12 (High)\n";
$tgMsg .= "🆔 Rule ID: 5716\n";
$tgMsg .= "🖥 Agent: WEB-SERVER-01\n";
$tgMsg .= "🌐 IP Address: 192.168.1.100\n";
$tgMsg .= "━━━━━━━━━━━━━━━━━━━━\n";
$tgMsg .= "📝 Description:\nเข้าสู่ระบบล้มเหลวหลายครั้งติดต่อกัน (อาจมีการ Brute-force)\n\n";
$tgMsg .= "📍 Action Taken:\n";
$tgMsg .= "✅ Auto-created Investigation Case #105\n";
$tgMsg .= "🤖 AI Remediation Analysis queued.\n\n";
$tgMsg .= "✅ System Integration Test Successful!";
$success = \App\Integrations\Notifier::sendTelegram($tgMsg);
} else {
echo json_encode(['status' => 'error', 'message' => 'Invalid type']);
return;
}
if ($success) {
echo json_encode(['status' => 'success', 'message' => ucfirst($type) . ' notification sent successfully!']);
} else {
echo json_encode(['status' => 'error', 'message' => 'Failed to send notification. Please check your tokens.']);
}
});
$router->post('/clear-all-alerts', function() {
$controller = new DashboardController();
$controller->clearAllAlerts();
});
$router->post('/virustotal-check', function() {
header('Content-Type: application/json');
$type = $_POST['type'] ?? '';
$value = $_POST['value'] ?? '';
$apiKey = $_ENV['VIRUSTOTAL_API_KEY'] ?? '';
if (empty($apiKey)) {
echo json_encode(['status' => 'error', 'message' => 'VIRUSTOTAL_API_KEY is not configured in .env']);
return;
}
if (empty($value)) {
echo json_encode(['status' => 'error', 'message' => 'No value provided for scanning.']);
return;
}
$url = "";
if ($type === 'hash') {
$url = "https://www.virustotal.com/api/v3/files/" . urlencode($value);
} else if ($type === 'ip') {
$url = "https://www.virustotal.com/api/v3/ip_addresses/" . urlencode($value);
} else {
echo json_encode(['status' => 'error', 'message' => 'Invalid scan type.']);
return;
}
$ch = curl_init();
curl_setopt($ch, CURLOPT_URL, $url);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
curl_setopt($ch, CURLOPT_HTTPHEADER, [
"x-apikey: {$apiKey}"
]);
$response = curl_exec($ch);
$httpcode = curl_getinfo($ch, CURLINFO_HTTP_CODE);
curl_close($ch);
if ($httpcode == 200) {
$data = json_decode($response, true);
$stats = $data['data']['attributes']['last_analysis_stats'] ?? null;
if ($stats) {
$malicious = $stats['malicious'] ?? 0;
$suspicious = $stats['suspicious'] ?? 0;
$total = array_sum($stats);
$html = "