search

activecm / rita-legacy

Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis.
GNU General Public License v3.0
2.51k stars 362 forks source link

Disable SNI connection analysis if SNI beacon analysis is disabled #798

Closed Zalgo2462 closed 1 year ago

Zalgo2462 commented 1 year ago

Currently, if a user disables the SNI beacon analysis, the user will still have to wait for the SNI connection analysis to finish even though the data will not be used for anything.

This PR ensures that RITA skips the SNI connection analysis if the SNI beaocn analysis is disabled.