Esempio n. 1
0
        private async Task RegisterIncidentAtElasticAsync(string host, VTShortReport shortReport, string restrictingPolicy)
        {
            var incident          = new EventIncident(host, shortReport.md5, shortReport.full_class, restrictingPolicy);
            var firstOccurrenceIp = await Elastic.FindFirstOccurrenceIpByFileHash(shortReport.md5);

            var paths = await Neo4J.FindAllPaths(firstOccurrenceIp, host);

            incident.SetPossibleRoutes(paths);
            incident.ExcludeRestrictedRoutes(shortReport, Redis);

            await Logstash.SendEventAsync(incident);
        }