- 特征检测(规则/签名)与行为检测(24h 统计)单进程运行 - 融合名单按首次发现时间倒序,展示位置/归属(GeoIP + ASN) - 钉钉融合推送(加签、24h 节流、去重) - 页面状态灯、CSV 导出、Docker 镜像构建文件
25 lines
325 B
Plaintext
25 lines
325 B
Plaintext
# 凭据
|
||
graylog-ops.json
|
||
notify.json
|
||
config.local.json
|
||
*.token
|
||
|
||
# 运行时数据/采集产物
|
||
data/
|
||
collect-*/
|
||
graylog-snapshot-*/
|
||
graylog-collect-*/
|
||
snapshots/
|
||
*.tar.gz
|
||
*.log
|
||
.DS_Store
|
||
|
||
# Python
|
||
__pycache__/
|
||
*.pyc
|
||
.venv/
|
||
|
||
# Docker 构建临时目录(由 Dockerfile 生成 staging)
|
||
docker-build/app/
|
||
docker-build/seed/
|