zeek/scripts/base/frameworks/intel at 41606e18fb555b0425bfb32d6777e0abfeb95aeb - Mirror/zeek

mirror of https://github.com/zeek/zeek.git synced 2025-10-06 16:48:19 +00:00

History

Johanna Amann 41606e18fb Intel: Allow to provide uid/fuid instead of conn/f. This patch allows users to provide the fuid or the connection id directly, in case they do not have access to either in the event that they handle. An example for this is the handling of certificates in SSL, where the fa_file record cannot be retained because this would create a cyclic data structure. This patch also provides file IDs for hostname matches in certificates, which was not possible with the previous API.		2016-04-25 16:54:47 -07:00
..
__load__.bro	Only the manager tries to read files with the input framework now.	2012-10-10 13:00:48 -04:00
cluster.bro	Fix typos and formatting in the intel framework docs	2013-10-10 15:23:19 -05:00
input.bro	Fix typos and formatting in the intel framework docs	2013-10-10 15:23:19 -05:00
main.bro	Intel: Allow to provide uid/fuid instead of conn/f.	2016-04-25 16:54:47 -07:00
README	Add README files for most Bro frameworks	2013-10-11 00:19:37 -05:00

README

The intelligence framework provides a way to store and query intelligence
data (such as IP addresses or strings). Metadata can also be associated
with the intelligence.