Skip to content

Issues: stratosphereips/StratosphereLinuxIPS

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

292 Open 383 Closed
292 Open 383 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Assignee
Filter by who’s assigned
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Issues list

Alert GRE scan when a "Tunnel:discover" action is found
#1241 opened Feb 12, 2025 by AlyaGomaa
Improve connection to unknown port threat level
#1239 opened Feb 11, 2025 by AlyaGomaa
Change the GRE tunnel evidence threat level to “low” instead of “info”
#1238 opened Feb 11, 2025 by AlyaGomaa
Improve how slips detects DoH
#1237 opened Feb 11, 2025 by AlyaGomaa
4 tasks
whitelist the SNI and DNS of an IP if the IP is whitelisted
#1236 opened Feb 11, 2025 by AlyaGomaa
change the descrption of malicious flows by ML to "Flow with malicious characteristics by ML"
#1235 opened Feb 11, 2025 by AlyaGomaa
whitelist port 67 from "connection to private IPs evidence" and document it
#1234 opened Feb 11, 2025 by AlyaGomaa
Problem getting the percentage of analyzed flows correctly
#1229 opened Feb 10, 2025 by AlyaGomaa
Check if this is a FP "non-http established conn to port 80"
#1228 opened Feb 10, 2025 by AlyaGomaa
1
Check this trust model for improving the current one gsoc2023-performance GSoC 2023 Slips Performance Improvement
#1226 opened Feb 10, 2025 by eldraco Improve local P2P
@eldraco
Keep track of the PIDs of every opened thread in redis for easier debugging.
#1222 opened Feb 5, 2025 by AlyaGomaa
1
Rename whitelist_path to local_Whitelist_path and add 2 parameter for enabling/dsabling the online and the local ones
#1220 opened Feb 4, 2025 by AlyaGomaa
Whitelist digicert.com by default
#1219 opened Feb 4, 2025 by AlyaGomaa
We should do the same thing we did with “non ssl port 443” with “non http port 80” wait 5 mins for another recognized “http” flow to arrive
#1218 opened Feb 4, 2025 by AlyaGomaa
Now that tranco list is fixed and working, evidence like this one is whitelisted/suppressed
#1217 opened Feb 4, 2025 by AlyaGomaa
Problem exporting labeled flows
#1216 opened Feb 3, 2025 by AlyaGomaa
update_period parameter for riskiq is generic, use riskiq_update_period instead.
#1215 opened Feb 2, 2025 by AlyaGomaa
SQLite database is still locked in some inserts and Slips fails Bug Difficulty: Advanced Advanced python required
#1213 opened Feb 1, 2025 by eldraco
@AlyaGomaa
Long connections do not ignore broadcast Bug Difficulty: Beginners Stuff that you can do with skills for starters
#1212 opened Feb 1, 2025 by eldraco
@AlyaGomaa
Why do we have flush_db in the code and deltePrevDB in the config file? the first is overriding the second one. and we ALWAYS delete the prev db when Slips starts
#1206 opened Jan 31, 2025 by AlyaGomaa
use the entire evidence desctiption when checkinf for specific evidence in integration tests.
#1198 opened Jan 29, 2025 by AlyaGomaa
cps-collected-iocs.intel TI feed has one of microsoft IPs
#1194 opened Jan 29, 2025 by AlyaGomaa
decrease the number of loaded ti files when slips deletes unused TI files
#1193 opened Jan 28, 2025 by AlyaGomaa
Speedup get_all_contacted_ips_in_profileid_twid()
#1192 opened Jan 28, 2025 by AlyaGomaa
1
no need to download the TI files to disk then read them, instead use them directly.
#1191 opened Jan 28, 2025 by AlyaGomaa
ProTip! Find all open issues with in progress development work with linked:pr.