GitLab

This change modifies the event type from "waf_detection" to "ruleScope" and updates the rule key name to reflect the attack type instead of the rule name. Additionally, the relation type has been changed from "timeline" to "Discovery" for improved clarity in event categorization.

This update introduces a new Signal struct to encapsulate details related to WAF detections, including severity, tags, and context. The genWafDetectionSignal function has been implemented to generate signals based on attacked logs, improving the overall detection process. Additionally, the handling of bulk indexing for signals has been integrated into the existing workflow, ensuring that signals are properly indexed alongside events.

Refactor WAF detection event structure in LogConsumerService to improve clarity and detail. The genWafDetectionEvent function now includes action and request details in a nested format, enhancing the context of the generated events.

This update introduces a severity level of 6 to the generated WAF detection events, enhancing the event context for better categorization and analysis of detected attacks.

Refactor WAF detection logic in LogConsumerService to restore functionality for generating WAF detections and events. This update re-enables the processing of attacked logs and improves error handling, ensuring that failures during detection generation are logged for better visibility.

Update WAF detection event timestamps in LogConsumerService to use attack time from attacked logs. This change ensures accurate event timing for better context in generated events.

This update enhances the genWafDetectionEvent function by including RuleKeys with version, name, and category details for improved event context. Additionally, an informational log statement has been added to track WAF events during processing.

Enhance WAF detection event handling in LogConsumerService by adding attack URL and action details to the event context. The genWafDetectionEvent function now processes attacked logs more comprehensively, improving the overall event generation logic and error handling.

Enhance WAF detection event generation in LogConsumerService by adding attacked log details. The genWafDetectionEvent function now accepts an additional parameter for attacked logs, allowing for more comprehensive event context, including attack IP, time, application, and payload information.

Refactor WAF service listener deletion logic to include namespace and region code in the query, enhancing specificity and accuracy in service management. Additionally, remove redundant action check in WAF detection generation to simplify error handling.

Comment out WAF detection and event generation logic in LogConsumerService to simplify handling and improve readability. This change prepares the code for future enhancements while maintaining the current functionality.

This update replaces direct assignment of WAF detection properties with a new method for generating WAF detections and events, enhancing code clarity and maintainability. Additionally, error handling has been improved to log failures during the generation process, ensuring better visibility into issues that may arise.

Refactor API router and WAF handling to support additional parameters and improve configuration management

This update modifies the SetRouters and SetWafRouter functions to accept new parameters, including a debug flag and a region URL map, enhancing the flexibility of the API routing. Additionally, a new SetApiRouters function is introduced for better organization of API routes. The configuration management has been streamlined by moving configuration imports to the internal package, ensuring a more consistent structure across the application.

This update introduces the ability to set the log level dynamically based on the LOG_LEVEL environment variable, allowing for better control over logging verbosity. Additionally, the Elasticsearch client creation has been refactored to utilize configuration settings from a JSON file, enhancing the application's configurability. The previous LoadConfig function has been replaced with a more structured approach, and unnecessary code has been removed to streamline the log consumer service.

Refactor UpdateRule method to improve handling of rule category status. The update now correctly manages the addition and removal of category IDs based on the request status, enhancing the accuracy of rule updates in the WAF service.

This update introduces functionality to count attack logs for the current day within the GetWaf method. It utilizes a boolean query to filter logs based on the service ID and the attack time range, enhancing the WAF service's ability to track and report attack activity accurately.

Enhance DeleteGatewayWaf method to improve error handling and logging. Added deferred function to log gateway deletion history with error messages and status. This change ensures better tracking of deletion operations and improves clarity in error reporting.

Update AttackListener filter in ListAttackLogs method to use 'attacked_app' field for improved query accuracy. This change enhances the precision of attack log filtering based on the specified listener.

This update introduces a new filter for AttackListener in the ListAttackLogs method, allowing for more precise querying of attack logs based on the specified listener. This change improves the flexibility and usability of the WAF service's logging functionality.

Add getScopeName function to retrieve gateway names from WAF services and integrate it into GetBlackWhiteLists response

This new function fetches gateway names based on the provided scope and enhances the GetBlackWhiteLists method by including the ScopeName field in the response. This change improves data representation and clarity in WAF listings.

The getEnabledRuleNum function now returns an error for better error handling. It calculates the number of enabled WAF rule categories based on the WAF service's rule category status, ensuring accurate counts in the GetWaf method. This change enhances the robustness of the WAF service response.

This new function retrieves the number of enabled WAF rule categories and adjusts the count based on the WAF service's rule category status. The RuleNum field in the GetWaf method is updated to use this new function, enhancing the accuracy of the WAF service response.

Enhance WafService and ListWafsV2 response by adding ID field to improve data representation and clarity in WAF listings.

Refactor DeleteListenerWaf method to improve logging by including listenerName in the deferred function. This change enhances clarity in history logging while maintaining existing functionality.

Update DeleteListenerWaf method to use listenerName variable for improved clarity in history logging. This change enhances code readability while maintaining existing functionality.

Refactor DeleteListenerWaf method to store listener name in a variable for improved clarity and maintainability. This change enhances the readability of the code while preserving existing functionality.

Enhance DeleteListenerWaf method to include service retrieval and update listener name. Add error handling for service fetch failure to improve robustness and clarity in WAF service operations.

Fix status handling in CreateWaf and DeleteListenerWaf methods to correctly reflect success and failure states. Update default status values and error handling logic for improved clarity and accuracy.

- Include the AttackedApp field in the response structure of the GetAttackLogDetails method to provide additional context about the attacked application in the attack log details.

- Rename RequestPkg field to req_pkg in the AttackLog struct to enhance clarity and maintain consistency with naming conventions across the codebase.

- Update GetAttackLogDetails and GetAttackLogRsp methods in the WafController and wafService to accept UUID as a string parameter instead of a uint32 ID.
- Modify corresponding service interface to reflect the change in parameter type for improved clarity and consistency in handling attack logs.

- Introduce new API routes for fetching attack log details and response packages.
- Implement corresponding methods in the WafController and wafService to handle the new functionality.
- Update service interface and types to support the new data structures for attack logs and responses.

- Update the logic in getRulesForService and calculateCrdWafRules methods to simplify the process of enabling rule categories based on the RuleCategoryStatus.
- Introduce a new helper method isCategoryEnabled to streamline category checks and enhance code readability.

- Modify the UpdateRule method to assign the RuleCategoryStatus directly to the wafService before updating the database.
- Enhance error handling for the database update operation to ensure clarity in failure cases.