mirror of https://github.com/MISP/MISP
305 lines
13 KiB
PHP
305 lines
13 KiB
PHP
<?php
|
|
$mayModify = (($isAclModify && $event['Event']['user_id'] == $me['id'] && $event['Orgc']['id'] == $me['org_id']) || ($isAclModifyOrg && $event['Orgc']['id'] == $me['org_id']));
|
|
$mayPublish = ($isAclPublish && $event['Orgc']['id'] == $me['org_id']);
|
|
if (Configure::read('Plugin.Sightings_enable') !== false) {
|
|
$sightingPopover = '';
|
|
if (isset($event['Sighting']) && !empty($event['Sighting'])) {
|
|
$ownSightings = array();
|
|
$orgSightings = array();
|
|
foreach ($event['Sighting'] as $sighting) {
|
|
if (isset($sighting['org_id']) && $sighting['org_id'] == $me['org_id']) $ownSightings[] = $sighting;
|
|
if (isset($sighting['org_id'])) {
|
|
if (isset($orgSightings[$sighting['Organisation']['name']])) {
|
|
$orgSightings[$sighting['Organisation']['name']]['count']++;
|
|
if (!isset($orgSightings[$sighting['Organisation']['name']]['date']) || $orgSightings[$sighting['Organisation']['name']]['date'] < $sighting['date_sighting']) {
|
|
$orgSightings[$sighting['Organisation']['name']]['date'] = $sighting['date_sighting'];
|
|
}
|
|
} else {
|
|
$orgSightings[$sighting['Organisation']['name']]['count'] = 1;
|
|
$orgSightings[$sighting['Organisation']['name']]['date'] = $sighting['date_sighting'];
|
|
}
|
|
} else {
|
|
if (isset($orgSightings['Other organisations']['count'])) {
|
|
$orgSightings['Other organisations']['count']++;
|
|
if (!isset($orgSightings['Other organisations']['date']) || $orgSightings['Other organisations']['date'] < $sighting['date_sighting']) {
|
|
$orgSightings['Other organisations']['date'] = $sighting['date_sighting'];
|
|
}
|
|
} else {
|
|
$orgSightings['Other organisations']['count'] = 1;
|
|
$orgSightings['Other organisations']['date'] = $sighting['date_sighting'];
|
|
}
|
|
}
|
|
}
|
|
foreach ($orgSightings as $org => $data) {
|
|
$sightingPopover .= '<span class=\'bold\'>' . h($org) . '</span>: <span class=\'green bold\'>' . h($data['count']) . ' (' . date('Y-m-d H:i:s', $data['date']) . ')' . '</span><br />';
|
|
}
|
|
}
|
|
}
|
|
echo $this->element('side_menu', array('menuList' => 'event', 'menuItem' => 'viewEvent', 'mayModify' => $mayModify, 'mayPublish' => $mayPublish));
|
|
?>
|
|
<div class="events view">
|
|
<?php
|
|
if (Configure::read('MISP.showorg') || $isAdmin) {
|
|
echo $this->element('img', array('id' => $event['Orgc']['name']));
|
|
}
|
|
$title = $event['Event']['info'];
|
|
if (strlen($title) > 58) $title = substr($title, 0, 55) . '...';
|
|
?>
|
|
<div class="row-fluid">
|
|
<div class="span8">
|
|
<h2><?php echo nl2br(h($title)); ?></h2>
|
|
<dl>
|
|
<dt>Event ID</dt>
|
|
<dd>
|
|
<?php echo h($event['Event']['id']); ?>
|
|
|
|
</dd>
|
|
<dt>Uuid</dt>
|
|
<dd>
|
|
<?php echo h($event['Event']['uuid']); ?>
|
|
|
|
</dd>
|
|
<?php
|
|
if (Configure::read('MISP.showorgalternate') && (Configure::read('MISP.showorg') || $isAdmin)): ?>
|
|
<dt>Source Organisation</dt>
|
|
<dd>
|
|
<a href="/organisations/view/<?php echo h($event['Orgc']['id']); ?>"><?php echo h($event['Orgc']['name']); ?></a>
|
|
|
|
</dd>
|
|
<dt>Member Organisation</dt>
|
|
<dd>
|
|
<a href="/organisations/view/<?php echo h($event['Org']['id']); ?>"><?php echo h($event['Org']['name']); ?></a>
|
|
|
|
</dd>
|
|
<?php
|
|
else:
|
|
if (Configure::read('MISP.showorg') || $isAdmin): ?>
|
|
<dt>Org</dt>
|
|
<dd>
|
|
<a href="/organisations/view/<?php echo h($event['Orgc']['id']); ?>"><?php echo h($event['Orgc']['name']); ?></a>
|
|
|
|
</dd>
|
|
<?php endif; ?>
|
|
<?php if ($isSiteAdmin): ?>
|
|
<dt>Owner org</dt>
|
|
<dd>
|
|
<a href="/organisations/view/<?php echo h($event['Org']['id']); ?>"><?php echo h($event['Org']['name']); ?></a>
|
|
|
|
</dd>
|
|
<?php
|
|
endif;
|
|
endif;
|
|
|
|
?>
|
|
<dt>Contributors</dt>
|
|
<dd>
|
|
<?php
|
|
foreach ($contributors as $k => $entry) {
|
|
if (Configure::read('MISP.showorg') || $isAdmin) {
|
|
?>
|
|
<a href="<?php echo $baseurl."/logs/event_index/".$event['Event']['id'].'/'.h($entry);?>" style="margin-right:2px;text-decoration: none;">
|
|
<?php
|
|
echo $this->element('img', array('id' => $entry, 'imgSize' => 24, 'imgStyle' => true));
|
|
?>
|
|
</a>
|
|
<?php
|
|
}
|
|
}
|
|
?>
|
|
|
|
</dd>
|
|
<?php
|
|
if (isset($event['User']['email']) && ($isSiteAdmin || ($isAdmin && $me['org_id'] == $event['Event']['org_id']))):
|
|
?>
|
|
<dt>Email</dt>
|
|
<dd>
|
|
<?php echo h($event['User']['email']); ?>
|
|
|
|
</dd>
|
|
<?php
|
|
endif;
|
|
if (Configure::read('MISP.tagging')): ?>
|
|
<dt>Tags</dt>
|
|
<dd class="eventTagContainer">
|
|
<?php echo $this->element('ajaxTags', array('event' => $event, 'tags' => $event['EventTag'], 'tagAccess' => ($isSiteAdmin || $mayModify || $me['org_id'] == $event['Event']['org_id']) )); ?>
|
|
</dd>
|
|
<?php endif; ?>
|
|
<dt>Date</dt>
|
|
<dd>
|
|
<?php echo h($event['Event']['date']); ?>
|
|
|
|
</dd>
|
|
<dt title="<?php echo $eventDescriptions['threat_level_id']['desc'];?>">Threat Level</dt>
|
|
<dd>
|
|
<?php
|
|
if ($event['ThreatLevel']['name']) echo h($event['ThreatLevel']['name']);
|
|
else echo h($event['Event']['threat_level_id']);
|
|
?>
|
|
|
|
</dd>
|
|
<dt title="<?php echo $eventDescriptions['analysis']['desc'];?>">Analysis</dt>
|
|
<dd>
|
|
<?php echo h($analysisLevels[$event['Event']['analysis']]); ?>
|
|
</dd>
|
|
<dt>Distribution</dt>
|
|
<dd <?php if ($event['Event']['distribution'] == 0) echo 'class = "privateRedText"';?> title = "<?php echo h($distributionDescriptions[$event['Event']['distribution']]['formdesc'])?>">
|
|
<?php
|
|
if ($event['Event']['distribution'] == 4):
|
|
?>
|
|
<a href="/sharing_groups/view/<?php echo h($event['SharingGroup']['id']); ?>"><?php echo h($event['SharingGroup']['name']); ?></a>
|
|
<?php
|
|
else:
|
|
echo h($distributionLevels[$event['Event']['distribution']]);
|
|
endif;
|
|
?>
|
|
</dd>
|
|
<dt>Info</dt>
|
|
<dd style="word-wrap: break-word;">
|
|
<?php echo nl2br(h($event['Event']['info'])); ?>
|
|
|
|
</dd>
|
|
<dt class="hidden"></dt><dd class="hidden"></dd>
|
|
<dt class="background-red bold not-published <?php echo ($event['Event']['published'] == 0) ? '' : 'hidden'; ?>">Published</dt>
|
|
<dd class="background-red bold not-published <?php echo ($event['Event']['published'] == 0) ? '' : 'hidden'; ?>">No</dd>
|
|
<dt class="bold published <?php echo ($event['Event']['published'] == 0) ? 'hidden' : ''; ?>">Published</dt>
|
|
<dd class="green bold published <?php echo ($event['Event']['published'] == 0) ? 'hidden' : ''; ?>">Yes</dd>
|
|
<?php if (Configure::read('Plugin.Sightings_enable') !== false): ?>
|
|
<dt>Sightings</dt>
|
|
<dd style="word-wrap: break-word;">
|
|
<span id="eventSightingCount" class="bold sightingsCounter" data-toggle="popover" data-trigger="hover" data-content="<?php echo $sightingPopover; ?>"><?php echo count($event['Sighting']); ?></span>
|
|
(<span id="eventOwnSightingCount" class="green bold sightingsCounter" data-toggle="popover" data-trigger="hover" data-content="<?php echo $sightingPopover; ?>"><?php echo isset($ownSightings) ? count($ownSightings) : 0; ?></span>)
|
|
<?php if (!Configure::read('Plugin.Sightings_policy')) echo '- restricted to own organisation only.'; ?>
|
|
</dd>
|
|
<?php endif;
|
|
if (!empty($delegationRequest)):
|
|
if ($isSiteAdmin || $me['org_id'] == $delegationRequest['EventDelegation']['org_id']) {
|
|
$target = $isSiteAdmin ? $delegationRequest['Org']['name'] : 'you';
|
|
$subject = $delegationRequest['RequesterOrg']['name'] . ' has';
|
|
} else {
|
|
$target = $delegationRequest['Org']['name'];
|
|
$subject = 'You have';
|
|
}
|
|
?>
|
|
<dt class="background-red bold">Delegation request</dt>
|
|
<dd class="background-red bold"><?php echo h($subject);?> requested that <?php echo h($target)?> take over this event. (<a href="#" style="color:white;" onClick="genericPopup('<?php echo $baseurl;?>/eventDelegations/view/<?php echo h($delegationRequest['EventDelegation']['id']);?>', '#confirmation_box');">View request details</a>)</dd>
|
|
<?php endif;?>
|
|
<?php
|
|
if (!Configure::read('MISP.completely_disable_correlation') && Configure::read('MISP.allow_disabling_correlation')):
|
|
?>
|
|
<dt <?php echo $event['Event']['disable_correlation'] ? 'class="background-red bold"' : '';?>>Correlation</dt>
|
|
<dd <?php echo $event['Event']['disable_correlation'] ? 'class="background-red bold"' : '';?>>
|
|
<?php
|
|
if ($mayModify):
|
|
if ($event['Event']['disable_correlation']):
|
|
?>
|
|
Disabled (<a onClick="getPopup('<?php echo h($event['Event']['id']); ?>', 'events', 'toggleCorrelation', '', '#confirmation_box');" style="color:white;cursor:pointer;" style="font-weight:normal;">enable</a>)
|
|
<?php
|
|
else:
|
|
?>
|
|
Enabled (<a onClick="getPopup('<?php echo h($event['Event']['id']); ?>', 'events', 'toggleCorrelation', '', '#confirmation_box');" style="cursor:pointer;" style="font-weight:normal;">disable</a>)
|
|
<?php
|
|
endif;
|
|
else:
|
|
if ($event['Event']['disable_correlation']):
|
|
echo 'Disabled';
|
|
else:
|
|
echo 'Enabled';
|
|
endif;
|
|
endif;
|
|
?>
|
|
</dd>
|
|
<?php
|
|
endif;
|
|
?>
|
|
</dl>
|
|
</div>
|
|
<div class="related span4">
|
|
<?php if (!empty($event['RelatedEvent'])):?>
|
|
<h3>Related Events</h3>
|
|
<ul class="inline">
|
|
<?php foreach ($event['RelatedEvent'] as $relatedEvent): ?>
|
|
<li>
|
|
<?php
|
|
$relatedData = array('Orgc' => $relatedEvent['Orgc']['name'], 'Date' => $relatedEvent['Event']['date'], 'Info' => $relatedEvent['Event']['info']);
|
|
$popover = '';
|
|
foreach ($relatedData as $k => $v) {
|
|
$popover .= '<span class=\'bold\'>' . h($k) . '</span>: <span class="blue">' . h($v) . '</span><br />';
|
|
}
|
|
?>
|
|
<div data-toggle="popover" data-content="<?php echo h($popover); ?>" data-trigger="hover">
|
|
<?php
|
|
$linkText = $relatedEvent['Event']['date'] . ' (' . $relatedEvent['Event']['id'] . ')';
|
|
if ($relatedEvent['Event']['orgc_id'] == $me['org_id']) {
|
|
echo $this->Html->link($linkText, array('controller' => 'events', 'action' => 'view', $relatedEvent['Event']['id'], true, $event['Event']['id']), array('style' => 'color:red;'));
|
|
} else {
|
|
echo $this->Html->link($linkText, array('controller' => 'events', 'action' => 'view', $relatedEvent['Event']['id'], true, $event['Event']['id']));
|
|
}
|
|
?>
|
|
</div></li>
|
|
<?php endforeach; ?>
|
|
</ul>
|
|
<?php endif; ?>
|
|
<?php if (!empty($event['Event']['warnings'])): ?>
|
|
<div class="warning_container" style="width:80%;">
|
|
<h4 class="red">Warning: Potential false positives</h4>
|
|
<?php
|
|
$total = count($event['Event']['warnings']);
|
|
$current = 1;
|
|
foreach ($event['Event']['warnings'] as $id => $name) {
|
|
echo '<a href="' . $baseurl . '/warninglists/view/' . $id . '">' . h($name) . '</a>' . ($current == $total ? '' : '<br />');
|
|
$current++;
|
|
}
|
|
?>
|
|
</div>
|
|
<?php endif; ?>
|
|
</div>
|
|
</div>
|
|
<br />
|
|
<div class="toggleButtons">
|
|
<button class="btn btn-inverse toggle-left btn.active qet galaxy-toggle-button" id="pivots_toggle" data-toggle-type="pivots">
|
|
<span class="icon-minus icon-white" style="vertical-align:top;"></span>Pivots
|
|
</button>
|
|
<button class="btn btn-inverse toggle qet galaxy-toggle-button" id="galaxies_toggle" data-toggle-type="galaxies">
|
|
<span class="icon-minus icon-white" style="vertical-align:top;"></span>Galaxy
|
|
</button>
|
|
<button class="btn btn-inverse toggle qet galaxy-toggle-button" id="attributes_toggle" data-toggle-type="attributes">
|
|
<span class="icon-minus icon-white" style="vertical-align:top;"></span>Attributes
|
|
</button>
|
|
<button class="btn btn-inverse toggle-right qet galaxy-toggle-button" id="discussions_toggle" data-toggle-type="discussions">
|
|
<span class="icon-minus icon-white" style="vertical-align:top;"></span>Discussion
|
|
</button>
|
|
</div>
|
|
<br />
|
|
<br />
|
|
<div id="pivots_div">
|
|
<?php if (sizeOf($allPivots) > 1) echo $this->element('pivot'); ?>
|
|
</div>
|
|
<div id="galaxies_div" class="info_container" style="width:33%">
|
|
<h4 class="blue">Galaxies</h4>
|
|
<?php echo $this->element('galaxyQuickView', array('mayModify' => $mayModify, 'isAclTagger' => $isAclTagger)); ?>
|
|
</div>
|
|
<div id="attributes_div">
|
|
<?php echo $this->element('eventattribute'); ?>
|
|
</div>
|
|
<div id="discussions_div">
|
|
</div>
|
|
<div id="attribute_creation_div" style="display:none;">
|
|
</div>
|
|
</div>
|
|
<script type="text/javascript">
|
|
var showContext = false;
|
|
$(document).ready(function () {
|
|
popoverStartup();
|
|
|
|
$("th, td, dt, div, span, li").tooltip({
|
|
'placement': 'top',
|
|
'container' : 'body',
|
|
delay: { show: 500, hide: 100 }
|
|
});
|
|
|
|
$.get("/threads/view/<?php echo $event['Event']['id']; ?>/true", function(data) {
|
|
$("#discussions_div").html(data);
|
|
});
|
|
});
|
|
</script>
|