xcorrelator

Documentation

Index

• Variables
• func CheckIntelIP(ip string, connID uint64) (found bool, results []intel.Result)
• func CheckVulnIPPort(ip string, port int) (found bool, results []vuln.Result)
• func InitIntel(confDir string, cacheDuration int) error
• func InitVuln(confDir string, cacheDuration int) error

Variables

var (
	// IntelEnabled mark whether intel lookup is enabled
	IntelEnabled bool
)

var (
	// VulnEnabled mark whether vuln lookup is enabled
	VulnEnabled bool
)

Functions

func CheckIntelIP

func CheckIntelIP(ip string, connID uint64) (found bool, results []intel.Result)

CheckIntelIP lookup ip on threat intel references

func CheckVulnIPPort

func CheckVulnIPPort(ip string, port int) (found bool, results []vuln.Result)

CheckVulnIPPort lookup ip-port pair on vulnerability scan result references

func InitIntel

func InitIntel(confDir string, cacheDuration int) error

InitIntel initialize threat intel cross-correlation

func InitVuln

func InitVuln(confDir string, cacheDuration int) error

InitVuln initialize vulnerability scan result cross-correlation