ntopng/scripts/lua/modules/alert_definitions/flow/alert_web_mining.lua
Luca Ferretti 7cceb656c0
fixed typo (#8565)
* added netbox documentation

* Update asset_inventory.rst

* added ndpi-protocols ipv6 rules

* updated ipv6 check for custom rule

* fix typo

* implemented mitre_table_info inside database

* fixed typo

* changed tecnique to technique typo

* Update host_alert_scan_detected.lua
2024-07-24 18:23:47 +02:00

57 lines
1.4 KiB
Lua

--
-- (C) 2019-24 - ntop.org
--
-- ##############################################
local flow_alert_keys = require "flow_alert_keys"
-- Import the classes library.
local classes = require "classes"
-- Make sure to import the Superclass!
local alert = require "alert"
-- Import Mitre Att&ck utils
local mitre = require "mitre_utils"
-- ##############################################
local alert_web_mining = classes.class(alert)
-- ##############################################
alert_web_mining.meta = {
alert_key = flow_alert_keys.flow_alert_web_mining,
i18n_title = "alerts_dashboard.web_mining",
icon = "fab fa-bitcoin",
-- Mitre Att&ck Matrix values
mitre_values = {
mitre_tactic = mitre.tactic.impact,
mitre_technique = mitre.technique.resource_hijacking,
mitre_id = "T1496"
},
}
-- ##############################################
-- @brief Prepare an alert table used to generate the alert
-- @param one_flow_param The first alert param
-- @param another_flow_param The second alert param
-- @return A table with the alert built
function alert_web_mining:init()
-- Call the parent constructor
self.super:init()
end
-- #######################################################
function alert_web_mining.format(ifid, alert, alert_type_params)
end
-- #######################################################
return alert_web_mining
--
-- (C) 2019-20 - ntop.