Merge pull request #434 from stratosphereips/develop

Slips v1.0.9

.github/workflows/CI-production-testing.yml

@@ -52,18 +52,19 @@ jobs:
     - name: Run database unit tests
       run: python3  -m pytest tests/test_database.py -p no:warnings -vv
 
-    - name: Run daemon unit tests
-      run: python3  -m pytest tests/test_daemon.py -p no:warnings -vv
-
     - name: Clear redis cache
       run: ./slips.py -cc
 
+    - name: Portscan tests
+      run: python3 -m pytest -s tests/integration_tests/test_portscans.py  -p no:warnings -vv
+
     - name: Integration tests
       run: python3 -m pytest -s tests/integration_tests/test_dataset.py  -p no:warnings -vv
 
     - name: Config file tests
       run: python3 -m pytest -s tests/integration_tests/test_config_files.py  -p no:warnings -vv
 
+
     - name: Upload Artifact
       # run this job whether the above jobs failed or passed
       if: success() || failure()

.github/workflows/CI-staging.yml

@@ -40,12 +40,16 @@ jobs:
             - name: Clear redis cache
               run: ./slips.py -cc
 
+            - name: Portscan tests
+              run: python3 -m pytest -s tests/integration_tests/test_portscans.py  -p no:warnings -vv
+
             - name: Integration tests
               run: python3 -m pytest -s tests/integration_tests/test_dataset.py -p no:warnings -vv
 
             - name: Config file tests
               run: python3 -m pytest -s tests/integration_tests/test_config_files.py  -p no:warnings -vv
 
+
             - name: Upload Artifact
               # run this job whether the above jobs failed or passed
               if: success() || failure()

.gitmodules

@@ -1,3 +1,12 @@
 [submodule "p2p4slips"]
 	path = p2p4slips
 	url = https://github.com/stratosphereips/p2p4slips
+[submodule "iris"]
+	path = iris
+	url = https://github.com/stratosphereips/iris
+[submodule "fides"]
+	path = fides
+	url = https://github.com/stratosphereips/fides
+[submodule "feel_project"]
+	path = feel_project
+	url = https://github.com/stratosphereips/feel_project

.readthedocs.yaml

@@ -1,18 +1,24 @@
-# .readthedocs.yaml
-# Read the Docs configuration file
+# Read the Docs configuration file for Sphinx projects
 # See https://docs.readthedocs.io/en/stable/config-file/v2.html for details
 
 # Required
 version: 2
 
-# Build documentation in the docs/ directory with Sphinx
+build:
+  os: ubuntu-22.04
+  tools:
+    python: "3.11"
+
+
+python:
+  install:
+    - requirements: docs/requirements.txt
+
+
+# Build documentation in the "docs/" directory with Sphinx
 sphinx:
-   configuration: docs/conf.py
+  configuration: docs/conf.py
 
 # Optionally build your docs in additional formats such as PDF
 formats:
    - pdf
-
-# Optionally set the version of Python and requirements required to build your docs
-python:
-   version: 3.7

CHANGELOG.md

@@ -1,3 +1,15 @@
+-1.0.9 (December 2023)
+- Fix using -k to kill opened redis servers.
+- Better README and docs.
+- Improve URLhaus detections.
+- Improve the detection of vertical and horizontal portscans
+- Unify disabled modules names printed in the CLI.
+- Set the threat level reported to other peers to the max of threat levels seen in any time window.
+- Faster detections of devices changing IPs
+- Remove the home_network feature from Slips.
+- Faster detection of alerts.
+- Fix problem not using 'command and control channel' evidence in the alert of each profile.
+
 -1.0.8 (November 2023)
 - Use All-ID hash to fingerprint flows stored in the flows database
 - Increase the weight of port scan alerts by increasing its threat level