deri	ddef9454c2	Reworked interface VM in CustomFlowLuaScript	2022-11-21 17:57:21 +01:00
MatteoBiscosi	ef01259354	Fixes flow checks not found	2022-11-21 10:59:55 +01:00
Luca Deri	309d17b6b8	Implemented CustomFlowLuaScript.cpp engine	2022-11-20 20:30:49 +01:00
Luca Deri	80db634bfe	Implemented skeleton of CustomFlowLuaScriptAlert check	2022-11-19 20:31:24 +01:00
MatteoBiscosi	b6692f3fea	Added TCP Packets issues check (#6899)	2022-11-16 11:28:16 +01:00
MatteoBiscosi	7bfc2fdde4	Fixes Flow risks not defined (#6939)	2022-10-21 13:37:08 +02:00
Alfredo Cardigliano	cdd4a41bd5	Rename FlowRisk Simple to Generic	2022-07-14 17:23:06 +02:00
Luca Deri	bdbc84fef6	Implemented issuerDN exception handling	2022-07-04 21:39:36 +02:00
MatteoBiscosi	755c90e0c2	Changed from UDP unidirection to unidirectiont traffic	2022-06-21 15:11:54 +02:00
MatteoBiscosi	4f8c5c6cec	Moved UDP unidirection to nDPI alerts	2022-06-21 11:37:46 +02:00
MatteoBiscosi	3509b3b74b	Added dns fragmented alert	2022-05-31 18:34:22 +02:00
MatteoBiscosi	167cf6484a	Updated ndpi flow risk alerts	2022-05-31 17:15:21 +02:00
MatteoBiscosi	2bcf7c8dfa	Added Suspicious Entropy alert (#6563)	2022-05-04 22:11:44 +02:00
Luca Deri	269e9da142	(C) Update	2022-02-20 23:17:50 +01:00
Luca Deri	aa6db17e3f	Added a check to consider only DHCP flows sent towards the DHCP server	2022-02-10 22:31:30 +01:00
MatteoBiscosi	4528e5a660	Added Broadcast non-UDP traffic alert and minor fixes to apexcharts	2021-12-17 13:33:11 +01:00
Simone Mainardi	9d64524578	Relaxes attacker condition for non-std-port flow risk ... Addresses #5997	2021-10-27 11:22:04 +02:00
Simone Mainardi	a83cde8ad8	Safety and boundary checks for unhandled nDPI risks	2021-10-27 10:25:08 +02:00
Luca Deri	380b176c48	Fixed crash	2021-10-27 09:46:55 +02:00
Simone Mainardi	55495b5621	Implements risk mapping between C++ and Lua ... Addresses #5743	2021-09-14 16:00:47 +02:00
Simone Mainardi	3db5843db2	Implements fallback check and alert classes to handle risks ... Addresses #5743	2021-09-14 11:47:27 +02:00
Simone Mainardi	5f70c1eff7	Implements support for obsolete client SSH version ... Addresses #5861	2021-09-10 12:32:42 +02:00
Simone Mainardi	4b55e02899	Reworks check for Obsolete SSH that was not handling cli and srv ... Addresses #5861	2021-09-10 11:58:46 +02:00
Alfredo Cardigliano	84cab7845a	Check whitelist also when empty	2021-08-12 11:31:11 +02:00
Alfredo Cardigliano	aad505f87a	Add support for domain name match in Unexpected Server checks (required by #4869)	2021-08-11 09:53:06 +02:00
Simone Mainardi	18cbfc5b3a	Fixes for invalid checks for packet/non-packet interfaces ... Addresses #5519	2021-06-29 18:43:00 +02:00
Simone Mainardi	3a2f678cbd	Fixes periodicUpdate not executed for UDPUnidirectional ... Partially addresses #5519	2021-06-29 18:10:57 +02:00
Simone Mainardi	a160ccf2d6	Refactors callback to check #defines (c++)	2021-06-16 15:56:07 +02:00
Simone Mainardi	40f5c4e821	Refactors {flow,host}callbacks into {flow,host}checks (C++)	2021-06-16 15:27:38 +02:00