2 commits

Author	SHA1	Message	Date
Jan Grashoefer	cafae5351b	Added support for subnets to intel-framework. ... The intel-framework now supports the new indicator type Intel::SUBNET. As subnets are matched against seen addresses, the field matched was introduced to indicate which indicator types caused the hit. A testcase for subents was added and the old ones have been updated accordingly.	2016-03-22 19:16:51 +01:00
Jan Grashoefer	c5c650b486	Added testcase for intel updates. ... By addind debug output to Intel::insert() the testcase reveals that updating an intel item will cause its metadata to be inserted again, without the old being deleted.	2016-03-19 17:02:52 +01:00