zeek/scripts/base/frameworks/intel
Benjamin Bannier d5fd29edcd Prefer explicit construction to coercion in record initialization
While we support initializing records via coercion from an expression
list, e.g.,

    local x: X = [$x1=1, $x2=2];

this can sometimes obscure the code to readers, e.g., when assigning to
value declared and typed elsewhere. The language runtime has a similar
overhead since instead of just constructing a known type it needs to
check at runtime that the coercion from the expression list is valid;
this can be slower than just writing the readible code in the first
place, see #4559.

With this patch we use explicit construction, e.g.,

    local x = X($x1=1, $x2=2);
2025-07-11 16:28:37 -07:00
..
__load__.zeek Rename all scripts to have ".zeek" file extension 2019-04-11 21:12:40 -05:00
cluster.zeek intel: Add indicator_inserted and indicator_removed hooks 2025-06-02 09:50:48 +02:00
files.zeek scripts: Migrate table iteration to blank identifiers 2022-10-24 10:36:09 +02:00
input.zeek Prefer explicit construction to coercion in record initialization 2025-07-11 16:28:37 -07:00
main.zeek Prefer explicit construction to coercion in record initialization 2025-07-11 16:28:37 -07:00
README Add README files for most Bro frameworks 2013-10-11 00:19:37 -05:00

The intelligence framework provides a way to store and query intelligence
data (such as IP addresses or strings). Metadata can also be associated
with the intelligence.