public async Task <IActionResult> Edit([FromBody] AttackEditParams data)
{
try
{
var attack = await _dnsDb.AttackGroups
.FirstOrDefaultAsync(x => x.Id == data.Id);
if (attack != null)
{
var prevStatus = attack.StatusEnum;
attack.Status = data.Status;
await _attackService.AddHistory(attack, prevStatus);
if (!data.Comment.IsBlank())
{
await _attackService.AddNote(attack, data.Comment);
}
await _dnsDb.SaveChangesAsync();
await _hubContext.Clients.All.SendAsync("UpdateAttack", _attackService.CastToViewModel(attack));
var attackMessage = await _notifyService.BuildAttackMessage(string.Empty, attack.Id);
await _redisService.Publish(RedisKeys.NOTIFY_SEND_CHANNEL, attackMessage.ProtoSerialize());
return(new JsonResult("Ok"));
}
}
catch (Exception ex)
{
_logger.LogError(ex, "");
}
return(new JsonResult(null));
}
public async Task StartAnalyzer()
{
await _redis.Subscribe(RedisKeys.RESOLVE_COMPLETE_CHANNEL, async msg =>
{
_logger.LogInformation("Starting Analyzer Job");
var resolvedBlackDomain = await _redis.GetResolvedDomains(RedisKeys.BLACK_DOMAINS_RESOLVED);
var resolvedWhiteDomain = await _redis.GetResolvedDomains(RedisKeys.WHITE_DOMAINS_RESOLVED);
var suspectDomains = resolvedBlackDomain.Where(x => x.IPAddresses.Count > SuspectIpCount).AsEnumerable();
await _suspectDomainSevice.UpdateSuspectDomains(suspectDomains);
var attacks = await _attackService.FindAttacks(resolvedBlackDomain, resolvedWhiteDomain);
attacks = await _attackService.ExcludeDomains(attacks);
var attackToNotify = await _attackService.UpdateDnsAttacks(attacks);
var groupToNotify = await _attackService.UpdateDnsAttackGroups();
await _ipInfoService.UpdateIpInfo(true);
if (attackToNotify.Any())
{
var attackMessage = await _notifyService.BuildAttackMessage(string.Empty, attackToNotify.ToArray());
await _redis.Publish(RedisKeys.NOTIFY_SEND_CHANNEL, attackMessage.ProtoSerialize());
}
if (groupToNotify.Any())
{
var groupMessage = await _notifyService.BuildGroupMessage(string.Empty, groupToNotify.ToArray());
await _redis.Publish(RedisKeys.NOTIFY_SEND_CHANNEL, groupMessage.ProtoSerialize());
}
_logger.LogInformation("Completed Analyzer Job");
});
}