Arne Welzel
6061c9c542
SMTP: Adapt scripts for SMTP::enable_mail_data_file_analysis
...
Specifically, set a file's parent_id to the mail_fuid if that's
set and take into account the current mail_fuid for describe_file()
to avoid fuid collisions of top-level mail and mime attachments.
2025-07-15 20:17:53 +02:00
Arne Welzel
8c5896a74d
scripts: Migrate table iteration to blank identifiers
...
No obvious hot-cases. Maybe the describe_file() ones or the intel ones
if/when there are hot intel hits.
2022-10-24 10:36:09 +02:00
Jon Siwek
a994be9eeb
Merge remote-tracking branch 'origin/topic/seth/zeek_init'
...
* origin/topic/seth/zeek_init:
Some more testing fixes.
Update docs and tests for bro_(init|done) -> zeek_(init|done)
Implement the zeek_init handler.
2019-04-19 11:24:29 -07:00
Daniel Thayer
18bd74454b
Rename all scripts to have ".zeek" file extension
2019-04-11 21:12:40 -05:00