CyberMind-FR
f2dfb5c144
Network Anomaly Agent (secubox-network-anomaly): - 5 detection modules: bandwidth, connection flood, port scan, DNS, protocol - EMA-based baseline comparison - LocalAI integration for threat assessment - network-anomalyctl CLI LocalRecall Memory System (secubox-localrecall): - Persistent memory for AI agents - Categories: threats, decisions, patterns, configs, conversations - EMA-based importance scoring - LocalAI integration for summarization - localrecallctl CLI with 13 commands AI Insights Dashboard (luci-app-ai-insights): - Unified view across all AI agents - Security posture scoring (0-100) - Agent status grid with alert counts - Aggregated alerts from all agents - Run All Agents and AI Analysis actions LuCI Dashboards: - luci-app-network-anomaly with real-time stats - luci-app-localrecall with memory management Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
29 lines
758 B
Plaintext
29 lines
758 B
Plaintext
config anomaly 'main'
|
|
option enabled '1'
|
|
option interval '60'
|
|
option localai_url 'http://127.0.0.1:8091'
|
|
option localai_model 'tinyllama-1.1b-chat-v1.0.Q4_K_M'
|
|
option auto_block '0'
|
|
option min_confidence '75'
|
|
option baseline_hours '24'
|
|
|
|
config thresholds 'thresholds'
|
|
option bandwidth_spike_percent '200'
|
|
option new_connections_per_min '50'
|
|
option unique_ports_per_host '20'
|
|
option dns_queries_per_min '100'
|
|
option failed_connections_percent '30'
|
|
|
|
config detection 'detection'
|
|
option bandwidth_anomaly '1'
|
|
option connection_flood '1'
|
|
option port_scan '1'
|
|
option dns_anomaly '1'
|
|
option protocol_anomaly '1'
|
|
option geo_anomaly '1'
|
|
|
|
config alerting 'alerting'
|
|
option crowdsec_integration '1'
|
|
option log_alerts '1'
|
|
option mesh_broadcast '0'
|