zeek/scripts/base/frameworks/notice
Robin Sommer bd63cf2e36 Merge remote-tracking branch 'origin/topic/jazoff/notice_file_info'
* origin/topic/jazoff/notice_file_info:
  Include file information in notices

BIT-1113 #merged

I'm wondering if there's a way to test creating these emails ... ?
2014-01-20 12:01:44 -08:00
..
actions Document which Bro script vars are set by BroControl 2013-10-22 16:40:29 -05:00
extend-email Updates for the notices framework. 2013-02-11 14:36:14 -05:00
__load__.bro Updates for the notices framework. 2013-02-11 14:36:14 -05:00
cluster.bro change Notice::suppressing to be a table of times 2013-12-31 10:09:44 -05:00
main.bro Merge remote-tracking branch 'origin/topic/jazoff/notice_file_info' 2014-01-20 12:01:44 -08:00
non-cluster.bro Fix typos and formatting in the notice framework docs 2013-10-22 09:16:29 -05:00
README Add more script package README files 2013-10-22 14:44:59 -05:00
weird.bro Fix typos and formatting in the notice framework docs 2013-10-22 09:16:29 -05:00

The notice framework enables Bro to "notice" things which are odd or
potentially bad, leaving it to the local configuration to define which
of them are actionable.  This decoupling of detection and reporting allows
Bro to be customized to the different needs that sites have.