{%- extends "_layout.html" %} {%- import '_macros_site.html' as macros_site with context -%} {%- block content %} {%- set ads_limits = get_limit_counter() %} {{ macros_site.render_common_event_header(item, _("Event detail"), margin_below_note=True) }}
{{ _("ID") }}: | {{ item.get_id() }} |
---|---|
{{ _("Alternative identifiers") }}: | {{ ", ".join(item.get_jpath_values('AltNames')) }} |
{{ _("Description") }}: | {{ item.get_jpath_value("Description") }} |
{{ _("Note") }}: | {{ item.get_jpath_value("Note") }} |
{{ _("Traffic Light Protocol (TLP)") }}: | {{ item.get_tlp() }} |
{{ _("Confidence") }}: | {{ (item.get_jpath_value("Confidence") * 100) | round | int }} % |
{{ _("Categories") }}: | {{ macros_site.render_widget_csag_category(item.get_categories(), align_right = True, separate_dropdown = True) }} |
{{ _("Source severity") }}: | {%- if item.get_severity() %} {{ macros_site.render_widget_csag_severity([item.get_severity()], align_right = True) }} {%- else %} {{ _("-- unassigned --") }} {%- endif %} |
{{ _("Target severity") }}: | {%- if item.get_target_severity() %} {{ macros_site.render_widget_csag_severity([item.get_target_severity()], align_right = True) }} {%- else %} {{ _("-- unassigned --") }} {%- endif %} |
{{ _("Source class") }}: | {%- if item.get_class() %} {{ item.get_class() }} {{ macros_site.render_widget_csag_class([item.get_class()], align_right = True, separate_dropdown = True, without_label = True) }} {%- set event_class_obj = get_event_class(item.get_class()) -%} {%- if event_class_obj and event_class_obj.reference %} [documentation] {%- endif %} {%- else %} {{ _("-- unclassified --") }} {%- endif %} |
{{ _("Target class") }}: | {%- if item.get_target_class() %} {{ item.get_target_class() }} {{ macros_site.render_widget_csag_class([item.get_target_class()], align_right = True, separate_dropdown = True, without_label = True) }} {%- set event_class_obj = get_event_class(item.get_target_class()) -%} {%- if event_class_obj and event_class_obj.reference %} [documentation] {%- endif %} {%- else %} {{ _("-- unclassified --") }} {%- endif %} |
{{ _("Source groups") }}: | {{ macros_site.render_widget_csag_abuse(item.get_source_groups(), align_right = True, separate_dropdown = True) }} |
{{ _("Target groups") }}: | {{ macros_site.render_widget_csag_abuse(item.get_target_groups(), align_right = True, separate_dropdown = True) }} |
{{ _("Source countries") }}: | {%- for subitem in item.get_countries_src() %} {{ subitem | upper }} {{ get_country_flag(subitem) }} {% if not loop.last %} | {% endif %} {%- endfor %} |
{{ _("Source autonomous systems (ASNs)") }}: | {%- for subitem in item.get_asns_src() %} {{ subitem | upper }} {% if not loop.last %} | {% endif %} {%- endfor %} |
{{ _("References") }}: |
{%- for ref in tmpval %}
{{ macros_site.ref_to_html_link(ref) }} {%- endfor %} |
{{ get_icon("role-admin") }} {{ _("Source subclass") }}: | {{ item.get_subclass() }} | {{ get_icon("role-admin") }} {{ _("Target subclass") }}: | {{ item.get_target_subclass() }} | {%- endif %} {%- if item.is_shadow() %}
{{ get_icon("role-admin") }} {{ _("Shadow reporting") }} | {{ _("enabled") }} |
{{ get_icon("role-admin") }} {{ _("Shadow target-based reporting") }} | {{ _("enabled") }} |
{{ get_icon("role-admin") }} {{ _("Inspection errors") }} | {%- for subitem in tmpval %} {{ get_icon("alert-warning") }} {{ subitem }} {%- endfor %} |
{{ _("Detection time") }}: | {{ babel_format_datetime(item.get_detect_time()) }} ({{ macros_site.render_info_timeinterval(item.get_detect_time(), current_datetime_utc) }}) |
---|---|
{{ _("Creation time") }}: | {{ babel_format_datetime(tmpval) }} ({{ macros_site.render_info_timeinterval(tmpval, current_datetime_utc) }}) |
{{ _("Creation delay") }}: | {{ babel_format_timedelta(tmpval - item.get_detect_time()) }} |
{{ _("Event time") }}: | {{ babel_format_datetime(tmpval_a) }} ({{ macros_site.render_info_timeinterval(tmpval_a, current_datetime_utc) }}) |
{{ _("Cease time") }}: | {{ babel_format_datetime(tmpval_b) }} ({{ macros_site.render_info_timeinterval(tmpval_b, current_datetime_utc) }}) |
{{ _("Event duration") }}: | {{ babel_format_timedelta(tmpval_b - tmpval_a) }} ({{ (tmpval_b - tmpval_a) }}) |
{{ _("Aggregation window start time") }}: | {{ babel_format_datetime(tmpval_a) }} ({{ macros_site.render_info_timeinterval(tmpval_a, current_datetime_utc) }}) |
{{ _("Aggregation window end time") }}: | {{ babel_format_datetime(tmpval_b) }} ({{ macros_site.render_info_timeinterval(tmpval_b, current_datetime_utc) }}) |
{{ _("Aggregation window size") }}: | {{ babel_format_timedelta(tmpval_b - tmpval_a) }} ({{ (tmpval_b - tmpval_a) }}) |
{{ _("Storage time") }}: | {{ babel_format_datetime(item.get_storage_time()) }} ({{ macros_site.render_info_timeinterval(item.get_storage_time(), current_datetime_utc) }}) |
{{ _("Storage delay") }}: | {{ babel_format_timedelta(item.get_storage_time() - item.get_detect_time()) }} |
{{ _("Connection count") }}: | {{ item.get_jpath_value("ConnCount") }} |
{{ _("Flow count") }}: | {{ item.get_jpath_value("FlowCount") }} |
{{ _("Dropped flow count") }}: | {{ item.get_jpath_value("FlowCountDropped") }} |
{{ _("Packet count") }}: | {{ item.get_jpath_value("PacketCount") }} |
{{ _("Dropped packet count") }}: | {{ item.get_jpath_value("PacketCountDropped") }} |
{{ _("Byte count") }}: | {{ item.get_jpath_value("ByteCount") }} |
{{ _("Dropped byte count") }}: | {{ item.get_jpath_value("ByteCountDropped") }} |
{{ _("Average packet size") }}: | {{ item.get_jpath_value("AvgPacketSize") }} |
{{ _("Warnings") }}: | {%- if subitem.get('Anonymised', None) -%} {{- get_icon("alert-warning") }} {{ _("Anonymised") -}} {%- endif %} {%- if subitem.get('Spoofed', None) -%} {{- get_icon("alert-warning") }} {{ _("Spoofed") -}} {%- endif %} {%- if subitem.get('Imprecise', None) -%} {{- get_icon("alert-warning") }} {{ _("Imprecise") -}} {%- endif %} |
---|---|
{{ _("Hostname") }}: |
{%- for hostname in subitem['Hostname'] %}
{%- if loop.index0 < search_widget_item_limit -%}
{{ macros_site.render_widget_csag_hostname([hostname],
separate_dropdown = True) }}
{%- if ads_limits.count_and_check('{}.{}'.format(node_type[0], 'Hostname')) %}
{%- elif loop.index0 == search_widget_item_limit %}
({{ _('%(count)s more', count = loop.length - loop.index0) }})
{%- endif %}
{%- endfor %}
{{ get_icon("action-reload") }}
{%- endif %}
|
{{ _("IP4") }}: |
{%- for itemaddr in subitem['IP4'] %}
{%- if loop.index0 < search_widget_item_limit -%}
{{ macros_site.render_widget_csag_address([itemaddr],
separate_dropdown = True) }}
{%- if ads_limits.count_and_check('{}.{}'.format(node_type[0], 'IP4')) %}
{%- elif loop.index0 == search_widget_item_limit %}
({{ _('%(count)s more', count = loop.length - loop.index0) }})
{%- endif %}
{%- endfor %}
{{ get_icon("action-reload") }}
{%- endif %}
|
{{ _("IP6") }}: |
{%- for itemaddr in subitem['IP6'] %}
{%- if loop.index0 < search_widget_item_limit -%}
{{ macros_site.render_widget_csag_address([itemaddr],
separate_dropdown = True) }}
{%- if ads_limits.count_and_check('{}.{}'.format(node_type[0], 'IP6')) %}
{%- elif loop.index0 == search_widget_item_limit %}
({{ _('%(count)s more', count = loop.length - loop.index0) }})
{%- endif %}
{%- endfor %}
{{ get_icon("action-reload") }}
{%- endif %}
|
{{ _("BitMask") }}: | {%- for mask in subitem['BitMask'] %} {{ mask }} {%- endfor %} |
{{ _("MAC") }}: |
{%- for asn in subitem['MAC'] %}
|
{{ _("Service name") }}: | {{ subitem['ServiceName'] }} |
{{ _("Service version") }}: | {{ subitem['ServiceVersion'] }} |
{{ _("Port") }}: |
{{ macros_site.render_widget_csag_port(subitem['Port'],
separate_dropdown = True,
item_limit = search_widget_item_limit) }}
|
{{ _("Proto") }}: |
{{ macros_site.render_widget_csag_protocol(subitem['Proto'],
separate_dropdown = True,
item_limit = search_widget_item_limit) }}
|
{{ _("E-mail") }}: | {%- for mail in subitem['Email'] %} {{ mail }} {%- endfor %} |
{{ _("Interface") }}: | {%- for interface in subitem['Interface'] %} {{ interface }} {%- endfor %} |
{{ _("Router") }}: | {%- for router in subitem['Router'] %} {{ router }} {%- endfor %} |
{{ _("Netname") }}: | {%- for net in subitem['Netname'] %} {{ net }} {%- endfor %} |
{{ _("Type") }}: |
{{ macros_site.render_widget_csag_hosttype(subitem['Type'],
separate_dropdown = True) }}
|
{{ _("ASN") }}: | {%- for asn in subitem['ASN'] %} {{ asn | upper }} {% if not loop.last %} | {% endif %} {%- endfor %} |
{{ _("ClockSkew") }}: | {{ subitem['ClockSkew'] }} s |
{{ _("X509 expired time") }}: | {%- set expired_time = parse_datetime(subitem['X509ExpiredTime']) -%} {{ babel_format_datetime(expired_time) }} ({{ macros_site.render_info_timeinterval(expired_time, get_datetime_utc(aware=True)) }}) |
{{ _("InFlowCount") }}: | {{ subitem['InFlowCount'] }} |
{{ _("InPacketCount") }}: | {{ subitem['InPacketCount'] or subitem['InPacketsCount'] }} |
{{ _("InByteCount") }}: | {{ subitem['InByteCount'] }} |
{{ _("OutFlowCount") }}: | {{ subitem['OutFlowCount'] }} |
{{ _("OutPacketCount") }}: | {{ subitem['OutPacketCount'] or subitem['OutPacketsCount'] }} |
{{ _("OutByteCount") }}: | {{ subitem['OutByteCount'] }} |
{%- if type == 'URL' %} {{ _("URL") }}: {%- else %} {{ _("References") }}: {%- endif %} |
{%- for ref in tmpval %}
{{ macros_site.ref_to_html_link(ref) }} {%- endfor %} |
{{ _("Note") }}: | {{ subitem['Note'] }} |
{{ _("Name") }}: | {% if loop.first %} {{ macros_site.render_widget_csag_detector([subitem['Name']], separate_dropdown = True) }} {% else %} {{ subitem['Name'] }}{%- endif %} |
---|---|
{{ _("Software") }}: | {{ subitem['SW'] | join(", ") }} |
{{ _("Type") }}: | {{ macros_site.render_widget_csag_detectortype(subitem['Type'], separate_dropdown = True) }} |
{{ _("Aggregation window") }}: | {{ subitem['AggrWin'] }} |
{{ _("Note") }}: | {{ subitem['Note'] }} |
{{ _("Attachment") }} {{ loop.index }} {%- if 'FileName' in subitem %} ({{ ",".join(subitem['FileName']) }}) {%- endif %}
{%- if attachment_content %} {{ get_icon("action-download") }} {{ _("Download") }} {%- endif %}{{ _("Note") }}: {{ subitem['Note'] }}
{%- endif %} {%- if 'Type' in subitem %}{{ _("Type") }}: {{ ", ".join(subitem['Type']) }}
{%- endif %} {%- for type in ['ExternalURI', 'Ref'] %} {%- set tmpval = subitem.get(type, None) %} {%- if subitem[type] %} {%- if type == 'ExternalURI' %} {{ _("External URI") }}: {%- else %} {{ _("References") }}: {%- endif %} {%- for ref in subitem[type] %} {{ macros_site.ref_to_html_link(ref) }} {%- endfor %} {%- endif %} {%- endfor %} {%- if attachment_content %} {%- set content = attachment_content[0] %} {%- set attachment_extension = attachment_content[1] %} {%- if attachment_extension in ['tsv', 'csv'] %} {%- if parse_csv(content, '\t' if attachment_extension == 'tsv' else ',') %}{{ element }} | {%- endfor %}
{{ content }}{%- endif %} {%- elif attachment_extension == 'json' %}
{{ content }}{%- endif %} {%- elif item.get_attachment(loop.index) and 'Content' not in item.get_attachment(loop.index) -%}
{{ _("Content type") }}: {{ subitem['ContentType'] }}
{%- endif %} {%- if 'ContentEncoding' in subitem %}{{ _("Content encoding") }}: {{ subitem['ContentEncoding'] }}
{%- endif %} {%- if 'ContentCharset' in subitem %}{{ _("Content charset") }}: {{ subitem['ContentCharset'] }}
{%- endif %} {%- if 'Hash' in subitem %}{{ _("Hash") }}: {% for hash in subitem['Hash'] -%} {%- set hash_without_sha = hash if ':' not in hash else hash.split(':')[1] -%} {{ hash }} (VirusTotal) {%- if not loop.last %}, {% endif %} {%- endfor -%}
{%- endif %} {%- if 'Size' in subitem %}{{ _("Size") }}: {{ subitem['Size'] }}
{%- endif %}