types

Apr 11, 2024

Changes in this version

+ func GetFSType(path string) (string, error)

+ func IsNetworkFS(path string) (bool, string, error)

type Event

+ func (e *Event) SetMeta(key string, value string) bool

+ func (e *Event) SetParsed(key string, value string) bool

Jan 23, 2024

Changes in this version

+ const APPSEC

+ type AppsecEvent struct

+ HasInBandMatches bool

+ HasOutBandMatches bool

+ Vars map[string]string

+ func (w AppsecEvent) GetVar(varName string) string

type Event

+ Appsec AppsecEvent

+ type Field string

+ const Accuracy

+ const Confidence

+ const File

+ const ID

+ const Kind

+ const Msg

+ const Revision

+ const RuleType

+ const SecMark

+ const Severity

+ const Tags

+ func (f Field) String() string

+ type MatchedRules []map[string]interface

+ func (w MatchedRules) ByAccuracy(accuracy string) MatchedRules

+ func (w MatchedRules) ByDisruptiveness(is bool) MatchedRules

+ func (w MatchedRules) ByID(id int) MatchedRules

+ func (w MatchedRules) ByKind(kind string) MatchedRules

+ func (w MatchedRules) BySeverity(severity string) MatchedRules

+ func (w MatchedRules) ByTag(match string) MatchedRules

+ func (w MatchedRules) ByTagRx(rx string) MatchedRules

+ func (w MatchedRules) ByTags(match []string) MatchedRules

+ func (w MatchedRules) GetField(field Field) []interface{}

+ func (w MatchedRules) GetHash() string

+ func (w MatchedRules) GetMatchedZones() []string

+ func (w MatchedRules) GetMethod() string

+ func (w MatchedRules) GetName() string

+ func (w MatchedRules) GetRuleIDs() []int

+ func (w MatchedRules) GetURI() string

+ func (w MatchedRules) GetVersion() string

+ func (w MatchedRules) Kinds() []string

+ type Queue struct

+ L int

+ Queue []Event

+ func NewQueue(l int) *Queue

+ func (q *Queue) Add(m Event)

+ func (q *Queue) GetQueue() []Event

Oct 17, 2023

Changes in this version

+ const CommunityBlocklistPullSourceScope

type Event

+ func (e *Event) ParseIPSources() []net.IP

May 16, 2023

Changes in this version

+ const CAPIBaseURL

+ const CAPIOrigin

+ const ConsoleOrigin

+ const CrowdSecOrigin

+ const CscliImportOrigin

+ const CscliOrigin

+ const DecisionTypeBan

+ const LIVE

+ const ListOrigin

+ const PAPIBaseURL

+ const PAPIPermissionsUrl

+ const PAPIPollUrl

+ const PAPIVersion

+ const TIMEMACHINE

+ func GetOrigins() []string

+ type DataCapture struct

+ Key string

+ KeyExpression *vm.Program

+ MaxMapSize int

+ Name string

+ Strategy string

+ TTL string

+ TTLVal time.Duration

+ Value string

+ ValueExpression *vm.Program

type DataSource

+ Cache *bool

+ Size *int

+ Strategy *string

+ TTL *time.Duration

type Event

+ Unmarshaled map[string]interface{}

Nov 14, 2022

Changes in this version

+ func StripAnsiString(str string) string

type Event

+ StrTimeFormat string

+ func (e *Event) GetMeta(key string) string

Jul 19, 2022

Changes in this version

+ const ApiKeyAuthType

+ const PasswordAuthType

+ const TlsAuthType

Apr 22, 2022

Changes in this version

+ func GetLineCountForFile(filepath string) int

Mar 2, 2022

Changes in this version

+ func IntPtr(i int) *int

Jan 24, 2022

Changes in this version

+ func InSlice(str string, slice []string) bool

+ func UtcNow() time.Time

Nov 2, 2021

Changes in this version

type Event

+ WhitelistReason string

type RuntimeAlert

+ func (r RuntimeAlert) GetSources() []string

Sep 14, 2021

Changes in this version

+ func BoolPtr(b bool) *bool

+ func Int32Ptr(i int32) *int32

+ func StrPtr(s string) *string

Jul 5, 2021

Changes in this version

+ const AS

+ const Country

type GrokPattern

+ ExpValue string

+ RunTimeValue *vm.Program

type Line

+ Module string

Apr 7, 2021

Changes in this version

+ func WriteStackTrace(iErr interface{}) string

Jan 14, 2021

Changes in this version

+ func Addr2Ints(any string) (int, int64, int64, int64, int64, error)

+ func IP2Ints(pip net.IP) (int, int64, int64, error)

+ func Range2Ints(network net.IPNet) (int, int64, int64, int64, int64, error)

Dec 7, 2020

Changes in this version

+ const Filter

+ const Ip

+ const Range

+ const Undefined

+ func CatchPanic(component string)

+ func CopyFile(sourceSymLink, destinationFile string) (err error)

+ func ParseDuration(d string) (time.Duration, error)

type Event

+ func (e *Event) GetType() string

+ type RuntimeAlert struct

+ APIAlerts []models.Alert

+ Alert *models.Alert

+ BucketId string

+ Mapkey string

+ Reprocess bool

+ Sources map[string]models.Source

+ Whitelisted bool

+ type ScopeType struct

+ Filter string

+ RunTimeFilter *vm.Program

+ Scope string

Aug 24, 2020

Changes in this version

+ type ExprWhitelist struct

+ ExprDebugger *exprhelpers.ExprDebugger

+ Filter *vm.Program

Jul 17, 2020

Changes in this version

type SignalOccurence

+ Simulation bool

Jul 3, 2020

Changes in this version

type SignalOccurence

+ Whitelisted bool

Jun 19, 2020

Changes in this version

+ var LogOutput *lumberjack.Logger

Jun 10, 2020

Changes in this version

+ func Clone(a, b interface{}) error

Jun 2, 2020

Changes in this version

+ func ConfigureLogger(clog *log.Logger) error

+ func GetData(data []*DataSource, dataDir string) error

+ func SetDefaultLoggerConfig(cfgMode string, cfgFolder string, cfgLevel log.Level) error

+ type DataSet struct

+ Data []*DataSource

+ type DataSource struct

+ DestPath string

+ SourceURL string

+ Type string

May 15, 2020

Changes in this version

+ const LOG

+ const OVFLW

+ func IP2Int(ip net.IP) uint32

+ func Int2ip(nn uint32) net.IP

+ func LastAddress(n *net.IPNet) net.IP

+ type BanApplication struct

+ EndIp uint32

+ IpText string

+ MeasureExtra string

+ MeasureSource string

+ MeasureType string

+ Reason string

+ Scenario string

+ SignalOccurenceID uint

+ StartIp uint32

+ TargetAS int

+ TargetASName string

+ TargetCN string

+ Until time.Time

+ func OrderToApplications(ordr *BanOrder) ([]BanApplication, error)

+ type BanOrder struct

+ MeasureSource string

+ MeasureType string

+ Reason string

+ Scope string

+ TargetAS int

+ TargetASName string

+ TargetCountry string

+ TargetIP net.IP

+ TargetRange net.IPNet

+ TxtTarget string

+ Until time.Time

+ type Event struct

+ Enriched map[string]string

+ ExpectMode int

+ Line Line

+ MarshaledTime string

+ Meta map[string]string

+ Overflow SignalOccurence

+ Parsed map[string]string

+ Process bool

+ Stage string

+ StrTime string

+ Time time.Time

+ Type int

+ WhiteListReason string

+ Whitelisted bool

+ type EventSequence struct

+ Serialized string

+ SignalOccurenceID uint

+ Source Source

+ Source_AutonomousSystemNumber string

+ Source_AutonomousSystemOrganization string

+ Source_Country string

+ Source_ip string

+ Source_range string

+ Time time.Time

+ type ExtraField struct

+ Enriched string

+ ExpValue string

+ Meta string

+ Method string

+ Parsed string

+ RunTimeValue *vm.Program

+ TargetByName string

+ Value string

+ type GrokPattern struct

+ RegexpName string

+ RegexpValue string

+ RunTimeRegexp *grokky.Pattern

+ Statics []ExtraField

+ TargetField string

+ type Line struct

+ Labels map[string]string

+ Process bool

+ Raw string

+ Src string

+ Time time.Time

+ type Profile struct

+ ApiPush *bool

+ Filter string

+ OutputConfigs []map[string]string

+ Profile string

+ Remediation RemediationProfile

+ RunTimeFilter *vm.Program

+ type RemediationProfile struct

+ Apply bool

+ Ban bool

+ Captcha bool

+ Duration string

+ Slow bool

+ TimeDuration time.Duration

+ type SignalOccurence struct

+ Alert_message string

+ BanApplications []BanApplication

+ Bucket_id string

+ Capacity int

+ Dest_ip string

+ Events_count int

+ Events_sequence []EventSequence

+ Labels map[string]string

+ Leak_speed time.Duration

+ MapKey string

+ Reprocess bool

+ Scenario string

+ Source *Source

+ Source_AutonomousSystemNumber string

+ Source_AutonomousSystemOrganization string

+ Source_Country string

+ Source_Latitude float64

+ Source_Longitude float64

+ Source_ip string

+ Source_range string

+ Sources map[string]Source

+ Start_at time.Time

+ Stop_at time.Time

+ type Source struct

+ AutonomousSystemNumber string

+ AutonomousSystemOrganization string

+ Country string

+ Flags map[string]bool

+ Ip net.IP

+ Latitude float64

+ Longitude float64

+ Range net.IPNet

+ type Whitelist struct

+ B_Cidrs []*net.IPNet

+ B_Exprs []*vm.Program

+ B_Ips []net.IP

+ Cidrs []string

+ Exprs []string

+ Ips []string

+ Reason string