-
Notifications
You must be signed in to change notification settings - Fork 1.1k
UI tips and tricks
Users can define auto-refresh period for Maltrail web-page by adding /?refresh=N
in the address line of the browser, where N in seconds. By default, no auto-refresh is given.
For example, /?refresh=30
is given and Maltrail web-page will be automatically refreshed every 30 seconds:
By pressing left or right keys on the keyboard, users can easily switch from one table page to another, without a need to use the mouse.
Summary: Tags mechanism allows users to define specific notes for trails to build personal filters on various threats.
Note: When creating a tag or set of tags, use alphanumeric characters.
- To create a new tag or set of tags, do:
- In Maltrail GUI move the mouse to
tags
column. - Press left-mouse button inside a desired cell.
- Write the text you need.
- Finish tag creation by pressing Enter or by clicking somewhere else on the page.
- To create a set of tags, repeat 1)-4) by a number of tags you need for the current trail:
To delete a target tag, move the mouse on it and press middle-mouse button/mouse-wheel.
Tags can only be deleted or created.
User can filter Maltrail detection list with one or several tags by clicking on the respective tag in series:
In this example, has clicked in series tag1
, tag2
, and tag_3
respectively to build a relevant filter for Maltrail detection list.
To report false positive detection to developers one can do in several ways:
- By creating an Issue with a brief description of why Maltrail detection incorrect is.
- By creating a Pull request with patch and a brief description why Maltrail detection incorrect is.
- By right-mouse click inside the GUI on a respective line and choosing
Report false positive
option. Details will be sent to Maltrail developers for additional analysis.
In case, if you want to hide a threat from the detection list, do right-mouse click on a respective line and choose Hide threat
option.
To revert hidings, one should do Tools -> Flush local storage:
- FAQ - Frequently Asked Questions
- Trail classes - Information about different classes of trails
- Specific detections - Information about Maltrail specific detections
- Maltrail trails structure - Information about Maltrail trails structure
- Maltrail trails base format - Information about Maltrail trails base format
- Maltrail trails contribution - Information about Maltrail trails contribution
- Maltrail detection nuances - Information about Maltrail detection nuances
- Maltrail verdicts on Validin Threat Hunting and DNS Enrichment Platform - Information about Maltrail verdicts on Validin Threat Hunting and DNS Enrichment Platform
- UI tips and tricks - Brief list of user interface features
- CLI management for Maltrail - Information about CLI management for Maltrail
- Miscellaneous - Miscellaneous HOWTOs