mirror of https://github.com/MISP/MISP
595 lines
31 KiB
PHP
595 lines
31 KiB
PHP
<?php
|
|
$mayModify = (($isAclModify && $event['Event']['user_id'] == $me['id'] && $event['Orgc']['id'] == $me['org_id']) || ($isAclModifyOrg && $event['Orgc']['id'] == $me['org_id']));
|
|
$mayPublish = ($isAclPublish && $event['Orgc']['id'] == $me['org_id']);
|
|
|
|
echo $this->element('/genericElements/SideMenu/side_menu', array('menuList' => 'event', 'menuItem' => 'viewEvent', 'mayModify' => $mayModify, 'mayPublish' => $mayPublish));
|
|
echo $this->Html->script('doT');
|
|
echo $this->Html->script('extendext');
|
|
echo $this->Html->script('moment.min');
|
|
echo $this->Html->css('query-builder.default');
|
|
echo $this->Html->script('query-builder');
|
|
echo $this->Html->css('attack_matrix');
|
|
echo $this->Html->script('network-distribution-graph');
|
|
?>
|
|
<div class="events view">
|
|
<?php
|
|
if (Configure::read('MISP.showorg') || $isAdmin):
|
|
?>
|
|
<div style="float:right;"><?= $this->OrgImg->getOrgLogo($event['Orgc'], 48); ?></div>
|
|
<?php
|
|
endif;
|
|
$title = h($event['Event']['info']);
|
|
$table_data = array();
|
|
$table_data[] = array('key' => __('Event ID'), 'value' => $event['Event']['id']);
|
|
$table_data[] = array(
|
|
'key' => 'UUID',
|
|
'html' => sprintf('<span class="quickSelect">%s</span>%s%s',
|
|
$event['Event']['uuid'],
|
|
$isAclAdd ? sprintf(' <a href="%s/events/add/extends:%s" style="color:black; font-size:15px;padding-left:2px" title="%s"><i class="fas fa-plus-square"></i></a>',
|
|
$baseurl,
|
|
$event['Event']['id'],
|
|
__('Extend this event')
|
|
) : '',
|
|
$isSiteAdmin || $hostOrgUser ? sprintf(' <a href="%s/servers/idTranslator/%s" style="color:black; font-size:15px;padding-left:2px" title="%s"><i class="fas fa-server"></i></a>',
|
|
$baseurl,
|
|
$event['Event']['id'],
|
|
__('Check this event on different servers')
|
|
) : ''
|
|
)
|
|
);
|
|
if (Configure::read('MISP.showorgalternate')) {
|
|
$table_data[] = array(
|
|
'key' => __('Source Organisation'),
|
|
'html' => sprintf(
|
|
'<a href="%s/organisations/view/%s">%s</a>',
|
|
$baseurl,
|
|
h($event['Orgc']['id']),
|
|
h($event['Orgc']['name'])
|
|
)
|
|
);
|
|
$table_data[] = array(
|
|
'key' => __('Member Organisation'),
|
|
'html' => sprintf(
|
|
'<a href="%s/organisations/view/%s">%s</a>',
|
|
$baseurl,
|
|
h($event['Org']['id']),
|
|
h($event['Org']['name'])
|
|
)
|
|
);
|
|
} else {
|
|
$table_data[] = array(
|
|
'key' => __('Creator org'),
|
|
'html' => sprintf(
|
|
'<a href="%s/organisations/view/%s">%s</a>',
|
|
$baseurl,
|
|
h($event['Orgc']['id']),
|
|
h($event['Orgc']['name'])
|
|
)
|
|
);
|
|
if ($isSiteAdmin) {
|
|
$table_data[] = array(
|
|
'key' => __('Owner org'),
|
|
'html' => sprintf(
|
|
'<a href="%s/organisations/view/%s">%s</a>',
|
|
$baseurl,
|
|
h($event['Org']['id']),
|
|
h($event['Org']['name'])
|
|
)
|
|
);
|
|
}
|
|
}
|
|
if (!empty($contributors)) {
|
|
$contributorsContent = [];
|
|
foreach ($contributors as $organisationId => $name) {
|
|
$org = ['Organisation' => ['id' => $organisationId, 'name' => $name]];
|
|
if (Configure::read('MISP.log_new_audit')) {
|
|
$link = $baseurl . "/audit_logs/eventIndex/" . h($event['Event']['id']) . '/' . h($organisationId);
|
|
} else {
|
|
$link = $baseurl . "/logs/event_index/" . h($event['Event']['id']) . '/' . h($name);
|
|
}
|
|
$contributorsContent[] = $this->OrgImg->getNameWithImg($org, $link);
|
|
}
|
|
$table_data[] = array(
|
|
'key' => __('Contributors'),
|
|
'html' => implode("<br>", $contributorsContent),
|
|
);
|
|
}
|
|
if (isset($event['User']['email'])) {
|
|
$table_data[] = array(
|
|
'key' => __('Creator user'),
|
|
'value' => h($event['User']['email']),
|
|
);
|
|
}
|
|
$table_data[] = array(
|
|
'key' => __('Tags'),
|
|
'html' => sprintf(
|
|
'<span class="eventTagContainer">%s</span>',
|
|
$this->element(
|
|
'ajaxTags',
|
|
array(
|
|
'event' => $event,
|
|
'tags' => $event['EventTag'],
|
|
'tagAccess' => ($isSiteAdmin || $mayModify),
|
|
'localTagAccess' => ($isSiteAdmin || $mayModify || $me['org_id'] == $event['Event']['org_id'] || (int)$me['org_id'] === Configure::read('MISP.host_org_id')),
|
|
'missingTaxonomies' => $missingTaxonomies,
|
|
'tagConflicts' => $tagConflicts
|
|
)
|
|
)
|
|
)
|
|
);
|
|
$table_data[] = array(
|
|
'key' => __('Date'),
|
|
'value' => $event['Event']['date']
|
|
);
|
|
if (empty(Configure::read('MISP.disable_threat_level'))) {
|
|
$table_data[] = array(
|
|
'key' => __('Threat Level'),
|
|
'key_title' => $eventDescriptions['threat_level_id']['desc'],
|
|
'value' => $event['ThreatLevel']['name'],
|
|
'value_class' => 'threat-level-' . strtolower($event['ThreatLevel']['name']),
|
|
);
|
|
}
|
|
$sharingGroupHtml = false;
|
|
$hideDistributionGraph = false;
|
|
if ($event['Event']['distribution'] == 4) {
|
|
if (!empty($event['SharingGroup'])) {
|
|
$sharingGroupHtml = sprintf(
|
|
'<a href="%s%s">%s</a>',
|
|
$baseurl . '/sharing_groups/view/',
|
|
h($event['SharingGroup']['id']),
|
|
h($event['SharingGroup']['name'])
|
|
);
|
|
} else {
|
|
$sharingGroupHtml = sprintf(
|
|
'<span class="red bold">%s</span>: %s',
|
|
__('Undisclosed sharing group'),
|
|
__('your organisation is the local owner of this event, however it is not explicitly listed in the sharing group.')
|
|
);
|
|
$hideDistributionGraph = true;
|
|
}
|
|
}
|
|
$table_data[] = array(
|
|
'key' => __('Analysis'),
|
|
'key_title' => $eventDescriptions['analysis']['desc'],
|
|
'value' => $analysisLevels[$event['Event']['analysis']]
|
|
);
|
|
$table_data[] = array(
|
|
'key' => __('Distribution'),
|
|
'value_class' => ($event['Event']['distribution'] == 0) ? 'privateRedText' : '',
|
|
'html' => sprintf(
|
|
'%s %s %s %s',
|
|
($event['Event']['distribution'] == 4) ?
|
|
$sharingGroupHtml :
|
|
h($distributionLevels[$event['Event']['distribution']]),
|
|
$hideDistributionGraph ? '' : sprintf(
|
|
'<span id="distribution_graph_bar" style="margin-left: 5px;" data-object-id="%s" data-object-context="event"></span>',
|
|
h($event['Event']['id'])
|
|
),
|
|
$hideDistributionGraph ? '' : sprintf(
|
|
'<it class="%s" data-object-id="%s" data-object-context="event" data-shown="false"></it><div style="display: none">%s</div>',
|
|
'useCursorPointer fa fa-info-circle distribution_graph',
|
|
h($event['Event']['id']),
|
|
$this->element('view_event_distribution_graph')
|
|
),
|
|
$hideDistributionGraph ? '' : sprintf(
|
|
'<it type="button" id="showAdvancedSharingButton" title="%s" class="%s" aria-hidden="true" style="margin-left: 5px;"></it>',
|
|
__('Toggle advanced sharing network viewer'),
|
|
'fa fa-share-alt useCursorPointer'
|
|
)
|
|
)
|
|
);
|
|
$table_data[] = array(
|
|
'key' => __('Info'),
|
|
'value' => $event['Event']['info']
|
|
);
|
|
$table_data[] = array(
|
|
'key' => __('Published'),
|
|
'class' => ($event['Event']['published'] == 0) ? 'background-red bold not-published' : 'published',
|
|
'class_value' => ($event['Event']['published'] == 0) ? '' : 'green',
|
|
'html' => ($event['Event']['published'] == 0) ? __('No') : sprintf('<span class="green bold">%s</span>', __('Yes')) . ((empty($event['Event']['publish_timestamp'])) ? __('N/A') : ' (' . date('Y-m-d H:i:s', ($event['Event']['publish_timestamp'])) . ')')
|
|
);
|
|
$attribute_text = $attribute_count;
|
|
$attribute_text .= __n(' (%s Object)', ' (%s Objects)', $object_count, h($object_count));
|
|
$table_data[] = array(
|
|
'key' => __('#Attributes'),
|
|
'value' => $attribute_text
|
|
);
|
|
$table_data[] = array(
|
|
'key' => __('First recorded change'),
|
|
'html' => !$oldest_timestamp ? '' : $this->Time->time($oldest_timestamp),
|
|
);
|
|
$table_data[] = array(
|
|
'key' => __('Last change'),
|
|
'html' => $this->Time->time($event['Event']['timestamp']),
|
|
);
|
|
$table_data[] = array(
|
|
'key' => __('Modification map'),
|
|
'element' => 'sparkline',
|
|
'element_params' => array('scope' => 'modification', 'id' => $event['Event']['id'], 'csv' => $modificationMapCSV)
|
|
);
|
|
if (!empty($extendedEvent) || !empty($event['Event']['extends_uuid'])) {
|
|
$table_data[] = array(
|
|
'key' => __('Extends'),
|
|
'value_class' => 'break-word',
|
|
'html' => (!empty($extendedEvent) && is_array($extendedEvent)) ?
|
|
sprintf(
|
|
'<span>%s (<a href="%s">%s</a>): %s</span>',
|
|
__('Event'),
|
|
$baseurl . '/events/view/' . h($extendedEvent[0]['Event']['id']),
|
|
h($extendedEvent[0]['Event']['id']),
|
|
h($extendedEvent[0]['Event']['info'])
|
|
) :
|
|
h($event['Event']['extends_uuid'])
|
|
);
|
|
}
|
|
$extended_by = '';
|
|
if (!empty($extensions)) {
|
|
foreach ($extensions as $extension) {
|
|
$extended_by .= sprintf('<span>%s (<a href="%s">%s</a>): %s</span>', __('Event'), $baseurl . '/events/view/' . h($extension['Event']['id']), h($extension['Event']['id']), h($extension['Event']['info'])) . '<br />';
|
|
}
|
|
$table_data[] = array(
|
|
'key' => __('Extended by'),
|
|
'value_class' => 'break-word',
|
|
'html' => sprintf(
|
|
'%s %s %s',
|
|
$extended_by,
|
|
__(
|
|
'Currently in %s view.',
|
|
$extended ? __('extended') : __('atomic')
|
|
),
|
|
sprintf(
|
|
'<a href="%s/events/view/%s%s"><span class="fa fa-sync" title="%s"></span></a>',
|
|
$baseurl,
|
|
$event['Event']['id'],
|
|
($extended ? '' : '/extended:1'),
|
|
$extended ? __('Switch to atomic view') : __('Switch to extended view')
|
|
)
|
|
)
|
|
);
|
|
}
|
|
$table_data[] = array(
|
|
'key' => __('Sightings'),
|
|
'element' => '/Events/View/eventSightingValue',
|
|
'element_params' => array(
|
|
'event' => $event,
|
|
'sightingsData' => isset($sightingsData['data']['all']) ? $sightingsData['data']['all'] : [],
|
|
)
|
|
);
|
|
if (isset($sightingsData['data']['all'])) {
|
|
$table_data[] = array(
|
|
'key' => __('Activity'),
|
|
'element' => 'sparkline',
|
|
'element_params' => array('scope' => 'event', 'id' => $event['Event']['id'], 'csv' => $sightingsData['csv']['all'])
|
|
);
|
|
}
|
|
if (!empty($delegationRequest)) {
|
|
if ($isSiteAdmin || $me['org_id'] == $delegationRequest['EventDelegation']['org_id']) {
|
|
if ($isSiteAdmin) {
|
|
$message = sprintf(
|
|
__('%s has requested that %s take over this event.'),
|
|
h($delegationRequest['RequesterOrg']['name']),
|
|
h($delegationRequest['Org']['name'])
|
|
);
|
|
} else {
|
|
$message = sprintf(
|
|
__('%s has requested that you take over this event.'),
|
|
h($delegationRequest['RequesterOrg']['name'])
|
|
);
|
|
}
|
|
} else {
|
|
$message = sprintf(
|
|
__('You have requested that %s take over this event.'),
|
|
h($delegationRequest['Org']['name'])
|
|
);
|
|
}
|
|
$table_data[] = array(
|
|
'key' => __('Delegation request'),
|
|
'class' => 'background-red bold',
|
|
'html' => sprintf(
|
|
'%s (%s)',
|
|
$message,
|
|
sprintf (
|
|
'<a href="#" style="color:white;" onClick="genericPopup(%s);">%s</a>',
|
|
sprintf(
|
|
"'%s/eventDelegations/view/%s', '#confirmation_box'",
|
|
$baseurl,
|
|
h($delegationRequest['EventDelegation']['id'])
|
|
),
|
|
__('View request details')
|
|
)
|
|
)
|
|
);
|
|
}
|
|
if (!Configure::read('MISP.completely_disable_correlation') && Configure::read('MISP.allow_disabling_correlation')) {
|
|
$table_data[] = array(
|
|
'key' => __('Correlation'),
|
|
'class' => $event['Event']['disable_correlation'] ? 'background-red bold' : '',
|
|
'html' => sprintf(
|
|
'%s%s',
|
|
$event['Event']['disable_correlation'] ? __('Disabled') : __('Enabled'),
|
|
(!$mayModify && !$isSiteAdmin) ? '' : sprintf(
|
|
sprintf(
|
|
' (<a onClick="getPopup(%s);" style="%scursor:pointer;font-weight:normal;">%s</a>)',
|
|
sprintf(
|
|
"'%s', 'events', 'toggleCorrelation', '', '#confirmation_box'",
|
|
h($event['Event']['id'])
|
|
),
|
|
$event['Event']['disable_correlation'] ? 'color:white;' : '',
|
|
$event['Event']['disable_correlation'] ? __('enable') : __('disable')
|
|
)
|
|
)
|
|
)
|
|
);
|
|
}
|
|
|
|
?>
|
|
<div class="row-fluid">
|
|
<div class="span8">
|
|
<h2 class="ellipsis-overflow"><?php echo ($extended ? '[' . __('Extended view') . '] ' : '') . nl2br($title); ?></h2>
|
|
<?php echo $this->element('genericElements/viewMetaTable', array('table_data' => $table_data)); ?>
|
|
</div>
|
|
<div class="related span4">
|
|
|
|
<?php if (!empty($warningTagConflicts)): ?>
|
|
<div class="warning_container">
|
|
<h4 class="red"><?php echo __('Warning: Taxonomy inconsistencies');?></h4>
|
|
<?php echo '<ul>'; ?>
|
|
<?php
|
|
foreach ($warningTagConflicts as $taxonomy) {
|
|
echo sprintf('<li><a href="%s/taxonomies/view/%s" title="">%s</a></li>', $baseurl, h($taxonomy['Taxonomy']['id']), h($taxonomy['Taxonomy']['namespace']), h($taxonomy['Taxonomy']['description']));
|
|
echo '<ul>';
|
|
if ($taxonomy['Taxonomy']['exclusive']) {
|
|
echo sprintf(
|
|
'<li>%s</li>',
|
|
sprintf(
|
|
('%s is an exclusive taxonomy. Only one Tag of this taxonomy is allowed on an element.'),
|
|
sprintf('<strong>%s</strong>', h($taxonomy['Taxonomy']['namespace']))
|
|
)
|
|
);
|
|
} else {
|
|
foreach ($taxonomy['TaxonomyPredicate'] as $predicate) {
|
|
echo sprintf(
|
|
'<li>%s</li>',
|
|
sprintf(
|
|
('%s is an exclusive taxonomy predicate. Only one Tag of this predicate is allowed on an element'),
|
|
sprintf('<strong>%s</strong>', h($predicate['value']))
|
|
)
|
|
);
|
|
}
|
|
}
|
|
echo '</ul>';
|
|
}
|
|
?>
|
|
<?php echo '</ul>' ?>
|
|
</div>
|
|
<?php endif; ?>
|
|
<?php
|
|
if (!empty($event['RelatedEvent'])):
|
|
?>
|
|
<h3><?php echo __('Related Events');?></h3>
|
|
<div class="inline correlation-container">
|
|
<?php
|
|
$count = 0;
|
|
$display_threshold = 10;
|
|
$total = count($event['RelatedEvent']);
|
|
foreach ($event['RelatedEvent'] as $relatedEvent):
|
|
$count++;
|
|
if ($count == $display_threshold+1 && $total > $display_threshold):
|
|
?>
|
|
<div class="no-side-padding correlation-expand-button useCursorPointer linkButton blue"><?php echo __('Show (%s more)', $total - ($count-1));?></div>
|
|
<?php
|
|
endif;
|
|
?>
|
|
<?php
|
|
echo $this->element('/Events/View/related_event', array(
|
|
'related' => $relatedEvent['Event'],
|
|
'color_red' => $relatedEvent['Event']['orgc_id'] == $me['org_id'],
|
|
'hide' => $count > $display_threshold,
|
|
'relatedEventCorrelationCount' => $relatedEventCorrelationCount,
|
|
'from_id' => $event['Event']['id']
|
|
));
|
|
?>
|
|
<?php
|
|
endforeach;
|
|
if ($total > $display_threshold):
|
|
?>
|
|
<div class="no-side-padding correlation-collapse-button useCursorPointer linkButton blue" style="display:none;"><?php echo __('Collapse…');?></div>
|
|
<?php
|
|
endif;
|
|
?>
|
|
</div>
|
|
<?php
|
|
endif;
|
|
if (!empty($event['Feed']) || !empty($event['Event']['FeedCount'])):
|
|
?>
|
|
<h3><?= __('Related Feeds') ?> <a href="#attributeList" title="<?= __('Show just attributes that has feed hits') ?>" onclick="toggleBoolFilter('<?= $baseurl ?>/events/view/<?= h($event['Event']['id']) ?>', 'feed')"><?= __('(show)') ?></a></h3>
|
|
<?php
|
|
if (!empty($event['Feed'])):
|
|
?>
|
|
<div class="correlation-container">
|
|
<?php
|
|
foreach ($event['Feed'] as $relatedFeed):
|
|
$relatedData = array(
|
|
__('Name') => $relatedFeed['name'],
|
|
__('URL') => $relatedFeed['url'],
|
|
__('Provider') => $relatedFeed['provider'],
|
|
);
|
|
$popover = '';
|
|
foreach ($relatedData as $k => $v) {
|
|
$popover .= '<span class="bold">' . h($k) . '</span>: <span class="blue">' . h($v) . '</span><br>';
|
|
}
|
|
?>
|
|
<span style="white-space: nowrap;">
|
|
<?php
|
|
if ($relatedFeed ['source_format'] === 'misp'):
|
|
?>
|
|
<form action="<?php echo $baseurl; ?>/feeds/previewIndex/<?php echo h($relatedFeed['id']); ?>" method="post" style="margin:0px;">
|
|
<input type="hidden" name="data[Feed][eventid]" value="<?php echo h(json_encode($relatedFeed['event_uuids'])); ?>">
|
|
<input type="submit" class="linkButton useCursorPointer" value="<?php echo h($relatedFeed['name']) . ' (' . $relatedFeed['id'] . ')'; ?>" data-toggle="popover" data-content="<?php echo h($popover); ?>" data-trigger="hover">
|
|
</form>
|
|
<?php
|
|
else:
|
|
?>
|
|
<a href="<?php echo $baseurl; ?>/feeds/previewIndex/<?php echo h($relatedFeed['id']); ?>" data-toggle="popover" data-content="<?php echo h($popover); ?>" data-trigger="hover"><?php echo h($relatedFeed['name']) . ' (' . $relatedFeed['id'] . ')'; ?></a><br>
|
|
<?php
|
|
endif;
|
|
?>
|
|
</span>
|
|
<?php endforeach; ?>
|
|
</div>
|
|
<?php
|
|
elseif (!empty($event['Event']['FeedCount'])):
|
|
?>
|
|
<span>
|
|
<?php echo __('This event has ');?><span class="bold"><?php echo h($event['Event']['FeedCount']); ?></span>
|
|
<?php echo __('correlations with data contained within the various feeds, however, due to the large number of attributes the actual feed correlations are not shown. Click <a href="%s\/overrideLimit:1">here</a> to refresh the page with the feed data loaded.', h(Router::url(null, true)));?>
|
|
</span>
|
|
<?php
|
|
endif;
|
|
endif;
|
|
if (!empty($event['Server']) || !empty($event['Event']['ServerCount'])):
|
|
?>
|
|
<h3>Related Server</h3>
|
|
<?php
|
|
if (!empty($event['Server'])):
|
|
?>
|
|
<div class="correlation-container" style="margin-bottom: 15px;">
|
|
<?php
|
|
foreach ($event['Server'] as $relatedServer):
|
|
if (empty($relatedServer['id'])) {
|
|
continue;
|
|
}
|
|
$relatedData = array('Name' => $relatedServer['name'], 'URL' => $relatedServer['url']);
|
|
$popover = '';
|
|
foreach ($relatedData as $k => $v) {
|
|
$popover .= '<span class=\'bold\'>' . h($k) . '</span>: <span class="blue">' . h($v) . '</span><br />';
|
|
}
|
|
?>
|
|
<span style="white-space: nowrap; display: inline-block">
|
|
<a href="<?php echo $baseurl; ?>/servers/previewIndex/<?php echo h($relatedServer['id']); ?>" class="linkButton useCursorPointer" data-toggle="popover" data-content="<?php echo h($popover); ?>" data-trigger="hover"><?php echo h($relatedServer['name']) . ' (' . $relatedServer['id'] . ')'; ?></a>
|
|
</span>
|
|
<?php
|
|
endforeach;
|
|
?>
|
|
</div>
|
|
<?php
|
|
elseif (!empty($event['Event']['FeedCount'])):
|
|
?>
|
|
<span>
|
|
<?php echo __('This event has ');?><span class="bold"><?php echo h($event['Event']['FeedCount']); ?></span>
|
|
<?php echo __('correlations with data contained within the various feeds, however, due to the large number of attributes the actual feed correlations are not shown. Click <a href="%s\/overrideLimit:1">here</a> to refresh the page with the feed data loaded.', h(Router::url(null, true)));?>
|
|
</span>
|
|
<?php
|
|
endif;
|
|
endif;
|
|
?>
|
|
<?php if (!empty($event['warnings'])): ?>
|
|
<div class="warning_container">
|
|
<h4 class="red">
|
|
<?= __('Warning: Potential false positives') ?>
|
|
<a href="#attributeList" title="<?= __('Show just attributes that has warning') ?>" onclick="toggleBoolFilter('<?= $baseurl ?>/events/view/<?= h($event['Event']['id']) ?>', 'warning')"><?= __('(show)') ?></a>
|
|
</h4>
|
|
<?php
|
|
$links = [];
|
|
foreach ($event['warnings'] as $id => $name) {
|
|
$links[] = '<a href="' . $baseurl . '/warninglists/view/' . $id . '">' . h($name) . '</a>';
|
|
}
|
|
echo implode('<br>', $links);
|
|
?>
|
|
</div>
|
|
<?php endif; ?>
|
|
</div>
|
|
</div>
|
|
<br />
|
|
<div id="eventToggleButtons">
|
|
<button class="btn btn-inverse toggle-left qet" id="pivots_toggle" data-toggle-type="pivots">
|
|
<span class="fas fa-minus" title="<?php echo __('Toggle pivot graph');?>" role="button" tabindex="0" aria-label="<?php echo __('Toggle pivot graph');?>"></span><?php echo __('Pivots');?>
|
|
</button>
|
|
<button class="btn btn-inverse toggle qet" id="galaxies_toggle" data-toggle-type="galaxies">
|
|
<span class="fas fa-minus" title="<?php echo __('Toggle galaxies');?>" role="button" tabindex="0" aria-label="<?php echo __('Toggle galaxies');?>"></span><?php echo __('Galaxy');?>
|
|
</button>
|
|
<button class="btn btn-inverse toggle qet" id="eventgraph_toggle" data-toggle-type="eventgraph" onclick="enable_interactive_graph();">
|
|
<span class="fas fa-plus" title="<?php echo __('Toggle Event graph');?>" role="button" tabindex="0" aria-label="<?php echo __('Toggle Event graph');?>"></span><?php echo __('Event graph');?>
|
|
</button>
|
|
<button class="btn btn-inverse toggle qet" id="eventtimeline_toggle" data-toggle-type="eventtimeline" onclick="enable_timeline();">
|
|
<span class="fas fa-plus" title="<?php echo __('Toggle Event timeline');?>" role="button" tabindex="0" aria-label="<?php echo __('Toggle Event timeline');?>"></span><?php echo __('Event timeline');?>
|
|
</button>
|
|
<button class="btn btn-inverse toggle qet" id="correlationgraph_toggle" data-toggle-type="correlationgraph" data-load-url="<?= $baseurl ?>/events/viewGraph/<?= h($event['Event']['id']) ?>">
|
|
<span class="fas fa-plus" title="<?php echo __('Toggle Correlation graph');?>" role="button" tabindex="0" aria-label="<?php echo __('Toggle Correlation graph');?>"></span><?php echo __('Correlation graph');?>
|
|
</button>
|
|
<button class="btn btn-inverse toggle qet" id="attackmatrix_toggle" data-toggle-type="attackmatrix" data-load-url="<?= $baseurl; ?>/events/viewGalaxyMatrix/<?= h($event['Event']['id']) ?>/mitre-attack/event/1">
|
|
<span class="fas fa-plus" title="<?php echo __('Toggle ATT&CK matrix');?>" role="button" tabindex="0" aria-label="<?php echo __('Toggle ATT&CK matrix');?>"></span><?php echo __('ATT&CK matrix');?>
|
|
</button>
|
|
<button class="btn btn-inverse toggle qet" id="eventreport_toggle" data-toggle-type="eventreport">
|
|
<span class="fas fa-plus" title="<?php echo __('Toggle reports');?>" role="button" tabindex="0" aria-label="<?php echo __('Toggle reports');?>"></span><?php echo __('Event reports');?>
|
|
</button>
|
|
<button class="btn btn-inverse toggle qet" id="attributes_toggle" data-toggle-type="attributes">
|
|
<span class="fas fa-minus" title="<?php echo __('Toggle attributes');?>" role="button" tabindex="0" aria-label="<?php echo __('Toggle attributes');?>"></span><?php echo __('Attributes');?>
|
|
</button>
|
|
<button class="btn btn-inverse toggle-right qet" id="discussions_toggle" data-toggle-type="discussions">
|
|
<span class="fas fa-minus" title="<?php echo __('Toggle discussions');?>" role="button" tabindex="0" aria-label="<?php echo __('Toggle discussions');?>"></span><?php echo __('Discussion');?>
|
|
</button>
|
|
</div>
|
|
<br />
|
|
<br />
|
|
<div id="pivots_div">
|
|
<?php if (sizeOf($allPivots) > 1) echo $this->element('pivot'); ?>
|
|
</div>
|
|
<div id="galaxies_div">
|
|
<span class="title-section"><?= __('Galaxies') ?></span>
|
|
<?= $this->element('galaxyQuickViewNew', [
|
|
'mayModify' => $mayModify,
|
|
'isAclTagger' => $isAclTagger,
|
|
'data' => $event['Galaxy'],
|
|
'event' => $event,
|
|
'target_id' => $event['Event']['id'],
|
|
'target_type' => 'event'
|
|
]); ?>
|
|
</div>
|
|
<div id="eventgraph_div" class="info_container_eventgraph_network" style="display: none;" data-fullscreen="false">
|
|
<?php echo $this->element('view_event_graph'); ?>
|
|
</div>
|
|
<div id="eventtimeline_div" class="info_container_eventtimeline" style="display: none;" data-fullscreen="false">
|
|
<?php echo $this->element('view_timeline'); ?>
|
|
</div>
|
|
<div id="correlationgraph_div" class="info_container_eventgraph_network" style="display: none;" data-fullscreen="false">
|
|
</div>
|
|
<div id="attackmatrix_div" class="info_container_eventgraph_network" style="display: none;" data-fullscreen="false">
|
|
</div>
|
|
<div id="eventreport_div" style="display: none;">
|
|
<span class="report-title-section"><?php echo __('Event Reports');?></span>
|
|
<div id="eventreport_content"></div>
|
|
</div>
|
|
<div id="clusterrelation_div" class="info_container_eventgraph_network" style="display: none;" data-fullscreen="false">
|
|
</div>
|
|
<div id="attributes_div">
|
|
<?php echo $this->element('eventattribute'); ?>
|
|
</div>
|
|
<div id="discussions_div">
|
|
</div>
|
|
</div>
|
|
<script type="text/javascript">
|
|
var showContext = false;
|
|
$(function () {
|
|
queryEventLock('<?= h($event['Event']['id']); ?>', <?= (int)$event['Event']['timestamp'] ?>);
|
|
popoverStartup();
|
|
|
|
$("th, td, dt, div, span, li").tooltip({
|
|
'placement': 'top',
|
|
'container' : 'body',
|
|
delay: { show: 500, hide: 100 }
|
|
});
|
|
|
|
$.get("<?php echo $baseurl; ?>/threads/view/<?php echo h($event['Event']['id']); ?>/true", function(data) {
|
|
$("#discussions_div").html(data);
|
|
});
|
|
|
|
$.get("<?php echo $baseurl; ?>/eventReports/index/event_id:<?= h($event['Event']['id']); ?>/index_for_event:1<?= $extended ? '/extended_event:1' : ''?>", function(data) {
|
|
$("#eventreport_content").html(data);
|
|
if ($('#eventreport_content table tbody > tr').length) { // open if contain a report
|
|
$('#eventreport_toggle').click()
|
|
}
|
|
});
|
|
});
|
|
</script>
|