Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Added more tests to test_whitelist.py #565

Merged
merged 232 commits into from
Jun 4, 2024
Merged

Added more tests to test_whitelist.py #565

merged 232 commits into from
Jun 4, 2024

Commits on Apr 8, 2024

  1. Update CI-production-testing.yml

    @Sekhar-Kumar-Dash
    Sekhar-Kumar-Dash authored Apr 8, 2024
    Configuration menu
    Copy the full SHA
    f782e63 View commit details
    Browse the repository at this point in the history

Commits on Apr 9, 2024

  1. Update test_profiler.py

    @Sekhar-Kumar-Dash
    Sekhar-Kumar-Dash authored Apr 9, 2024
    Configuration menu
    Copy the full SHA
    63f255f View commit details
    Browse the repository at this point in the history

Commits on Apr 10, 2024

  1. Update threat_intelligence.py

    @Sekhar-Kumar-Dash
    Sekhar-Kumar-Dash authored Apr 10, 2024
    Configuration menu
    Copy the full SHA
    163bd45 View commit details
    Browse the repository at this point in the history

  2. Merge branch 'develop' into patch-8

    @Sekhar-Kumar-Dash
    Sekhar-Kumar-Dash authored Apr 10, 2024
    Configuration menu
    Copy the full SHA
    14a075a View commit details
    Browse the repository at this point in the history

Commits on Apr 13, 2024

  1. Update CI-production-testing.yml

    @Sekhar-Kumar-Dash
    Sekhar-Kumar-Dash authored Apr 13, 2024
    Configuration menu
    Copy the full SHA
    d89cec3 View commit details
    Browse the repository at this point in the history

  2. Update CI-staging.yml

    @Sekhar-Kumar-Dash
    Sekhar-Kumar-Dash authored Apr 13, 2024
    Configuration menu
    Copy the full SHA
    1ce613d View commit details
    Browse the repository at this point in the history

  3. Update requirements.txt

    @Sekhar-Kumar-Dash
    Sekhar-Kumar-Dash authored Apr 13, 2024
    Configuration menu
    Copy the full SHA
    fe43dce View commit details
    Browse the repository at this point in the history

Commits on Apr 16, 2024

  1. Merge pull request stratosphereips#561 from stratosphereips/develop 

    Slips v1.0.13
    @AlyaGomaa
    AlyaGomaa authored Apr 16, 2024
    Configuration menu
    Copy the full SHA
    5dcbb7c View commit details
    Browse the repository at this point in the history

Commits on Apr 17, 2024

  1. Update CI-production-testing.yml

    @Sekhar-Kumar-Dash @AlyaGomaa
    Sekhar-Kumar-Dash authored and AlyaGomaa committed Apr 17, 2024
    Configuration menu
    Copy the full SHA
    033f103 View commit details
    Browse the repository at this point in the history

  2. Update CI-production-testing.yml

    @Sekhar-Kumar-Dash @AlyaGomaa
    Sekhar-Kumar-Dash authored and AlyaGomaa committed Apr 17, 2024
    Configuration menu
    Copy the full SHA
    189024f View commit details
    Browse the repository at this point in the history

  3. Update CI-staging.yml

    @Sekhar-Kumar-Dash @AlyaGomaa
    Sekhar-Kumar-Dash authored and AlyaGomaa committed Apr 17, 2024
    Configuration menu
    Copy the full SHA
    43d387e View commit details
    Browse the repository at this point in the history

  4. Update requirements.txt

    @Sekhar-Kumar-Dash @AlyaGomaa
    Sekhar-Kumar-Dash authored and AlyaGomaa committed Apr 17, 2024
    Configuration menu
    Copy the full SHA
    0245b43 View commit details
    Browse the repository at this point in the history

  5. run pre-commit hooks

    @AlyaGomaa
    AlyaGomaa committed Apr 17, 2024
    Configuration menu
    Copy the full SHA
    50dbbee View commit details
    Browse the repository at this point in the history

  6. CI-staging: run on PR to develop

    @AlyaGomaa
    AlyaGomaa committed Apr 17, 2024
    Configuration menu
    Copy the full SHA
    6b1e4a3 View commit details
    Browse the repository at this point in the history

  7. require the steps followed to test the PR in pull_request_template.md

    @AlyaGomaa
    AlyaGomaa committed Apr 17, 2024
    Configuration menu
    Copy the full SHA
    b32cb6d View commit details
    Browse the repository at this point in the history

  8. exporting_alerts.py: when there's no slack bot token log it with debu… 

    …g level=1
    @AlyaGomaa
    AlyaGomaa committed Apr 17, 2024
    Configuration menu
    Copy the full SHA
    68043e9 View commit details
    Browse the repository at this point in the history

  9. add files with API keys/tokens to .dockerignore

    @AlyaGomaa
    AlyaGomaa committed Apr 17, 2024
    Configuration menu
    Copy the full SHA
    cd1ef22 View commit details
    Browse the repository at this point in the history

  10. add a test workflow for testing publishing p2p and ubuntu image using CI

    @AlyaGomaa
    AlyaGomaa committed Apr 17, 2024
    Configuration menu
    Copy the full SHA
    f23dacb View commit details
    Browse the repository at this point in the history

  11. dont install black library in docker because of its dependency confli… 

    …cts with tensorflow
    @AlyaGomaa
    AlyaGomaa committed Apr 17, 2024
    Configuration menu
    Copy the full SHA
    0a0522c View commit details
    Browse the repository at this point in the history

  12. test-publishing: clone slips with submodules in order for the dockerf… 

    …ile to find it
    @AlyaGomaa
    AlyaGomaa committed Apr 17, 2024
    Configuration menu
    Copy the full SHA
    3016667 View commit details
    Browse the repository at this point in the history

  13. dataset: dont ignore logfiles in the dataset/ dir

    @AlyaGomaa
    AlyaGomaa committed Apr 17, 2024
    Configuration menu
    Copy the full SHA
    e98aed1 View commit details
    Browse the repository at this point in the history

  14. delete test-publishing.yml

    @AlyaGomaa
    AlyaGomaa committed Apr 17, 2024
    Configuration menu
    Copy the full SHA
    00eadf6 View commit details
    Browse the repository at this point in the history

  15. add files with API keys/tokens to .dockerignore

    @AlyaGomaa
    AlyaGomaa committed Apr 17, 2024
    Configuration menu
    Copy the full SHA
    3140cb9 View commit details
    Browse the repository at this point in the history

  16. add a test workflow for testing publishing p2p and ubuntu image using CI

    @AlyaGomaa
    AlyaGomaa committed Apr 17, 2024
    Configuration menu
    Copy the full SHA
    3b25efa View commit details
    Browse the repository at this point in the history

  17. test-publishing: clone slips with submodules in order for the dockerf… 

    …ile to find it
    @AlyaGomaa
    AlyaGomaa committed Apr 17, 2024
    Configuration menu
    Copy the full SHA
    d96f045 View commit details
    Browse the repository at this point in the history

  18. dataset: dont ignore logfiles in the dataset/ dir

    @AlyaGomaa
    AlyaGomaa committed Apr 17, 2024
    Configuration menu
    Copy the full SHA
    c42da6d View commit details
    Browse the repository at this point in the history

  19. delete test-publishing.yml

    @AlyaGomaa
    AlyaGomaa committed Apr 17, 2024
    Configuration menu
    Copy the full SHA
    11b36d3 View commit details
    Browse the repository at this point in the history

  20. daemon: use Locks to determine if another instance of the daemon is r… 

    …unning, either using -S or -D
    @AlyaGomaa
    AlyaGomaa committed Apr 17, 2024
    Configuration menu
    Copy the full SHA
    49a7775 View commit details
    Browse the repository at this point in the history

  21. daemon: don't call shotdown_gracefully on stop(), instead, signal the… 

    … current daemon to run it
    @AlyaGomaa
    AlyaGomaa committed Apr 17, 2024
    Configuration menu
    Copy the full SHA
    f5ebead View commit details
    Browse the repository at this point in the history

  22. process_manager.py: explain what populates self.processes and why the… 

    …y cant be used with the daemon
    @AlyaGomaa
    AlyaGomaa committed Apr 17, 2024
    Configuration menu
    Copy the full SHA
    f229ba1 View commit details
    Browse the repository at this point in the history

  23. process_manager.py: add a function to check which print to use, the d… 

    …aemon's or the Main() class'
    @AlyaGomaa
    AlyaGomaa committed Apr 17, 2024
    Configuration menu
    Copy the full SHA
    aee8ff5 View commit details
    Browse the repository at this point in the history

  24. slips: better handling of different error msgs returned by the daemon

    @AlyaGomaa
    AlyaGomaa committed Apr 17, 2024
    Configuration menu
    Copy the full SHA
    1504484 View commit details
    Browse the repository at this point in the history

  25. Ti feeds: remove smaphaus edrop.txt TI feed as its been merged to spa… 

    …mhaus.org/drop/drop.txt
    @AlyaGomaa
    AlyaGomaa committed Apr 17, 2024
    Configuration menu
    Copy the full SHA
    9ae86cd View commit details
    Browse the repository at this point in the history

  26. update changelog

    @AlyaGomaa
    AlyaGomaa committed Apr 17, 2024
    Configuration menu
    Copy the full SHA
    12dc777 View commit details
    Browse the repository at this point in the history

  27. Bump slips version to 1.0.13

    @AlyaGomaa
    AlyaGomaa committed Apr 17, 2024
    Configuration menu
    Copy the full SHA
    5838e83 View commit details
    Browse the repository at this point in the history

  28. whitelist: early return from is_part_of_a_whitelisted_org() if given … 

    …a private ip
    @AlyaGomaa
    AlyaGomaa committed Apr 17, 2024
    Configuration menu
    Copy the full SHA
    6f94a14 View commit details
    Browse the repository at this point in the history

  29. whitelist: convert all ASNs shipped with slips to uppercase

    @AlyaGomaa
    AlyaGomaa committed Apr 17, 2024
    Configuration menu
    Copy the full SHA
    e97c869 View commit details
    Browse the repository at this point in the history

  30. whitelist: convert asns to uppercase before comparing with the asns i… 

    …n the db
    @AlyaGomaa
    AlyaGomaa committed Apr 17, 2024
    Configuration menu
    Copy the full SHA
    3507c20 View commit details
    Browse the repository at this point in the history

  31. whitelist: dont whitelist domain if it has a whitelisted organization… 

    … name in it, it doesn't necessarily belong to this org
    @AlyaGomaa
    AlyaGomaa committed Apr 17, 2024
    Configuration menu
    Copy the full SHA
    ce9e283 View commit details
    Browse the repository at this point in the history

  32. whitelist: put the most famous domain/sld of each org at the top of t… 

    …he org domain list for faster search
    @AlyaGomaa
    AlyaGomaa committed Apr 17, 2024
    Configuration menu
    Copy the full SHA
    7ec2f7b View commit details
    Browse the repository at this point in the history

  33. threat_intelligence.py: add a Victim field to "Blacklisted IP" evidence

    @AlyaGomaa
    AlyaGomaa committed Apr 17, 2024
    Configuration menu
    Copy the full SHA
    e6bf3d7 View commit details
    Browse the repository at this point in the history

  34. threat_intelligence.py: split long lines

    @AlyaGomaa
    AlyaGomaa committed Apr 17, 2024
    Configuration menu
    Copy the full SHA
    4258230 View commit details
    Browse the repository at this point in the history

  35. threat_intelligence.py: add victim fields to most evidence

    @AlyaGomaa
    AlyaGomaa committed Apr 17, 2024
    Configuration menu
    Copy the full SHA
    6d9dbff View commit details
    Browse the repository at this point in the history

  36. CC: add victim fields to CC evidence

    @AlyaGomaa
    AlyaGomaa committed Apr 17, 2024
    Configuration menu
    Copy the full SHA
    d718d18 View commit details
    Browse the repository at this point in the history

  37. whitelist.conf: whitelist microsoft alerts by default

    @AlyaGomaa
    AlyaGomaa committed Apr 17, 2024
    Configuration menu
    Copy the full SHA
    10a1930 View commit details
    Browse the repository at this point in the history

  38. threat_intelligence.py: add a victim field to "blacklisted CNAME" evi… 

    …dence to be able to check if its whitelisted
    @AlyaGomaa
    AlyaGomaa committed Apr 17, 2024
    Configuration menu
    Copy the full SHA
    5979455 View commit details
    Browse the repository at this point in the history

  39. Integration test: add an incompatible CN flow while connecting to a s… 

    …ite other than microsoft since its whitelisted
    @AlyaGomaa
    AlyaGomaa committed Apr 17, 2024
    Configuration menu
    Copy the full SHA
    4deaa58 View commit details
    Browse the repository at this point in the history

  40. update macos requirements.txt with install/requirements.txt

    @AlyaGomaa
    AlyaGomaa committed Apr 17, 2024
    Configuration menu
    Copy the full SHA
    3b88205 View commit details
    Browse the repository at this point in the history

  41. update slips.gif

    @AlyaGomaa
    AlyaGomaa committed Apr 17, 2024
    Configuration menu
    Copy the full SHA
    af2a00b View commit details
    Browse the repository at this point in the history

  42. CI-production-testing.yml: don't install black as it has conflicts wi… 

    …th the tensorflow version slips is using
    @AlyaGomaa
    AlyaGomaa committed Apr 17, 2024
    Configuration menu
    Copy the full SHA
    5496c98 View commit details
    Browse the repository at this point in the history

  43. CI-production-testing.yml: fix "installing Python dependencies" commands

    @AlyaGomaa
    AlyaGomaa committed Apr 17, 2024
    Configuration menu
    Copy the full SHA
    c83eebd View commit details
    Browse the repository at this point in the history

  44. CI-publishing.yml: clone slips with submodules when building p2p image

    @AlyaGomaa
    AlyaGomaa committed Apr 17, 2024
    Configuration menu
    Copy the full SHA
    5b46ca7 View commit details
    Browse the repository at this point in the history

  45. Update branch with the latest develop

    @AlyaGomaa
    AlyaGomaa committed Apr 17, 2024
    Configuration menu
    Copy the full SHA
    41ee2e6 View commit details
    Browse the repository at this point in the history

  46. CI-staging: exclude black when installing slips dependencies due to c… 

    …onflict with tensorflow
    @AlyaGomaa
    AlyaGomaa committed Apr 17, 2024
    Configuration menu
    Copy the full SHA
    095f679 View commit details
    Browse the repository at this point in the history

  47. CI-staging: fix problem running multiple cmds in the "Install Python … 

    …dependencies" step
    @AlyaGomaa
    AlyaGomaa committed Apr 17, 2024
    Configuration menu
    Copy the full SHA
    60df310 View commit details
    Browse the repository at this point in the history

Commits on Apr 18, 2024

  1. Updated and added more tests to test_flow_handler.py

    @Sekhar-Kumar-Dash
    Sekhar-Kumar-Dash authored Apr 18, 2024
    Configuration menu
    Copy the full SHA
    3c42045 View commit details
    Browse the repository at this point in the history

  2. document minimum slips RAM requirements and add mem and cpu limits to… 

    … the docker cmds in the docs
    @AlyaGomaa
    AlyaGomaa committed Apr 18, 2024
    Configuration menu
    Copy the full SHA
    e93267f View commit details
    Browse the repository at this point in the history

  3. contributing.md: add a section for rejected PRs

    @AlyaGomaa
    AlyaGomaa committed Apr 18, 2024
    Configuration menu
    Copy the full SHA
    4cf3923 View commit details
    Browse the repository at this point in the history

  4. contributing.md: add that new contributors should fork slips before c… 

    …loning
    @AlyaGomaa
    AlyaGomaa committed Apr 18, 2024
    Configuration menu
    Copy the full SHA
    c2b228a View commit details
    Browse the repository at this point in the history

Commits on Apr 19, 2024

  1. Added more tests to test_whitelist.py

    @Sekhar-Kumar-Dash
    Sekhar-Kumar-Dash authored Apr 19, 2024
    Configuration menu
    Copy the full SHA
    59b3862 View commit details
    Browse the repository at this point in the history

  2. Merge pull request stratosphereips#557 from Sekhar-Kumar-Dash/patch-8 

    Renamed set_evidence_malicious_ip() in Threat intelligence module to set_evidence_blacklisted_ip()
    @AlyaGomaa
    AlyaGomaa authored Apr 19, 2024
    Configuration menu
    Copy the full SHA
    9c0fa84 View commit details
    Browse the repository at this point in the history

  3. Merge remote-tracking branch 'origin/develop' into develop

    @AlyaGomaa
    AlyaGomaa committed Apr 19, 2024
    Configuration menu
    Copy the full SHA
    74324d7 View commit details
    Browse the repository at this point in the history

  4. CI-staging: don't run coverage on integration tests

    @AlyaGomaa
    AlyaGomaa committed Apr 19, 2024
    Configuration menu
    Copy the full SHA
    ceed41d View commit details
    Browse the repository at this point in the history

  5. Merge pull request stratosphereips#522 from Sekhar-Kumar-Dash/patch-6 

    Added more tests to  test_profiler.py
    @AlyaGomaa
    AlyaGomaa authored Apr 19, 2024
    Configuration menu
    Copy the full SHA
    9f4d4ec View commit details
    Browse the repository at this point in the history

  6. added proper path for whitelist.py

    @Sekhar-Kumar-Dash
    Sekhar-Kumar-Dash authored Apr 19, 2024
    Configuration menu
    Copy the full SHA
    92892bf View commit details
    Browse the repository at this point in the history

  7. vertical_portscan.py: delete the logic for combining evidence and

    @AlyaGomaa
    AlyaGomaa committed Apr 19, 2024
    Configuration menu
    Copy the full SHA
    f5cb9c1 View commit details
    Browse the repository at this point in the history

  8. removed coverage test for config files and fixed typo in slips test

    @Sekhar-Kumar-Dash
    Sekhar-Kumar-Dash authored Apr 19, 2024
    Configuration menu
    Copy the full SHA
    3f6db9c View commit details
    Browse the repository at this point in the history

  9. vertical_portscan.py: smaller methods

    @AlyaGomaa
    AlyaGomaa committed Apr 19, 2024
    Configuration menu
    Copy the full SHA
    7e36ede View commit details
    Browse the repository at this point in the history

  10. horizontal_portscan.py: don't combine evidene and use the threshold i… 

    …nstead
    @AlyaGomaa
    AlyaGomaa committed Apr 19, 2024
    Configuration menu
    Copy the full SHA
    53bd0a9 View commit details
    Browse the repository at this point in the history

  11. horizontal_portscan.py: update portscans unit tests

    @AlyaGomaa
    AlyaGomaa committed Apr 19, 2024
    Configuration menu
    Copy the full SHA
    81beae8 View commit details
    Browse the repository at this point in the history

  12. horizontal_portscan.py: remove the logic for combining evidence

    @AlyaGomaa
    AlyaGomaa committed Apr 19, 2024
    Configuration menu
    Copy the full SHA
    dd2160c View commit details
    Browse the repository at this point in the history

  13. portscans: akways report if no past evidence to compare with

    @AlyaGomaa
    AlyaGomaa committed Apr 19, 2024
    Configuration menu
    Copy the full SHA
    783e2c5 View commit details
    Browse the repository at this point in the history

  14. fixed all the typos and added more specific coverage

    @Sekhar-Kumar-Dash
    Sekhar-Kumar-Dash authored Apr 19, 2024
    Configuration menu
    Copy the full SHA
    07cf5a8 View commit details
    Browse the repository at this point in the history

  15. Update the tests for the recent version of the code

    @Sekhar-Kumar-Dash
    Sekhar-Kumar-Dash authored Apr 19, 2024
    Configuration menu
    Copy the full SHA
    60d01ff View commit details
    Browse the repository at this point in the history

  16. Made similar changes to CI-production workflow

    @Sekhar-Kumar-Dash
    Sekhar-Kumar-Dash authored Apr 19, 2024
    Configuration menu
    Copy the full SHA
    bee5121 View commit details
    Browse the repository at this point in the history

  17. portscans: update unit tests

    @AlyaGomaa
    AlyaGomaa committed Apr 19, 2024
    Configuration menu
    Copy the full SHA
    1ede35f View commit details
    Browse the repository at this point in the history

Commits on Apr 21, 2024

  1. Merge pull request stratosphereips#566 from stratosphereips/alya_opti… 

    …mize_combining_portscan_evidence

Use a threshold instead of combining portscan evidence
    @AlyaGomaa
    AlyaGomaa authored Apr 21, 2024
    Configuration menu
    Copy the full SHA
    b7bce81 View commit details
    Browse the repository at this point in the history

Commits on Apr 22, 2024

  1. Update README.md 

    Update support of nlnet for this project
    @eldraco
    eldraco authored Apr 22, 2024
    Configuration menu
    Copy the full SHA
    a9ea580 View commit details
    Browse the repository at this point in the history

  2. Merge pull request stratosphereips#570 from stratosphereips/eldraco-p… 

    …atch-1

Update README.md
    @AlyaGomaa
    AlyaGomaa authored Apr 22, 2024
    Configuration menu
    Copy the full SHA
    421dadb View commit details
    Browse the repository at this point in the history

  3. fixed typo in vertical portscans test

    @Sekhar-Kumar-Dash
    Sekhar-Kumar-Dash authored Apr 22, 2024
    Configuration menu
    Copy the full SHA
    8497a31 View commit details
    Browse the repository at this point in the history

  4. fixed typo in vertical portscan

    @Sekhar-Kumar-Dash
    Sekhar-Kumar-Dash authored Apr 22, 2024
    Configuration menu
    Copy the full SHA
    c58883e View commit details
    Browse the repository at this point in the history

Commits on Apr 23, 2024

  1. updated and added more tests to test_http_analyzer

    @Sekhar-Kumar-Dash
    Sekhar-Kumar-Dash authored Apr 23, 2024
    Configuration menu
    Copy the full SHA
    1d1d49d View commit details
    Browse the repository at this point in the history

Commits on Apr 24, 2024

  1. Merge pull request stratosphereips#518 from Sekhar-Kumar-Dash/patch-4 

    Implemented code coverage reporting using the coverage.py tool
    @AlyaGomaa
    AlyaGomaa authored Apr 24, 2024
    Configuration menu
    Copy the full SHA
    467e099 View commit details
    Browse the repository at this point in the history

  2. split long lines

    @AlyaGomaa
    AlyaGomaa committed Apr 24, 2024
    Configuration menu
    Copy the full SHA
    c2b2899 View commit details
    Browse the repository at this point in the history

  3. fixed long lines

    @Sekhar-Kumar-Dash
    Sekhar-Kumar-Dash authored Apr 24, 2024
    Configuration menu
    Copy the full SHA
    6725fab View commit details
    Browse the repository at this point in the history

  4. used asdict and fixed long lines

    @Sekhar-Kumar-Dash
    Sekhar-Kumar-Dash authored Apr 24, 2024
    Configuration menu
    Copy the full SHA
    ba48e71 View commit details
    Browse the repository at this point in the history

Commits on Apr 26, 2024

  1. set the remote branch of feel_project submodule to main

    @AlyaGomaa
    AlyaGomaa committed Apr 26, 2024
    Configuration menu
    Copy the full SHA
    adc125f View commit details
    Browse the repository at this point in the history

  2. set the remote branch of iris submodule to main

    @AlyaGomaa
    AlyaGomaa committed Apr 26, 2024
    Configuration menu
    Copy the full SHA
    f1e19b6 View commit details
    Browse the repository at this point in the history

  3. docs: use -j in the cmd for installing slips with submodules

    @AlyaGomaa
    AlyaGomaa committed Apr 26, 2024
    Configuration menu
    Copy the full SHA
    c96e811 View commit details
    Browse the repository at this point in the history

  4. db: only overwrite redis config file when the dafault options should … 

    …be modified. not every run.
    @AlyaGomaa
    AlyaGomaa committed Apr 26, 2024
    Configuration menu
    Copy the full SHA
    21258bc View commit details
    Browse the repository at this point in the history

  5. portscans: dont call combine_evidence

    @AlyaGomaa
    AlyaGomaa committed Apr 26, 2024
    Configuration menu
    Copy the full SHA
    c2c2c89 View commit details
    Browse the repository at this point in the history

Commits on Apr 28, 2024

  1. Merge pull request stratosphereips#575 from stratosphereips/alya/chec… 

    …k_why_redis_config_file_is_modified_each_run

only overwrite redis config file when the dafault options are modified
    @AlyaGomaa
    AlyaGomaa authored Apr 28, 2024
    Configuration menu
    Copy the full SHA
    e2dbcde View commit details
    Browse the repository at this point in the history

Commits on Apr 29, 2024

  1. tests: update the path of module_factory

    @AlyaGomaa
    AlyaGomaa committed Apr 29, 2024
    Configuration menu
    Copy the full SHA
    b30dfa2 View commit details
    Browse the repository at this point in the history

  2. Merge pull request stratosphereips#563 from Sekhar-Kumar-Dash/patch-9 

    Updated and added more tests to test_flow_handler.py
    @AlyaGomaa
    AlyaGomaa authored Apr 29, 2024
    Configuration menu
    Copy the full SHA
    876d44b View commit details
    Browse the repository at this point in the history

  3. Add Exporter interface

    @AlyaGomaa
    AlyaGomaa committed Apr 29, 2024
    Configuration menu
    Copy the full SHA
    19f3bca View commit details
    Browse the repository at this point in the history

  4. Imodule: force name, description, authors attributes in all modules

    @AlyaGomaa
    AlyaGomaa committed Apr 29, 2024
    Configuration menu
    Copy the full SHA
    1f8e1f0 View commit details
    Browse the repository at this point in the history

  5. Add slack exporter class

    @AlyaGomaa
    AlyaGomaa committed Apr 29, 2024
    Configuration menu
    Copy the full SHA
    2d9bd11 View commit details
    Browse the repository at this point in the history

  6. exporting_alerts.py: use SlackExporter class

    @AlyaGomaa
    AlyaGomaa committed Apr 29, 2024
    Configuration menu
    Copy the full SHA
    849531d View commit details
    Browse the repository at this point in the history

  7. Add a StixExporter class

    @AlyaGomaa
    AlyaGomaa committed Apr 29, 2024
    Configuration menu
    Copy the full SHA
    2047bbc View commit details
    Browse the repository at this point in the history

  8. exporting_alerts.py: use StixExporter class

    @AlyaGomaa
    AlyaGomaa committed Apr 29, 2024
    Configuration menu
    Copy the full SHA
    213e745 View commit details
    Browse the repository at this point in the history

  9. exporting_alerts.py: remove_sensitive_info before exporting evidence

    @AlyaGomaa
    AlyaGomaa committed Apr 29, 2024
    Configuration menu
    Copy the full SHA
    ba3059d View commit details
    Browse the repository at this point in the history

  10. metadata_manager.py: add the cmd used to metadata/info

    @AlyaGomaa
    AlyaGomaa committed Apr 29, 2024
    Configuration menu
    Copy the full SHA
    427c9f1 View commit details
    Browse the repository at this point in the history

  11. flowalerts: fix reversed comments in detect_incompatible_CN()

    @AlyaGomaa
    AlyaGomaa committed Apr 29, 2024
    Configuration menu
    Copy the full SHA
    b805c91 View commit details
    Browse the repository at this point in the history

Commits on Apr 30, 2024

  1. Merge pull request stratosphereips#577 from stratosphereips/alya/prin… 

    …t_the_used_cmd_in_metadata

Add the cmd used to metadata/info
    @AlyaGomaa
    AlyaGomaa authored Apr 30, 2024
    Configuration menu
    Copy the full SHA
    3f8ece5 View commit details
    Browse the repository at this point in the history

  2. Merge pull request stratosphereips#576 from stratosphereips/alya/chec… 

    …k_exporting_of_sensitive_evidence

Fix exporting of sensitive evidence
    @AlyaGomaa
    AlyaGomaa authored Apr 30, 2024
    Configuration menu
    Copy the full SHA
    18adaab View commit details
    Browse the repository at this point in the history

  3. Added more tests to test_whitelist.py

    @Sekhar-Kumar-Dash @AlyaGomaa
    Sekhar-Kumar-Dash authored and AlyaGomaa committed Apr 30, 2024
    Configuration menu
    Copy the full SHA
    932da7e View commit details
    Browse the repository at this point in the history

  4. Update the tests for the recent version of the code

    @Sekhar-Kumar-Dash @AlyaGomaa
    Sekhar-Kumar-Dash authored and AlyaGomaa committed Apr 30, 2024
    Configuration menu
    Copy the full SHA
    4911dae View commit details
    Browse the repository at this point in the history

  5. Merge remote-tracking branch 'Sekhar-Kumar-Dash/patch-10' into fork/p… 

    …atch-10
    @AlyaGomaa
    AlyaGomaa committed Apr 30, 2024
    Configuration menu
    Copy the full SHA
    7e884f5 View commit details
    Browse the repository at this point in the history

  6. removed duplicates from test_http_analyzer.py

    @Sekhar-Kumar-Dash
    Sekhar-Kumar-Dash authored Apr 30, 2024
    Configuration menu
    Copy the full SHA
    d023f0e View commit details
    Browse the repository at this point in the history

Commits on May 8, 2024

  1. db: add docs about where flows with timestamps == the start or end ti… 

    …me of a time belong [skip ci]
    @AlyaGomaa
    AlyaGomaa committed May 8, 2024
    Configuration menu
    Copy the full SHA
    e22b866 View commit details
    Browse the repository at this point in the history

Commits on May 13, 2024

  1. remove dead code

    @AlyaGomaa
    AlyaGomaa committed May 13, 2024
    Configuration menu
    Copy the full SHA
    7b2cdec View commit details
    Browse the repository at this point in the history

  2. Merge pull request stratosphereips#580 from stratosphereips/alya/fix_… 

    …storing_timestamps_in_the_alerts_db

remove dead code
    @AlyaGomaa
    AlyaGomaa authored May 13, 2024
    Configuration menu
    Copy the full SHA
    4f837b3 View commit details
    Browse the repository at this point in the history

Commits on May 15, 2024

  1. update CHANGELOG.md

    @AlyaGomaa
    AlyaGomaa committed May 15, 2024
    Configuration menu
    Copy the full SHA
    531cf06 View commit details
    Browse the repository at this point in the history

  2. Bump slips version to 1.0.14

    @AlyaGomaa
    AlyaGomaa committed May 15, 2024
    Configuration menu
    Copy the full SHA
    b7696d8 View commit details
    Browse the repository at this point in the history

  3. update slips.gif to use slips v1.0.14

    @AlyaGomaa
    AlyaGomaa committed May 15, 2024
    Configuration menu
    Copy the full SHA
    5bf4a3f View commit details
    Browse the repository at this point in the history

  4. installation: update instructions for building the docker image. [ski… 

    …p-ci] Issue stratosphereips#579
    @AlyaGomaa
    AlyaGomaa committed May 15, 2024
    Configuration menu
    Copy the full SHA
    da15859 View commit details
    Browse the repository at this point in the history

  5. CI-prod: fix error finding test_vertical_portscan.py

    @AlyaGomaa
    AlyaGomaa committed May 15, 2024
    Configuration menu
    Copy the full SHA
    333a8e7 View commit details
    Browse the repository at this point in the history

  6. Merge pull request stratosphereips#581 from stratosphereips/develop 

    Slips v1.0.14
    @AlyaGomaa
    AlyaGomaa authored May 15, 2024
    Configuration menu
    Copy the full SHA
    3a1ca1c View commit details
    Browse the repository at this point in the history

  7. CI-publishing: increase timeout for publishing ubuntu-image

    @AlyaGomaa
    AlyaGomaa committed May 15, 2024
    Configuration menu
    Copy the full SHA
    5953190 View commit details
    Browse the repository at this point in the history

  8. CI-publishing: increase swap size for publishing ubuntu-image

    @AlyaGomaa
    AlyaGomaa committed May 15, 2024
    Configuration menu
    Copy the full SHA
    dc831ff View commit details
    Browse the repository at this point in the history

  9. CI-publishing: increase swap size for publishing ubuntu-image and Max… 

    …imize build space
    @AlyaGomaa
    AlyaGomaa committed May 15, 2024
    Configuration menu
    Copy the full SHA
    cd29df0 View commit details
    Browse the repository at this point in the history

  10. temporarily publish ubuntu image on push to this branch

    @AlyaGomaa
    AlyaGomaa committed May 15, 2024
    Configuration menu
    Copy the full SHA
    28c0395 View commit details
    Browse the repository at this point in the history

  11. ubunut-image: use apt-transport-https for adding an https source to s… 

    …ources.list
    @AlyaGomaa
    AlyaGomaa committed May 15, 2024
    Configuration menu
    Copy the full SHA
    a401622 View commit details
    Browse the repository at this point in the history

  12. CI-publishing: use no-cache when building ubuntu docker image

    @AlyaGomaa
    AlyaGomaa committed May 15, 2024
    Configuration menu
    Copy the full SHA
    05e08ea View commit details
    Browse the repository at this point in the history

  13. CI-publishing: temporarily use the cur branch for building ubuntu image

    @AlyaGomaa
    AlyaGomaa committed May 15, 2024
    Configuration menu
    Copy the full SHA
    d144b0b View commit details
    Browse the repository at this point in the history

  14. CI-publishing: use build-push-action@v5 instead of v3

    @AlyaGomaa
    AlyaGomaa committed May 15, 2024
    Configuration menu
    Copy the full SHA
    8e4c69f View commit details
    Browse the repository at this point in the history

  15. Dockerfile: remove all apt dependencies that are not used by slips, e… 

    ….g. vim, less, etc.
    @AlyaGomaa
    AlyaGomaa committed May 15, 2024
    Configuration menu
    Copy the full SHA
    1202058 View commit details
    Browse the repository at this point in the history

  16. ci-publishing: temporarily disable macos img building

    @AlyaGomaa
    AlyaGomaa committed May 15, 2024
    Configuration menu
    Copy the full SHA
    1210b56 View commit details
    Browse the repository at this point in the history

  17. ci-publishing: add workaround to free up some space

    @AlyaGomaa
    AlyaGomaa committed May 15, 2024
    Configuration menu
    Copy the full SHA
    ad2cc54 View commit details
    Browse the repository at this point in the history

  18. ubuntu-image: remove deleted apt dependencies

    @AlyaGomaa
    AlyaGomaa committed May 15, 2024
    Configuration menu
    Copy the full SHA
    900b1cc View commit details
    Browse the repository at this point in the history

  19. test if CI publishing of ubunutu image is working

    @AlyaGomaa
    AlyaGomaa committed May 15, 2024
    Configuration menu
    Copy the full SHA
    0ec9be7 View commit details
    Browse the repository at this point in the history

  20. uncomment the rest of the ci file

    @AlyaGomaa
    AlyaGomaa committed May 15, 2024
    Configuration menu
    Copy the full SHA
    13e7920 View commit details
    Browse the repository at this point in the history

Commits on May 23, 2024

  1. refactor test_extract_info_from_UA_valid()

    @AlyaGomaa
    AlyaGomaa committed May 23, 2024
    Configuration menu
    Copy the full SHA
    ffaa02f View commit details
    Browse the repository at this point in the history

  2. delete duplicate test_extract_info_from_UA_valid()

    @AlyaGomaa
    AlyaGomaa committed May 23, 2024
    Configuration menu
    Copy the full SHA
    03ab1bf View commit details
    Browse the repository at this point in the history

  3. http: use lowercase in most function names

    @AlyaGomaa
    AlyaGomaa committed May 23, 2024
    Configuration menu
    Copy the full SHA
    ecea753 View commit details
    Browse the repository at this point in the history

  4. tes_http_analyzer: refactor

    @AlyaGomaa
    AlyaGomaa committed May 23, 2024
    Configuration menu
    Copy the full SHA
    c695b3b View commit details
    Browse the repository at this point in the history

  5. disable exporting to slack by default [skip-ci]

    @AlyaGomaa
    AlyaGomaa committed May 23, 2024
    Configuration menu
    Copy the full SHA
    8fb9fb6 View commit details
    Browse the repository at this point in the history

  6. CI-publishing: comment out macos image from the matrix

    @AlyaGomaa
    AlyaGomaa committed May 23, 2024
    Configuration menu
    Copy the full SHA
    9215805 View commit details
    Browse the repository at this point in the history

  7. CI-publishing: uncomment the rest of the file

    @AlyaGomaa
    AlyaGomaa committed May 23, 2024
    Configuration menu
    Copy the full SHA
    4857ef9 View commit details
    Browse the repository at this point in the history

  8. CI-publishing: delete dependency image from container once published … 

    …by ci
    @AlyaGomaa
    AlyaGomaa committed May 23, 2024
    Configuration menu
    Copy the full SHA
    71a089a View commit details
    Browse the repository at this point in the history

  9. CI-publishing: delete dependency image from container once published … 

    …by ci
    @AlyaGomaa
    AlyaGomaa committed May 23, 2024
    Configuration menu
    Copy the full SHA
    e418421 View commit details
    Browse the repository at this point in the history

  10. CI-publishing: delete docker images from container once published. an… 

    …d use kfir4444/free-disk-space@main
    @AlyaGomaa
    AlyaGomaa committed May 23, 2024
    Configuration menu
    Copy the full SHA
    89a6b2f View commit details
    Browse the repository at this point in the history

  11. CI-publishing: fix indentation err

    @AlyaGomaa
    AlyaGomaa committed May 23, 2024
    Configuration menu
    Copy the full SHA
    0e0cd19 View commit details
    Browse the repository at this point in the history

  12. CI-publishing: undo deleting published docker images as each job runs… 

    … in a separate VM, space wont be saved accross all jobs
    @AlyaGomaa
    AlyaGomaa committed May 23, 2024
    Configuration menu
    Copy the full SHA
    a9fd175 View commit details
    Browse the repository at this point in the history

  13. CI-publishing: enable verbose debugging when building and pushing doc… 

    …ker images
    @AlyaGomaa
    AlyaGomaa committed May 23, 2024
    Configuration menu
    Copy the full SHA
    22deaed View commit details
    Browse the repository at this point in the history

  14. CI-publishing: try ubuntu-latest runner instead of ubuntu-20.04

    @AlyaGomaa
    AlyaGomaa committed May 23, 2024
    Configuration menu
    Copy the full SHA
    1464f5c View commit details
    Browse the repository at this point in the history

Commits on May 24, 2024

  1. CI: more consistent job names

    @AlyaGomaa
    AlyaGomaa committed May 24, 2024
    Configuration menu
    Copy the full SHA
    58126ea View commit details
    Browse the repository at this point in the history

  2. CI-publishing: undo all the changes made for testing

    @AlyaGomaa
    AlyaGomaa committed May 24, 2024
    Configuration menu
    Copy the full SHA
    21c3c07 View commit details
    Browse the repository at this point in the history

  3. CI-publishing: increase timeout for publishing ubuntu-image

    @AlyaGomaa
    AlyaGomaa committed May 24, 2024
    Configuration menu
    Copy the full SHA
    489cc62 View commit details
    Browse the repository at this point in the history

  4. CI-publishing: increase swap size for publishing ubuntu-image

    @AlyaGomaa
    AlyaGomaa committed May 24, 2024
    Configuration menu
    Copy the full SHA
    b700155 View commit details
    Browse the repository at this point in the history

  5. CI-publishing: increase swap size for publishing ubuntu-image and Max… 

    …imize build space
    @AlyaGomaa
    AlyaGomaa committed May 24, 2024
    Configuration menu
    Copy the full SHA
    6956797 View commit details
    Browse the repository at this point in the history

  6. temporarily publish ubuntu image on push to this branch

    @AlyaGomaa
    AlyaGomaa committed May 24, 2024
    Configuration menu
    Copy the full SHA
    886c329 View commit details
    Browse the repository at this point in the history

  7. ubunut-image: use apt-transport-https for adding an https source to s… 

    …ources.list
    @AlyaGomaa
    AlyaGomaa committed May 24, 2024
    Configuration menu
    Copy the full SHA
    efc305d View commit details
    Browse the repository at this point in the history

  8. CI-publishing: use no-cache when building ubuntu docker image

    @AlyaGomaa
    AlyaGomaa committed May 24, 2024
    Configuration menu
    Copy the full SHA
    bd55bc8 View commit details
    Browse the repository at this point in the history

  9. CI-publishing: temporarily use the cur branch for building ubuntu image

    @AlyaGomaa
    AlyaGomaa committed May 24, 2024
    Configuration menu
    Copy the full SHA
    fe37ceb View commit details
    Browse the repository at this point in the history

  10. CI-publishing: use build-push-action@v5 instead of v3

    @AlyaGomaa
    AlyaGomaa committed May 24, 2024
    Configuration menu
    Copy the full SHA
    fa7b38a View commit details
    Browse the repository at this point in the history

  11. Dockerfile: remove all apt dependencies that are not used by slips, e… 

    ….g. vim, less, etc.
    @AlyaGomaa
    AlyaGomaa committed May 24, 2024
    Configuration menu
    Copy the full SHA
    7c68dc6 View commit details
    Browse the repository at this point in the history

  12. ci-publishing: temporarily disable macos img building

    @AlyaGomaa
    AlyaGomaa committed May 24, 2024
    Configuration menu
    Copy the full SHA
    84e67ca View commit details
    Browse the repository at this point in the history

  13. ci-publishing: add workaround to free up some space

    @AlyaGomaa
    AlyaGomaa committed May 24, 2024
    Configuration menu
    Copy the full SHA
    ba61a3b View commit details
    Browse the repository at this point in the history

  14. ubuntu-image: remove deleted apt dependencies

    @AlyaGomaa
    AlyaGomaa committed May 24, 2024
    Configuration menu
    Copy the full SHA
    761c837 View commit details
    Browse the repository at this point in the history

  15. test if CI publishing of ubunutu image is working

    @AlyaGomaa
    AlyaGomaa committed May 24, 2024
    Configuration menu
    Copy the full SHA
    0da70f0 View commit details
    Browse the repository at this point in the history

  16. uncomment the rest of the ci file

    @AlyaGomaa
    AlyaGomaa committed May 24, 2024
    Configuration menu
    Copy the full SHA
    a884d04 View commit details
    Browse the repository at this point in the history

  17. CI-publishing: comment out macos image from the matrix

    @AlyaGomaa
    AlyaGomaa committed May 24, 2024
    Configuration menu
    Copy the full SHA
    e96784e View commit details
    Browse the repository at this point in the history

  18. CI-publishing: uncomment the rest of the file

    @AlyaGomaa
    AlyaGomaa committed May 24, 2024
    Configuration menu
    Copy the full SHA
    b197ce6 View commit details
    Browse the repository at this point in the history

  19. CI-publishing: delete dependency image from container once published … 

    …by ci
    @AlyaGomaa
    AlyaGomaa committed May 24, 2024
    Configuration menu
    Copy the full SHA
    c6b71aa View commit details
    Browse the repository at this point in the history

  20. CI-publishing: delete dependency image from container once published … 

    …by ci
    @AlyaGomaa
    AlyaGomaa committed May 24, 2024
    Configuration menu
    Copy the full SHA
    2d99123 View commit details
    Browse the repository at this point in the history

  21. CI-publishing: delete docker images from container once published. an… 

    …d use kfir4444/free-disk-space@main
    @AlyaGomaa
    AlyaGomaa committed May 24, 2024
    Configuration menu
    Copy the full SHA
    366ee61 View commit details
    Browse the repository at this point in the history

  22. CI-publishing: fix indentation err

    @AlyaGomaa
    AlyaGomaa committed May 24, 2024
    Configuration menu
    Copy the full SHA
    e12297f View commit details
    Browse the repository at this point in the history

  23. CI-publishing: undo deleting published docker images as each job runs… 

    … in a separate VM, space wont be saved accross all jobs
    @AlyaGomaa
    AlyaGomaa committed May 24, 2024
    Configuration menu
    Copy the full SHA
    0c37049 View commit details
    Browse the repository at this point in the history

  24. CI-publishing: enable verbose debugging when building and pushing doc… 

    …ker images
    @AlyaGomaa
    AlyaGomaa committed May 24, 2024
    Configuration menu
    Copy the full SHA
    c63c60f View commit details
    Browse the repository at this point in the history

  25. CI-publishing: try ubuntu-latest runner instead of ubuntu-20.04

    @AlyaGomaa
    AlyaGomaa committed May 24, 2024
    Configuration menu
    Copy the full SHA
    db4aabb View commit details
    Browse the repository at this point in the history

  26. CI: more consistent job names

    @AlyaGomaa
    AlyaGomaa committed May 24, 2024
    Configuration menu
    Copy the full SHA
    6bf587c View commit details
    Browse the repository at this point in the history

  27. CI-publishing: undo all the changes made for testing

    @AlyaGomaa
    AlyaGomaa committed May 24, 2024
    Configuration menu
    Copy the full SHA
    e87ca0a View commit details
    Browse the repository at this point in the history

  28. Merge remote-tracking branch 'origin/alya/fix-publishing-docker-image… 

    …' into alya/fix-publishing-docker-image
    @AlyaGomaa
    AlyaGomaa committed May 24, 2024
    Configuration menu
    Copy the full SHA
    392f538 View commit details
    Browse the repository at this point in the history

  29. delete the conda env file [skip-ci]

    @AlyaGomaa
    AlyaGomaa committed May 24, 2024
    Configuration menu
    Copy the full SHA
    657682b View commit details
    Browse the repository at this point in the history

  30. timeline: handle the web interface displaying "failed" as the protoco… 

    …l name as read from suricata
    @AlyaGomaa
    AlyaGomaa committed May 24, 2024
    Configuration menu
    Copy the full SHA
    b2b75a2 View commit details
    Browse the repository at this point in the history

  31. Merge pull request stratosphereips#582 from stratosphereips/alya/fix-… 

    …publishing-docker-image

Fix CI - Free some space and more consistent job names
    @AlyaGomaa
    AlyaGomaa authored May 24, 2024
    Configuration menu
    Copy the full SHA
    f8483ef View commit details
    Browse the repository at this point in the history

  32. read the web interface port from slips.conf

    @AlyaGomaa
    AlyaGomaa committed May 24, 2024
    Configuration menu
    Copy the full SHA
    836795b View commit details
    Browse the repository at this point in the history

  33. add web interface port from to test config files

    @AlyaGomaa
    AlyaGomaa committed May 24, 2024
    Configuration menu
    Copy the full SHA
    71ac3ad View commit details
    Browse the repository at this point in the history

  34. webinterface: set the host to "127.0.0.1" when running inside a conta… 

    …iner
    @AlyaGomaa
    AlyaGomaa committed May 24, 2024
    Configuration menu
    Copy the full SHA
    fd54281 View commit details
    Browse the repository at this point in the history

  35. change slips threshold to 3.86

    @AlyaGomaa
    AlyaGomaa committed May 24, 2024
    Configuration menu
    Copy the full SHA
    ce9e239 View commit details
    Browse the repository at this point in the history

  36. webinterface: alwys use "0.0.0.0" as the host even in docker

    @AlyaGomaa
    AlyaGomaa committed May 24, 2024
    Configuration menu
    Copy the full SHA
    c107b09 View commit details
    Browse the repository at this point in the history

  37. webinterface: print a warning that the port will stay open unless its… 

    … killed manually
    @AlyaGomaa
    AlyaGomaa committed May 24, 2024
    Configuration menu
    Copy the full SHA
    cd4a9fd View commit details
    Browse the repository at this point in the history

  38. popups: show only alert description instead of all evidence inside of… 

    … it.
    @AlyaGomaa
    AlyaGomaa committed May 24, 2024
    Configuration menu
    Copy the full SHA
    07d8df8 View commit details
    Browse the repository at this point in the history

  39. delete azure from microsoft domains [skip-ci]

    @AlyaGomaa
    AlyaGomaa committed May 24, 2024
    Configuration menu
    Copy the full SHA
    764b5ab View commit details
    Browse the repository at this point in the history

  40. Merge pull request stratosphereips#584 from stratosphereips/alya/fix-… 

    …popups

popups: show only alert description
    @AlyaGomaa
    AlyaGomaa authored May 24, 2024
    Configuration menu
    Copy the full SHA
    e39cb35 View commit details
    Browse the repository at this point in the history

Commits on May 25, 2024

  1. Merge pull request stratosphereips#583 from stratosphereips/alya/fix_… 

    …failing_to_recognize_dstports_in_the_web_interface

handle the web interface displaying "failed" as the protocol
    @AlyaGomaa
    AlyaGomaa authored May 25, 2024
    Configuration menu
    Copy the full SHA
    984df37 View commit details
    Browse the repository at this point in the history

Commits on May 27, 2024

  1. Updated test_http_analyzer.py

    @Sekhar-Kumar-Dash
    Sekhar-Kumar-Dash authored May 27, 2024
    Configuration menu
    Copy the full SHA
    3039c68 View commit details
    Browse the repository at this point in the history

  2. add an interface for flowalerts helpers

    @AlyaGomaa
    AlyaGomaa committed May 27, 2024
    Configuration menu
    Copy the full SHA
    9d8f4ba View commit details
    Browse the repository at this point in the history

  3. flowalerts: move all dns logic to flowalerts/dns.py

    @AlyaGomaa
    AlyaGomaa committed May 27, 2024
    Configuration menu
    Copy the full SHA
    ea8309c View commit details
    Browse the repository at this point in the history

  4. flowalerts: move all notice.log logic to flowalerts/notice.py

    @AlyaGomaa
    AlyaGomaa committed May 27, 2024
    Configuration menu
    Copy the full SHA
    25909ae View commit details
    Browse the repository at this point in the history

  5. flowalerts: move all smtp logic to flowalerts/smtp.py

    @AlyaGomaa
    AlyaGomaa committed May 27, 2024
    Configuration menu
    Copy the full SHA
    c309f0a View commit details
    Browse the repository at this point in the history

  6. flowalerts: move all ssl logic to flowalerts/ssl.py

    @AlyaGomaa
    AlyaGomaa committed May 27, 2024
    Configuration menu
    Copy the full SHA
    b07b0bc View commit details
    Browse the repository at this point in the history

  7. flowalerts: move all new software logic to flowalerts/software.py

    @AlyaGomaa
    AlyaGomaa committed May 27, 2024
    Configuration menu
    Copy the full SHA
    09a4caa View commit details
    Browse the repository at this point in the history

  8. flowalerts: move all ssh logic to flowalerts/ssh.py

    @AlyaGomaa
    AlyaGomaa committed May 27, 2024
    Configuration menu
    Copy the full SHA
    772113c View commit details
    Browse the repository at this point in the history

  9. flowalerts: move all downloaded file logic to flowalerts/downloaded_f… 

    …ile.py
    @AlyaGomaa
    AlyaGomaa committed May 27, 2024
    Configuration menu
    Copy the full SHA
    2871a61 View commit details
    Browse the repository at this point in the history

  10. Updated test_whitelist.py

    @Sekhar-Kumar-Dash
    Sekhar-Kumar-Dash authored May 27, 2024
    Configuration menu
    Copy the full SHA
    be08ea7 View commit details
    Browse the repository at this point in the history

  11. flowalerts: move all tunnel logic to flowalerts/tunnel.py

    @AlyaGomaa
    AlyaGomaa committed May 27, 2024
    Configuration menu
    Copy the full SHA
    9fe12d8 View commit details
    Browse the repository at this point in the history

  12. flowalerts: move all conn logic to flowalerts/conn.py

    @AlyaGomaa
    AlyaGomaa committed May 27, 2024
    Configuration menu
    Copy the full SHA
    fc183f7 View commit details
    Browse the repository at this point in the history

  13. flowalerts: rafactor

    @AlyaGomaa
    AlyaGomaa committed May 27, 2024
    Configuration menu
    Copy the full SHA
    7539d59 View commit details
    Browse the repository at this point in the history

  14. flowalerts: move check_non_ssl_port_443_conns() from conn.py to ssl.py

    @AlyaGomaa
    AlyaGomaa committed May 27, 2024
    Configuration menu
    Copy the full SHA
    5e28a5b View commit details
    Browse the repository at this point in the history

  15. ssl.py: refactor

    @AlyaGomaa
    AlyaGomaa committed May 27, 2024
    Configuration menu
    Copy the full SHA
    19ffbb1 View commit details
    Browse the repository at this point in the history

  16. update unit tests

    @AlyaGomaa
    AlyaGomaa committed May 27, 2024
    Configuration menu
    Copy the full SHA
    7439467 View commit details
    Browse the repository at this point in the history

  17. flowalerts: use Software() class

    @AlyaGomaa
    AlyaGomaa committed May 27, 2024
    Configuration menu
    Copy the full SHA
    467673b View commit details
    Browse the repository at this point in the history

Commits on May 28, 2024

  1. Merge pull request stratosphereips#572 from Sekhar-Kumar-Dash/patch-11 

    Added more tests to test_http_analyzer.py
    @AlyaGomaa
    AlyaGomaa authored May 28, 2024
    Configuration menu
    Copy the full SHA
    c924bc3 View commit details
    Browse the repository at this point in the history

  2. Merge pull request stratosphereips#585 from stratosphereips/alya/spli… 

    …t_flow_alerts_into_smaller_files

Split flow alerts into smaller files
    @AlyaGomaa
    AlyaGomaa authored May 28, 2024
    Configuration menu
    Copy the full SHA
    6ce22cf View commit details
    Browse the repository at this point in the history

  3. flowalerts.ssl: fix unable to find ssl_waiting_thread

    @AlyaGomaa
    AlyaGomaa committed May 28, 2024
    Configuration menu
    Copy the full SHA
    95053ea View commit details
    Browse the repository at this point in the history

  4. flowalerts.ssl: fix unable oto find pending_ssl_flows

    @AlyaGomaa
    AlyaGomaa committed May 28, 2024
    Configuration menu
    Copy the full SHA
    5d9f555 View commit details
    Browse the repository at this point in the history

  5. flowalerts.ssl: set evidence with threat level=info when DoH is found

    @AlyaGomaa
    AlyaGomaa committed May 28, 2024
    Configuration menu
    Copy the full SHA
    d8917d1 View commit details
    Browse the repository at this point in the history

  6. go_director.py: delete dead code

    @AlyaGomaa
    AlyaGomaa committed May 28, 2024
    Configuration menu
    Copy the full SHA
    4b4c1ca View commit details
    Browse the repository at this point in the history

  7. go_director.py: db: rename setInfoForIPs to set_ip_info

    @AlyaGomaa
    AlyaGomaa committed May 28, 2024
    Configuration menu
    Copy the full SHA
    e8c8de6 View commit details
    Browse the repository at this point in the history

  8. flowalerts.conn: dont alert conn without dns if the daddr is a soh se… 

    …rver
    @AlyaGomaa
    AlyaGomaa committed May 28, 2024
    Configuration menu
    Copy the full SHA
    aa9915f View commit details
    Browse the repository at this point in the history

  9. db: keep track of doh servers in ipsinfo

    @AlyaGomaa
    AlyaGomaa committed May 28, 2024
    Configuration menu
    Copy the full SHA
    e27cffb View commit details
    Browse the repository at this point in the history

  10. update unit tests

    @AlyaGomaa
    AlyaGomaa committed May 28, 2024
    Configuration menu
    Copy the full SHA
    6008c5c View commit details
    Browse the repository at this point in the history

  11. CI-staging: use dependencies image

    @AlyaGomaa
    AlyaGomaa committed May 28, 2024
    Configuration menu
    Copy the full SHA
    36ad42e View commit details
    Browse the repository at this point in the history

  12. CI-staging: run unit and integrataion tests in parallel

    @AlyaGomaa
    AlyaGomaa committed May 28, 2024
    Configuration menu
    Copy the full SHA
    15b38f6 View commit details
    Browse the repository at this point in the history

  13. split test_dataset.py into multiple files

    @AlyaGomaa
    AlyaGomaa committed May 28, 2024
    Configuration menu
    Copy the full SHA
    b4fd0de View commit details
    Browse the repository at this point in the history

  14. cI-staging: run the new integration test files in parallel

    @AlyaGomaa
    AlyaGomaa committed May 28, 2024
    Configuration menu
    Copy the full SHA
    352b258 View commit details
    Browse the repository at this point in the history

  15. cI-staging: fix typo in test_portscans.py filename

    @AlyaGomaa
    AlyaGomaa committed May 28, 2024
    Configuration menu
    Copy the full SHA
    2df0328 View commit details
    Browse the repository at this point in the history

  16. flowalerts.ssl: fix issue extracting approto

    @AlyaGomaa
    AlyaGomaa committed May 28, 2024
    Configuration menu
    Copy the full SHA
    5f914b5 View commit details
    Browse the repository at this point in the history

  17. ci-staging: fix running portscan tests twice

    @AlyaGomaa
    AlyaGomaa committed May 28, 2024
    Configuration menu
    Copy the full SHA
    2e23129 View commit details
    Browse the repository at this point in the history

Commits on May 29, 2024

  1. db: fix errors calling set_ip_info()

    @AlyaGomaa
    AlyaGomaa committed May 29, 2024
    Configuration menu
    Copy the full SHA
    5d051cf View commit details
    Browse the repository at this point in the history

  2. Merge pull request stratosphereips#586 from stratosphereips/alya/dete… 

    …ct_doh

Alert on DoH and ignore conn without DNS when DoH is detected
    @AlyaGomaa
    AlyaGomaa authored May 29, 2024
    Configuration menu
    Copy the full SHA
    78130dd View commit details
    Browse the repository at this point in the history

  3. Added more tests to test_whitelist.py

    @Sekhar-Kumar-Dash @AlyaGomaa
    Sekhar-Kumar-Dash authored and AlyaGomaa committed May 29, 2024
    Configuration menu
    Copy the full SHA
    25b93d4 View commit details
    Browse the repository at this point in the history

  4. Update the tests for the recent version of the code

    @Sekhar-Kumar-Dash @AlyaGomaa
    Sekhar-Kumar-Dash authored and AlyaGomaa committed May 29, 2024
    Configuration menu
    Copy the full SHA
    dc963aa View commit details
    Browse the repository at this point in the history

  5. Added more tests to test_whitelist.py

    @Sekhar-Kumar-Dash @AlyaGomaa
    Sekhar-Kumar-Dash authored and AlyaGomaa committed May 29, 2024
    Configuration menu
    Copy the full SHA
    3715b0e View commit details
    Browse the repository at this point in the history

  6. Update the tests for the recent version of the code

    @Sekhar-Kumar-Dash @AlyaGomaa
    Sekhar-Kumar-Dash authored and AlyaGomaa committed May 29, 2024
    Configuration menu
    Copy the full SHA
    2d3055e View commit details
    Browse the repository at this point in the history

  7. Updated test_whitelist.py

    @Sekhar-Kumar-Dash @AlyaGomaa
    Sekhar-Kumar-Dash authored and AlyaGomaa committed May 29, 2024
    Configuration menu
    Copy the full SHA
    bf6d71d View commit details
    Browse the repository at this point in the history

  8. Merge remote-tracking branch 'Sekhar-Kumar-Dash/patch-10' into fork/p… 

    …atch-10
    @AlyaGomaa
    AlyaGomaa committed May 29, 2024
    Configuration menu
    Copy the full SHA
    6a0b5ce View commit details
    Browse the repository at this point in the history

Commits on May 30, 2024

  1. test_whitelist.py: add 1 more test case to test_is_whitelisted_domain… 

    …_in_flow()
    @AlyaGomaa
    AlyaGomaa committed May 30, 2024
    Configuration menu
    Copy the full SHA
    215a6d6 View commit details
    Browse the repository at this point in the history

  2. test_whitelist.py: remove functions that were already tested in test_… 

    …is_whitelisted_domain_in_flow()
    @AlyaGomaa
    AlyaGomaa committed May 30, 2024
    Configuration menu
    Copy the full SHA
    a6ecbab View commit details
    Browse the repository at this point in the history

  3. test_whitelist.py: fix test_read_configuration()

    @AlyaGomaa
    AlyaGomaa committed May 30, 2024
    Configuration menu
    Copy the full SHA
    2df662b View commit details
    Browse the repository at this point in the history