diff --git a/scripts/policy/frameworks/intel/http-url.bro b/scripts/policy/frameworks/intel/http-url.bro index 7c4086a7e6..feef4f0dac 100644 --- a/scripts/policy/frameworks/intel/http-url.bro +++ b/scripts/policy/frameworks/intel/http-url.bro @@ -1,4 +1,5 @@ @load base/frameworks/intel +@load base/protocols/http/utils @load ./where-locations event http_message_done(c: connection, is_orig: bool, stat: http_message_stat) diff --git a/scripts/policy/frameworks/intel/smtp.bro b/scripts/policy/frameworks/intel/smtp.bro index f44f0575dc..02e97ea54a 100644 --- a/scripts/policy/frameworks/intel/smtp.bro +++ b/scripts/policy/frameworks/intel/smtp.bro @@ -1,4 +1,5 @@ @load base/frameworks/intel +@load base/protocols/smtp @load ./where-locations event mime_end_entity(c: connection) diff --git a/scripts/policy/frameworks/intel/ssl.bro b/scripts/policy/frameworks/intel/ssl.bro index 394df63020..3f18a11e6e 100644 --- a/scripts/policy/frameworks/intel/ssl.bro +++ b/scripts/policy/frameworks/intel/ssl.bro @@ -1,4 +1,5 @@ @load base/frameworks/intel +@load base/protocols/ssl @load ./where-locations event x509_certificate(c: connection, is_orig: bool, cert: X509, chain_idx: count, chain_len: count, der_cert: string) diff --git a/scripts/policy/integration/collective-intel/main.bro b/scripts/policy/integration/collective-intel/main.bro index f347ba8867..a1ee7a4ab9 100644 --- a/scripts/policy/integration/collective-intel/main.bro +++ b/scripts/policy/integration/collective-intel/main.bro @@ -1,4 +1,6 @@ +@load base/frameworks/intel + module Intel; ## These are some fields to add extended compatibility between Bro and the Collective @@ -10,4 +12,4 @@ redef record Intel::MetaData += { cif_severity: string &optional; ## Maps to the Confidence field in the Collective Intelligence Framework. cif_confidence: double &optional; -}; \ No newline at end of file +};