Public/fgAI
SHA256
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

add more

Browse Source
This commit is contained in:
larssand
2026-06-22 21:20:43 +02:00
parent d94cb20987
commit c4f2751ee4
3 changed files with 37 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
src/fgai/monitor.py
View File

@@ -62,7 +62,8 @@ def build_status(
events = []
baseline = BaselineStore(baseline_path) if baseline_path else None
profiles = baseline.profiles({event.src_ip for event in events if event.src_ip}) if baseline else {}
anomalies = detect_source_anomalies(events, limit=anomaly_limit, baselines=profiles)
field_deviations = baseline.profile_deviations(events, stream_profiles) if baseline else {}
anomalies = detect_source_anomalies(events, limit=anomaly_limit, baselines=profiles, field_deviations=field_deviations)
baseline_events = baseline.ingest(events) if baseline else 0
profile_baseline_fields = baseline.ingest_profile_fields(events, stream_profiles) if baseline else 0
intel_ips = sorted(
@@ -114,6 +115,7 @@ def build_status(
"local_in_failures": local_in_failures(events, limit=10),
},
"event_context": build_event_context(events),
"field_deviations": field_deviations,
"cross_source_correlations": correlate_source_ips(events),
"anomalies": [
{