mirror of
https://github.com/zeek/zeek.git
synced 2025-10-03 23:28:20 +00:00

- Basic API seems to works, but tests aren't updated yet. - Several scripts are available in policy/frameworks/intel that call the "seen" function to provide data into the intel framework to be tested. - Intel::policy is not done yet and needs to be discussed to figure out what it needs to have. - Running the intel framework and having it do something finally is really cool!
8 lines
157 B
Text
8 lines
157 B
Text
@load ./main
|
|
@load ./input
|
|
|
|
# The cluster framework must be loaded first.
|
|
@load base/frameworks/cluster
|
|
@if ( Cluster::is_enabled() )
|
|
@load ./cluster
|
|
@endif
|