mirror of
https://github.com/zeek/zeek.git
synced 2025-10-09 18:18:19 +00:00
5d340e669c
Expiration of intelligence items can be configured using Intel::item_expiration. Expiration can be handled using the Intel::item_expired hook.
10 lines
155 B
Text
10 lines
155 B
Text
|
|
@load base/frameworks/intel
|
|
|
|
module Intel;
|
|
|
|
hook item_expired(indicator: string, indicator_type: Type,
|
|
metas: set[MetaData]) &priority=-10
|
|
{
|
|
break;
|
|
}
|