Why Go
- Case Studies
  
  Common problems companies solve with Go
- Use Cases
  
  Stories about how and why companies use Go
- Security Policy
  
  How Go can help keep you secure by default
Learn
Docs
- Effective Go
  
  Tips for writing clear, performant, and idiomatic Go code
- Go User Manual
  
  A complete introduction to building software with Go
- Standard library
  
  Reference documentation for Go's standard library
- Release Notes
  
  Learn what's new in each Go release
Packages
Community
- Recorded Talks
  
  Videos from prior events
- Meetups
  
  Meet other local Go developers
- Conferences
  
  Learn and network with Go developers from around the world
- Go blog
  
  The Go project's official blog.
- Go project
  
  Get help and stay informed from Go
- Get connected

config

package

Go to main page

Versions in this module

v5

v5.0.8

Aug 14, 2024

v5.0.7

Aug 1, 2024

v5.0.6

Jul 17, 2024

Changes in this version

type Config

+ func (c *Config) UnmarshalJSON(bytes []byte) error

v5.0.5

Jul 17, 2024

Changes in this version

+ func GetMandatoryNeverIncludeSubnets() []string

type Config

+ func GetDefaultConfig() (Config, error)

+ func (cfg *Config) ParseFilter() error

+ func (cfg *Config) ParseImpactCategoryScores() error

v5.0.4

Jul 10, 2024

v5.0.3

Jul 3, 2024

v5.0.2

Jul 3, 2024

Changes in this version

+ const CriticalThreat

+ const DefaultConfigPath

+ const HIGH_CATEGORY_SCORE

+ const HighThreat

+ const LOW_CATEGORY_SCORE

+ const LowThreat

+ const MEDIUM_CATEGORY_SCORE

+ const MediumThreat

+ const NONE_CATEGORY_SCORE

+ const NoneThreat

+ var Version string

+ func GetScoreFromImpactCategory(category ImpactCategory) (float32, error)

+ func UpdateConfig(cfg *Config) error

+ func ValidateImpactCategory(value ImpactCategory) error

+ type Beacon struct

+ DsWeight float64

+ DurIdealNumberOfConsistentHours int

+ DurMinHours int

+ DurWeight float64

+ HistBimodalMinHours int

+ HistBimodalOutlierRemoval int

+ HistModeSensitivity float64

+ HistWeight float64

+ ScoreThresholds ScoreThresholds

+ TsWeight float64

+ UniqueConnectionThreshold int64

+ type Config struct

+ BatchSize int

+ DBConnection string

+ Filter Filter

+ HTTPExtensionsFilePath string

+ LogLevel int

+ LoggingEnabled bool

+ MaxQueryExecutionTime int

+ Modifiers Modifiers

+ MonthsToKeepHistoricalFirstSeen int

+ Scoring Scoring

+ ThreatIntel ThreatIntel

+ UpdateCheckEnabled bool

+ func GetConfig() (*Config, error)

+ func LoadConfig(afs afero.Fs, path string) (*Config, error)

+ func ReadFileConfig(afs afero.Fs, path string) (Config, error)

+ func (cfg *Config) ResetConfig() error

+ func (cfg *Config) Validate() error

+ type Filter struct

+ AlwaysIncludedDomains []string

+ AlwaysIncludedSubnets []*net.IPNet

+ AlwaysIncludedSubnetsJSON []string

+ FilterExternalToInternal bool

+ InternalSubnets []*net.IPNet

+ InternalSubnetsJSON []string

+ NeverIncludedDomains []string

+ NeverIncludedSubnets []*net.IPNet

+ NeverIncludedSubnetsJSON []string

+ func (fs *Filter) CheckIfInternal(host net.IP) bool

+ func (fs *Filter) FilterConnPair(srcIP net.IP, dstIP net.IP) bool

+ func (fs *Filter) FilterConnPairForHTTP(srcIP net.IP, dstIP net.IP) bool

+ func (fs *Filter) FilterDNSPair(srcIP net.IP, dstIP net.IP) bool

+ func (fs *Filter) FilterDomain(domain string) bool

+ func (fs *Filter) FilterSNIPair(srcIP net.IP) bool

+ func (fs *Filter) FilterSingleIP(ip net.IP) bool

+ type ImpactCategory string

+ func GetImpactCategoryFromScore(score float32) ImpactCategory

+ type Modifiers struct

+ C2OverDNSDirectConnScoreIncrease float32

+ FirstSeenDecreaseThreshold float32

+ FirstSeenIncreaseThreshold float32

+ FirstSeenScoreDecrease float32

+ FirstSeenScoreIncrease float32

+ MIMETypeMismatchScoreIncrease float32

+ MissingHostCountScoreIncrease float32

+ PrevalenceDecreaseThreshold float32

+ PrevalenceIncreaseThreshold float32

+ PrevalenceScoreDecrease float32

+ PrevalenceScoreIncrease float32

+ RareSignatureScoreIncrease float32

+ ThreatIntelDataSizeThreshold int64

+ ThreatIntelScoreIncrease float32

+ type ScoreImpact struct

+ Category ImpactCategory

+ Score float32

+ type ScoreThresholds struct

+ Base int

+ High int

+ Low int

+ Med int

+ type Scoring struct

+ Beacon Beacon

+ C2ScoreThresholds ScoreThresholds

+ C2SubdomainThreshold int

+ LongConnectionMinimumDuration int

+ LongConnectionScoreThresholds ScoreThresholds

+ StrobeImpact ScoreImpact

+ ThreatIntelImpact ScoreImpact

+ type ThreatIntel struct

+ CustomFeedsDirectory string

+ OnlineFeeds []string

Other modules containing this package

github.com/activecm/rita