zeek/scripts/policy/integration/collective-intel/main.bro
2013-10-21 02:37:00 -05:00

15 lines
519 B
Text

@load base/frameworks/intel
module Intel;
## These are some fields to add extended compatibility between Bro and the
## Collective Intelligence Framework.
redef record Intel::MetaData += {
## Maps to the Impact field in the Collective Intelligence Framework.
cif_impact: string &optional;
## Maps to the Severity field in the Collective Intelligence Framework.
cif_severity: string &optional;
## Maps to the Confidence field in the Collective Intelligence Framework.
cif_confidence: double &optional;
};