mirror of
https://github.com/netbirdio/plugins.git
synced 2026-05-22 18:44:07 -07:00
64 lines
1.2 KiB
Plaintext
64 lines
1.2 KiB
Plaintext
Maltrail is a malicious traffic detection system, utilizing publicly
|
|
available (black)lists containing malicious and/or generally suspicious
|
|
trails, along with static trails compiled from various AV reports and
|
|
custom user defined lists, where trail can be anything from domain name,
|
|
URL, IP address or HTTP User-Agent header value. Also, it uses advanced
|
|
heuristic mechanisms that can help in discovery of unknown threats.
|
|
|
|
WWW: https://github.com/stamparm/maltrail
|
|
|
|
|
|
Changelog
|
|
---------
|
|
|
|
1.10
|
|
|
|
* Add CHECK_HOST_DOMAINS option
|
|
* Fix CUSTOM_TRAILS_DIR (contributed by codiflow)
|
|
|
|
1.9
|
|
|
|
* Remove MFS support for /var/log/
|
|
|
|
1.8
|
|
|
|
* Add firewall alias "BlocklistMaltrail" that points to the built-in ip block list
|
|
|
|
1.7
|
|
|
|
* Allow sensor cron restart
|
|
* Add syslog export
|
|
|
|
1.6
|
|
|
|
* Allow to set capture buffer size
|
|
|
|
1.5
|
|
|
|
* Change whitelisting format (contributed by jkellerer)
|
|
* Add alienvault to disabled feeds
|
|
|
|
1.4
|
|
|
|
* Switch Python to version 3
|
|
|
|
1.3
|
|
|
|
* Fix a typo in model labeling preventing to use remote server logging
|
|
|
|
1.2
|
|
|
|
* Fix a typo in template generation
|
|
|
|
1.1
|
|
|
|
* Add a note in General tab
|
|
* Add whitelisting support
|
|
|
|
1.0
|
|
|
|
* Server support
|
|
* Sensor support
|
|
* Allow to set listen interface
|
|
* Allow to set admin password
|