Function resetThreatIntelligence

web/scripts/ragnar_modern.js:8043–8070

()

        const _kt = Object.values(_kc).reduce((a, b) => a + (b || 0), 0);
        html += `<p class="text-xs text-gray-500 mb-2">Interface: ${escapeHtml(d.interface || '—')} · ${d.seconds}s · SMBv1 servers: ${(smb.v1_servers || []).length}, SMB2/3 pkts: ${smb.v2_count || 0} · responders: ${(nr.responders || []).length} · queries L${q.llmnr || 0}/N${q.nbtns || 0}/m${q.mdns || 0} · Kerberos msgs: ${_kt}${d.learned ? ' · <span class="text-gray-400">baseline learned now</span>' : ''}</p>`;
        if ((smb.v1_servers || []).length) {
            html += '<p class="text-xs uppercase text-gray-400 mt-2 mb-1">SMBv1 servers</p>' +
                '<table class="min-w-full text-xs text-gray-300 whitespace-nowrap"><thead>' +
                '<tr class="text-left text-gray-500"><th class="px-2 py-1">Host</th><th class="px-2 py-1">Mode</th><th class="px-2 py-1">Status</th></tr>' +
                '</thead><tbody>' +
                smb.v1_servers.map(s => {
                    const mode = s.mode === 'active' ? '<span class="text-red-300">active</span>' : '<span class="text-amber-300">offered</span>';
                    return `<tr class="border-t border-slate-800">
                        <td class="px-2 py-1 font-mono">${escapeHtml(s.ip)}</td>
                        <td class="px-2 py-1">${mode}</td>
                        <td class="px-2 py-1">${s.known ? '<span class="text-gray-500">known legacy</span>' : '<span class="text-amber-300">seen</span>'}</td>
                    </tr>`;
                }).join('') +
                '</tbody></table>';
        }
        if ((nr.responders || []).length) {
            html += '<p class="text-xs uppercase text-gray-400 mt-2 mb-1">Name-resolution responders</p>' +
                '<table class="min-w-full text-xs text-gray-300 whitespace-nowrap"><thead>' +
                '<tr class="text-left text-gray-500"><th class="px-2 py-1">Responder</th><th class="px-2 py-1">Proto</th><th class="px-2 py-1">Answered names</th><th class="px-2 py-1">Status</th></tr>' +
                '</thead><tbody>' +
                nr.responders.map(r => {
                    const poison = (r.protos || []).some(p => p === 'llmnr' || p === 'nbtns') || r.highvalue.length;
                    const badge = poison ? '<span class="text-red-300">poisoner</span>' : (r.known ? '<span class="text-green-400">known mDNS</span>' : '<span class="text-amber-300">mDNS</span>');
                    const names = (r.names || []).join(', ') + (r.highvalue.length ? ' ⚠WPAD' : '');
                    return `<tr class="border-t border-slate-800">
                        <td class="px-2 py-1 font-mono ${poison ? 'text-red-300' : ''}">${escapeHtml(r.ip)}</td>
                        <td class="px-2 py-1 text-gray-400">${escapeHtml((r.protos || []).join('/').toUpperCase())}</td>
                        <td class="px-2 py-1 font-mono text-gray-400">${escapeHtml(names || '—')}</td>
                        <td class="px-2 py-1">${badge}</td>
                    </tr>`;
                }).join('') +