From 7f161a9e091e959c50da39086acf60dab2cad36f Mon Sep 17 00:00:00 2001 From: GitLab CI Date: Wed, 24 Jul 2024 08:52:40 +0000 Subject: [PATCH 1/6] netflow documentation updated by GitLab CI --- instruments/netflow/index.html | 14 ++++++++------ 1 file changed, 8 insertions(+), 6 deletions(-) diff --git a/instruments/netflow/index.html b/instruments/netflow/index.html index 4d01f49c..c51a3f28 100644 --- a/instruments/netflow/index.html +++ b/instruments/netflow/index.html @@ -7,15 +7,17 @@

- Netflow can be used to collect NetFlow information from network traffic. For - introduction to NetFlow, see + Netflow is used to create NetFlow information from listened network traffic. + For introduction to NetFlow, see Wikipedia.

- The Instrument will listen traffic on mirror-bridge interface and store the - traffic flows (as identified by source and destination IP addresses and - protocol -specific ports) in NetFlow records. These NetFlow records can then - be downloaded from the Instrument using the provided HTTP API. + The Instrument will listen captured traffic on mirror-bridge interface and + store information about observed traffic flows (as identified by source and + destination IP addresses and protocol -specific ports) in NetFlow records. + These NetFlow records can then be downloaded from the Instrument using the + provided HTTP API. The Instrument also provides UI which can be used to view + stored NetFlow records.

NetFlow records are stored in NetFlow format version 9 and they are stored in From 382a06f7b30bf6c011d10ae1477cad405df9bca7 Mon Sep 17 00:00:00 2001 From: GitLab CI Date: Fri, 15 Nov 2024 08:50:20 +0000 Subject: [PATCH 2/6] rmgr documentation updated by GitLab CI --- _data/instruments/rmgr.yaml | 11 +++++++++++ instruments/rmgr/index.html | 2 +- 2 files changed, 12 insertions(+), 1 deletion(-) diff --git a/_data/instruments/rmgr.yaml b/_data/instruments/rmgr.yaml index 946e7fa0..fe7e1fc4 100644 --- a/_data/instruments/rmgr.yaml +++ b/_data/instruments/rmgr.yaml @@ -34,6 +34,9 @@ produced_event_types: - match: instruments.rmgr.suricata_ruleset_sent type: exact title: New Suricata ruleset was sent + - match: instruments.rmgr.download_processing_status + type: exact + title: Ruleset or IOC processing status update relations: - description: Rule Manager needs at least one Suricata IDS instrument to function. It @@ -51,3 +54,11 @@ relations: - find - direct_message required: false + - description: + A Downloader instrument must be present for external rulesources and ioc + feeds to be updated. A health warning will be raised if downloads are + scheduled but no Downloader is available. + instrument_name: Downloader + instrument_type: downloader + permissions: + - find diff --git a/instruments/rmgr/index.html b/instruments/rmgr/index.html index 18d4a5e3..268fd418 100644 --- a/instruments/rmgr/index.html +++ b/instruments/rmgr/index.html @@ -65,7 +65,7 @@

Properties

Related Instruments - Zeek + Zeek, Downloader Data retention From ad40c866ee431f41a9f8a04d02cb64aae990fc4c Mon Sep 17 00:00:00 2001 From: GitLab CI Date: Thu, 23 Jan 2025 09:20:24 +0000 Subject: [PATCH 3/6] assetguard documentation updated by GitLab CI --- _data/instruments/assetguard.yaml | 8 ++++---- instruments/assetguard/index.html | 4 ++-- 2 files changed, 6 insertions(+), 6 deletions(-) diff --git a/_data/instruments/assetguard.yaml b/_data/instruments/assetguard.yaml index 5856a113..2f998ba8 100644 --- a/_data/instruments/assetguard.yaml +++ b/_data/instruments/assetguard.yaml @@ -1,7 +1,7 @@ --- -name: Asset Guard +name: AssetGuard developer: SensorFleet Oy -title: Asset Guard Instrument +title: AssetGuard Instrument categories: - Integrity Monitoring - Asset Tracking @@ -11,7 +11,7 @@ description: has_ui: true public: true data_retention_desc: - The Asset Guard Instrument retains the collected information until the + The AssetGuard Instrument retains the collected information until the Instrument is removed. performance_desc: Does not generate significant CPU or IO load network_access_type: passive @@ -22,7 +22,7 @@ required_interfaces: type: mirror-bridge relations: - description: - Asset Guard needs to find AssetProbe Instruments in order to receive their + AssetGuard needs to find AssetProbe Instruments in order to receive their events instrument_name: AssetProbe instrument_type: assetprobe diff --git a/instruments/assetguard/index.html b/instruments/assetguard/index.html index 853d888e..00633580 100644 --- a/instruments/assetguard/index.html +++ b/instruments/assetguard/index.html @@ -1,6 +1,6 @@ --- layout: datasheet -title: Asset Guard Instrument +title: AssetGuard Instrument description: Automated inventory of the network's assets and alerts about unexpected assets entering the network. --- @@ -61,7 +61,7 @@

Properties

Data retention - The Asset Guard Instrument retains the collected information until the + The AssetGuard Instrument retains the collected information until the Instrument is removed. From 6e8336998a20cc3cb72b0d16b4a12c40fa7ece3d Mon Sep 17 00:00:00 2001 From: GitLab CI Date: Mon, 5 May 2025 08:21:45 +0000 Subject: [PATCH 4/6] assetguard documentation updated by GitLab CI --- _data/instruments/assetguard.yaml | 3 +++ 1 file changed, 3 insertions(+) diff --git a/_data/instruments/assetguard.yaml b/_data/instruments/assetguard.yaml index 2f998ba8..50c6d3c9 100644 --- a/_data/instruments/assetguard.yaml +++ b/_data/instruments/assetguard.yaml @@ -38,3 +38,6 @@ produced_event_types: - match: instruments.assetguard.asset.moved type: exact title: Asset moved alert + - match: instruments.assetguard.asset.updated + type: exact + title: Asset updated From 3c020180933c46bed033cd07cd5ad29e4710d1ea Mon Sep 17 00:00:00 2001 From: GitLab CI Date: Fri, 9 May 2025 08:54:13 +0000 Subject: [PATCH 5/6] assetguard documentation updated by GitLab CI --- _data/instruments/assetguard.yaml | 3 +++ 1 file changed, 3 insertions(+) diff --git a/_data/instruments/assetguard.yaml b/_data/instruments/assetguard.yaml index 50c6d3c9..21e26223 100644 --- a/_data/instruments/assetguard.yaml +++ b/_data/instruments/assetguard.yaml @@ -41,3 +41,6 @@ produced_event_types: - match: instruments.assetguard.asset.updated type: exact title: Asset updated + - match: instruments.assetguard.assets.details + type: exact + title: All assets and their details From 3aa92f42df043598b6380d5d4c9522f052aa0e0f Mon Sep 17 00:00:00 2001 From: GitLab CI Date: Tue, 22 Jul 2025 14:53:28 +0000 Subject: [PATCH 6/6] logforwarder documentation updated by GitLab CI --- _data/instruments/logforwarder.yaml | 3 +++ 1 file changed, 3 insertions(+) diff --git a/_data/instruments/logforwarder.yaml b/_data/instruments/logforwarder.yaml index 47df3e05..280c39ba 100644 --- a/_data/instruments/logforwarder.yaml +++ b/_data/instruments/logforwarder.yaml @@ -28,6 +28,9 @@ produced_event_types: - match: instruments.logforwarder.stats type: exact title: Logforwarder statistics event + - match: instruments.logforwarder.input_ev. + type: prefix + title: Events from the input event pipeline network_access_type: active required_interfaces: - type: any