Site Monitoring - Core Algorithm
- Watcher.site_monitoring.core.check_content(site, alert, ua)
Monitor Website Content.
- Parameters:
site – Site Object.
alert – Alert Integer.
ua – User Agent.
- Returns:
alert, score
- Return type:
int, int
- Watcher.site_monitoring.core.check_ip(site, alert)
Monitor IP Address.
- Parameters:
site – Site Object.
alert – Alert Integer.
- Returns:
alert, new_ip, new_ip_second
- Return type:
int, str, str
- Watcher.site_monitoring.core.check_mail(site, alert)
Monitor Mail (MX Records + mail.example.com).
- Parameters:
site – Site Object.
alert – Alert Integer.
- Returns:
alert
- Return type:
int
- Watcher.site_monitoring.core.create_alert(alert, site, new_ip, new_ip_second, score)
Create Alerts & Emails.
- Parameters:
alert – Alert Integer.
site – Site Object.
new_ip – New IP.
new_ip_second – New Second IP.
score – TLSH Score.
- Returns:
- Watcher.site_monitoring.core.monitoring_check()
Main monitoring function.
- Watcher.site_monitoring.core.monitoring_init(site)
Init the monitoring for a specific website.
- Parameters:
site – Site Object.
- Returns:
- Watcher.site_monitoring.core.previous_alert(site, alert_type, alert_pk)
Check if there was a previous Alert created for the same website in the last hour.
- Parameters:
alert_pk – Bypass Alert ID.
site – Site Object.
alert_type – Alert type.
- Returns:
True if there is a previous Alert.
- Return type:
bool
- Watcher.site_monitoring.core.send_email(message, rtir, alert_id)
Send Email alert.
- Parameters:
alert_id – Alert ID.
message – Subject email end message.
rtir – Identification number of RTIR.
- Returns:
- Watcher.site_monitoring.core.start_scheduler()
- Launch multiple planning tasks in background:
Fire monitoring_check from Monday to Sunday : minute=’*/6’
- Watcher.site_monitoring.core.tlsh_score(response, site, alert)
Caculate TLSH Score.
- Parameters:
response – Http response.
site – Site Object.
alert – Alert Integer.
- Returns:
alert, score
- Return type:
int, int