From 8d2c94dff5bb74e657b41b607acc90ff569843cc Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Pavel=20K=C3=A1cha?= <ph@cesnet.cz>
Date: Tue, 13 Jun 2017 15:20:26 +0200
Subject: [PATCH] Better event description wording
---
hp-labrea/labrea-idea.py | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
diff --git a/hp-labrea/labrea-idea.py b/hp-labrea/labrea-idea.py
index c9ce75f..e7b2cdc 100755
--- a/hp-labrea/labrea-idea.py
+++ b/hp-labrea/labrea-idea.py
@@ -257,7 +257,7 @@ class IdeaGen(object):
self.template = {
"connect": {
"category": ["Recon.Scanning"],
- "description": "TCP connection/scan",
+ "description": "TCP connections/scan",
"template": "labrea-001",
"note": "Connections from remote host to never assigned IP"
},
@@ -269,7 +269,7 @@ class IdeaGen(object):
},
"synack": {
"category": ["Availability.DoS"],
- "description": "SYN/ACK connections/scan",
+ "description": "Unsolicited TCP SYN/ACK connections/scan",
"template": "labrea-003",
"note": "Unsolicited SYN/ACK packet received from remote host to never assigned IP",
"source_type": ["Backscatter"],
--
GitLab