mirror of
https://github.com/zeek/zeek.git
synced 2025-10-02 22:58:20 +00:00
7e9d48f532
The broxygen-generated files now live in the git repo, have tests that check that they are up-to-date, and a script to re-generate them on-demand.
29 lines
986 B
ReStructuredText
29 lines
986 B
ReStructuredText
:orphan:
|
|
|
|
Package: base/frameworks/intel
|
|
==============================
|
|
|
|
The intelligence framework provides a way to store and query intelligence
|
|
data (such as IP addresses or strings). Metadata can also be associated
|
|
with the intelligence.
|
|
|
|
:doc:`/scripts/base/frameworks/intel/__load__.bro`
|
|
|
|
|
|
:doc:`/scripts/base/frameworks/intel/main.bro`
|
|
|
|
The intelligence framework provides a way to store and query intelligence
|
|
data (e.g. IP addresses, URLs and hashes). The intelligence items can be
|
|
associated with metadata to allow informed decisions about matching and
|
|
handling.
|
|
|
|
:doc:`/scripts/base/frameworks/intel/files.bro`
|
|
|
|
File analysis framework integration for the intelligence framework. This
|
|
script manages file information in intelligence framework data structures.
|
|
|
|
:doc:`/scripts/base/frameworks/intel/input.bro`
|
|
|
|
Input handling for the intelligence framework. This script implements the
|
|
import of intelligence data from files using the input framework.
|
|
|