CyberMind-FR
7ff9ee3805
Correlation Library (correlation-lib.sh): - IP reputation tracking with configurable decay - Full context gathering from MITM, DPI, WAF streams - CrowdSec decision checking and notification - Correlation entry builder with rich context Enhanced Correlator (dpi-correlator v2): - Watches WAF alerts, CrowdSec decisions, DPI flows - Auto-ban for high-reputation IPs (threshold: 80) - Notification queue for high-severity threats - CLI: correlate, reputation, context, search, stats LuCI Timeline View: - Correlation timeline with colored event cards - IP context modal showing MITM requests + WAF alerts - Quick ban button with CrowdSec integration - Search by IP functionality - Stats: total, high-threat, banned, unique IPs RPCD Methods (8 new): - get_correlation_stats, get_ip_context, get_ip_reputation - get_timeline, search_correlations, ban_ip, set_auto_ban UCI Config: auto_ban, auto_ban_threshold, notifications Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
38 lines
640 B
JSON
38 lines
640 B
JSON
{
|
|
"luci-app-dpi-dual": {
|
|
"description": "Grant access to DPI Dual-Stream dashboard",
|
|
"read": {
|
|
"ubus": {
|
|
"luci.dpi-dual": [
|
|
"status",
|
|
"get_flows",
|
|
"get_buffer",
|
|
"get_threats",
|
|
"get_correlation",
|
|
"get_correlation_stats",
|
|
"get_ip_context",
|
|
"get_ip_reputation",
|
|
"get_timeline",
|
|
"get_mirror_status",
|
|
"search_correlations"
|
|
]
|
|
},
|
|
"uci": ["dpi-dual"]
|
|
},
|
|
"write": {
|
|
"ubus": {
|
|
"luci.dpi-dual": [
|
|
"start",
|
|
"stop",
|
|
"restart",
|
|
"replay_request",
|
|
"correlate_ip",
|
|
"ban_ip",
|
|
"set_auto_ban"
|
|
]
|
|
},
|
|
"uci": ["dpi-dual"]
|
|
}
|
|
}
|
|
}
|