Tags: GTrunSec/dsiem
Tags
fix: APM err when setting tag for a closed Tx (defenxor#219)
feat: pass elasticsearch credentials (defenxor#206) * feat: pass es credentials * fix ng lint error
fix: calculate risk at the end of stage (defenxor#193) Previously risk is calculated upon *entering* a correlation stage. This moves it to the end of stage for better alignment with OSSIM behavior. Also in this commit: clean up of old coments, and minor refactor on processMatchedEvent()
perf: queue incoming events from NATS client lib (defenxor#190) This change prevent NATS client lib from triggering slow consumer err, and also prevent deadlock in a single directive from stalling the entire pipeline.
fix: missing VA check for the 1st matching event (defenxor#186) This is true when the 2nd and subsequent rules never refer to the same IP/port combination in the first rule.
feat: option to enable intel check on priv IPs (defenxor#185) * fix: custom data isnt updated on prev stage match * feat: option to enable intel check on priv IPs Useful for integration tests and demos
feat: new directive option: all_rules_always_active (defenxor#181) * add dockerbuild-dev.sh script * add AllRulesAlwaysActive flag to directive struct * add backlog processing for AllRulesALwaysActive * update test files * remove event count restriction in UI * fix ng lint err