mirror of
https://github.com/zeek/zeek.git
synced 2025-10-17 05:58:20 +00:00

This is based on commit 99e6942efec5feff50523f6b2a1f5868f19ab638 from the zeek-docs repo.
7 lines
194 B
Text
7 lines
194 B
Text
@load policy/protocols/ssh/interesting-hostnames.zeek
|
|
|
|
hook Notice::policy(n: Notice::Info)
|
|
{
|
|
if ( n$note == SSH::Interesting_Hostname_Login )
|
|
add n$actions[Notice::ACTION_EMAIL];
|
|
}
|