wai_detection: changed Description and move variable info into Note

CESNET · Feb 7, 2019 · 2f0a780 · 2f0a780
1 parent c5d60ac
commit 2f0a780
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/waintrusion_detector/waintrusion_detector2idea.py b/waintrusion_detector/waintrusion_detector2idea.py
@@ -80,7 +80,8 @@ def convert_to_idea(rec, opts=None):
     setAddr(idea["Target"][0], rec.DST_IP)
     setAddr(idea["Source"][0], rec.SRC_IP)
 
-    idea['Description'] = "Detection Rule: " + str(rec.WAI_RULE) + ", HTTP request Field: " + str(rec.WAI_MALICIOUS_FIELD) + ", HTTP request field contained value: " + str(rec.WAI_MALICIOUS_VALUE)
+    idea['Description'] = "HTTP traffic containing suspicious data that looks like vulnerability test."
+    idea['Note'] = "Detection Rule: " + str(rec.WAI_RULE) + ", HTTP request Field: " + str(rec.WAI_MALICIOUS_FIELD) + ", HTTP request field contained value: " + str(rec.WAI_MALICIOUS_VALUE)
     return idea
 
 # Run the module