nanChen
16b73dffee
2、适配南网达梦数据库安全版SQL语句Group by 不支持自定义函数 3、达梦数据库驱动改为达梦提供的指定版本 4、修改syslog-consumer模块yaml 文件kafka 变量名称 5、修改访问日志告警表新增4个字段，完善异常行为详情页面显示字段
82 lines
2.4 KiB
Java
82 lines
2.4 KiB
Java
package com.common.entity;
|
|
|
|
|
|
import lombok.Builder;
|
|
import lombok.Data;
|
|
|
|
import java.time.LocalDateTime;
|
|
|
|
@Data
|
|
@Builder
|
|
public class AlarmVisit {
|
|
private String id;
|
|
private LocalDateTime createdAt;
|
|
private String alarmName;
|
|
private String alarmLevel;
|
|
private String alarmType;
|
|
private String alarmMajorType;
|
|
private String alarmMinorType;
|
|
private Integer alarmAreaId;
|
|
private String[] attackIp;
|
|
private String[] victimIp;
|
|
private String[] victimWebUrl;
|
|
private Integer[] attackChainPhase;
|
|
private Integer[] deviceId;
|
|
private String[] tag;
|
|
private String comment;
|
|
private String[] originLogIds;
|
|
private String queryId;
|
|
private Integer judgedState;
|
|
private Integer disposedState;
|
|
private String dispositionAdvice;
|
|
private Integer attackResult;
|
|
private Integer fall;
|
|
private byte[] payload;
|
|
private Integer[] operateEvent;
|
|
private Integer[] attackPort;
|
|
private Integer[] victimPort;
|
|
private String attackMethod;
|
|
private String businessExt;
|
|
private LocalDateTime logStartAt;
|
|
private LocalDateTime logEndAt;
|
|
private String httpStatus;
|
|
private String dnsInfo;
|
|
private String accountInfo;
|
|
private String attackerInfo;
|
|
private String victimInfo;
|
|
private String suspiciousAction;
|
|
private String vulnInfo;
|
|
private String weakPwd;
|
|
private String complianceBaseline;
|
|
private String fileInfo;
|
|
private String fileTags;
|
|
private String endpointInfo;
|
|
private String endpointProtection;
|
|
private String originInfo;
|
|
private String protocolInfo;
|
|
private String emailInfo;
|
|
private String sensitiveData;
|
|
private Integer hitIntelligence;
|
|
private String windowTime;
|
|
private LocalDateTime updatedAt;
|
|
private String engineType;
|
|
private String attackIpPic;
|
|
private String victimIpPic;
|
|
private LocalDateTime operationAt;
|
|
private String attackDirection;
|
|
private LocalDateTime etlTime;
|
|
private Integer logCount;
|
|
private Integer isAssetHit;
|
|
private Boolean focused;
|
|
private Boolean baseFocused;
|
|
private Boolean isUpdated;
|
|
private int alarmSource;
|
|
private String[] httpReqHeader;
|
|
private String[] httpReqBody;
|
|
private String[] httpRespHeader;
|
|
private String[] httpRespBody;
|
|
private String reason;
|
|
private String dtype;
|
|
private String originField;
|
|
private String originLog;
|
|
} |