package threat

// 威胁检测相关常量
const (
	// 告警级别
	AlertLevelLow    = "low"
	AlertLevelMedium = "medium"
	AlertLevelHigh   = "high"

	// 告警类型
	AlertTypeQueryRate       = "query_rate"
	AlertTypeSuspiciousDomain = "suspicious_domain"
	AlertTypeDNSTunnel       = "dns_tunnel"
	AlertTypeNXDomain        = "nxdomain"
	AlertTypeUnusualQuery    = "unusual_query"
	AlertTypeGeoLocation     = "geo_location"

	// 处理动作
	ActionBlocked = "blocked"
	ActionAllowed = "allowed"
)