Remove legacy AttackTracer repo content
Some checks failed
OfficeCom Sentinel Client / build-client (push) Has been cancelled
Some checks failed
OfficeCom Sentinel Client / build-client (push) Has been cancelled
This commit is contained in:
32
src/OCSentinelCli/Configuration.cs
Normal file
32
src/OCSentinelCli/Configuration.cs
Normal file
@@ -0,0 +1,32 @@
|
||||
using System.Text.Json;
|
||||
|
||||
namespace OCSentinelCli;
|
||||
|
||||
internal sealed record ScannerConfiguration
|
||||
{
|
||||
public int WarningEventThreshold { get; init; } = 1;
|
||||
|
||||
public int CriticalEventThreshold { get; init; } = 20;
|
||||
|
||||
public int WarningUniqueIpThreshold { get; init; } = 1;
|
||||
|
||||
public int CriticalUniqueIpThreshold { get; init; } = 10;
|
||||
|
||||
public int CorrelationWarningCveThreshold { get; init; } = 1;
|
||||
|
||||
public int CorrelationCriticalCveThreshold { get; init; } = 1;
|
||||
|
||||
public List<string> FtpRoots { get; init; } = [];
|
||||
|
||||
public List<string> FileZillaRoots { get; init; } = [];
|
||||
|
||||
public List<string> ExcludedIps { get; init; } = [];
|
||||
|
||||
public static ScannerConfiguration Load(string path)
|
||||
{
|
||||
string fullPath = Path.GetFullPath(path);
|
||||
string json = File.ReadAllText(fullPath);
|
||||
ScannerConfiguration? config = JsonSerializer.Deserialize<ScannerConfiguration>(json, JsonOptions.Default);
|
||||
return config ?? new ScannerConfiguration();
|
||||
}
|
||||
}
|
||||
Reference in New Issue
Block a user