CyberMind-FR
7ff9ee3805
Correlation Library (correlation-lib.sh): - IP reputation tracking with configurable decay - Full context gathering from MITM, DPI, WAF streams - CrowdSec decision checking and notification - Correlation entry builder with rich context Enhanced Correlator (dpi-correlator v2): - Watches WAF alerts, CrowdSec decisions, DPI flows - Auto-ban for high-reputation IPs (threshold: 80) - Notification queue for high-severity threats - CLI: correlate, reputation, context, search, stats LuCI Timeline View: - Correlation timeline with colored event cards - IP context modal showing MITM requests + WAF alerts - Quick ban button with CrowdSec integration - Search by IP functionality - Stats: total, high-threat, banned, unique IPs RPCD Methods (8 new): - get_correlation_stats, get_ip_context, get_ip_reputation - get_timeline, search_correlations, ban_ip, set_auto_ban UCI Config: auto_ban, auto_ban_threshold, notifications Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
31 lines
537 B
JSON
31 lines
537 B
JSON
{
|
|
"admin/secubox/dpi-dual": {
|
|
"title": "DPI Dual-Stream",
|
|
"order": 45,
|
|
"action": {
|
|
"type": "firstchildview",
|
|
"recurse": true
|
|
},
|
|
"depends": {
|
|
"acl": ["luci-app-dpi-dual"],
|
|
"uci": { "dpi-dual": true }
|
|
}
|
|
},
|
|
"admin/secubox/dpi-dual/overview": {
|
|
"title": "Overview",
|
|
"order": 1,
|
|
"action": {
|
|
"type": "view",
|
|
"path": "dpi-dual/overview"
|
|
}
|
|
},
|
|
"admin/secubox/dpi-dual/timeline": {
|
|
"title": "Correlation Timeline",
|
|
"order": 2,
|
|
"action": {
|
|
"type": "view",
|
|
"path": "dpi-dual/timeline"
|
|
}
|
|
}
|
|
}
|