secubox/secubox-deb
1
0
Fork 0
mirror of https://github.com/CyberMind-FR/secubox-deb.git synced 2026-07-29 12:34:38 +00:00
Code Issues Actions 1 Packages Projects Releases Wiki Activity
de15a18c30
secubox-deb/packages/secubox-network-anomaly
History
CyberMind-FR 30f138d091 docs(dns,threats): naming-clarity sweep on 6 placeholder Descriptions (closes #383) 
Six packages in the dns + threats clusters shipped "X Module"
placeholder Description headlines that didn't help operators choose
between siblings. Phase 1 consolidation audit + #382 (dpi clarity)
established the pattern; this completes the dns and threats halves.

Each Description now:
  - States the actual subsystem in the headline (no "X Module"
    placeholders)
  - Names the backend it talks to (BIND, dnsmasq, unbound, CrowdSec)
  - Cross-references the sibling packages so operators reading
    apt-cache show know what to install for what

DNS cluster:
  - secubox-dns: "Dns Module" → "authoritative BIND zone manager"
  - secubox-dns-guard: "Dns-guard Module" → "anomaly detection +
    dnsmasq blocking"
  - secubox-vortex-dns: "Vortex-dns Module" → "recursive firewall
    with RPZ + threat feeds"
  - (dns-provider, ad-guard already had informative headlines —
    not touched)

Threats cluster:
  - secubox-threat-analyst: "Threat-analyst Module" → "AI agent
    that writes CrowdSec scenarios"
  - secubox-cve-triage: "Cve-triage Module" → "vulnerability
    assessment workflow"
  - secubox-network-anomaly: "Network-anomaly Module" → "DNS-log
    anomaly detection"
  - (threats, cyberfeed, ipblock, openclaw already had informative
    headlines — not touched)

Also corrected the Maintainer from the placeholder
"SecuBox <dev@secubox.local>" to "Gerald KERMA <devel@cybermind.fr>"
on four of six packages, and added explicit Recommends: for the
backend daemons each uses (dnsmasq for dns-guard + network-anomaly,
unbound + dnsmasq for vortex-dns, crowdsec for threat-analyst).

Patch-version bump on each (1.0.0 → 1.0.1; 1.4.0 → 1.4.1 for
threat-analyst) so the metadata change ships in apt.

No code, endpoints, services, nginx routes, menu entries, or
inter-package dependencies changed. dpkg-parsechangelog parses
cleanly on all six.
2026-05-27 08:25:54 +02:00
..
api feat(api): Enhance 5 security modules with production-ready features 2026-03-27 11:22:47 +01:00
debian docs(dns,threats): naming-clarity sweep on 6 placeholder Descriptions (closes #383) 2026-05-27 08:25:54 +02:00
menu.d feat(navbar): consolidate to 6 charter categories + fix dropped menu entries (closes #306) (#307) 2026-05-21 10:03:05 +02:00
www/network-anomaly fix(web): rewrite stale /portal/login.html -> /login.html (closes #222) (#223) 2026-05-19 11:44:43 +02:00
README.md docs: Add Eye Remote Multigadget skill and wiki 2026-05-10 09:12:42 +02:00

README.md

📉 Network Anomaly

Network anomaly detection

Category: Network

Screenshot

Network Anomaly

Features

  • Traffic baselines
  • Anomaly alerts
  • ML detection
  • Visualization

Installation

# Add SecuBox repository
curl -fsSL https://apt.secubox.in/install.sh | sudo bash

# Install package
sudo apt install secubox-network-anomaly

Configuration

Configuration file: /etc/secubox/network-anomaly.toml

API Endpoints

  • GET /api/v1/network-anomaly/status - Module status
  • GET /api/v1/network-anomaly/health - Health check

License

MIT License - CyberMind © 2024-2026