zeek/scripts/policy/frameworks/intel
Seth Hall 9b444b2617 Updates for the Intel Framework.
- Intel importing format has changed (refer to docs).

 - All string matching is now case insensitive.

 - SMTP intel script has been updated to extract email
   addresses correctly.

 - Small fix sneaking into the smtp base script to actually
   extract individual email addresses in the To: field
   correctly.
2013-07-19 13:16:12 -04:00
..
__load__.bro Extracting URLs from message bodies over SMTP and sending them to Intel framework. 2012-10-31 08:46:40 -04:00
conn-established.bro Updates for the Intel Framework. 2013-07-19 13:16:12 -04:00
dns.bro Updates for the Intel Framework. 2013-07-19 13:16:12 -04:00
http-host-header.bro Updates for the Intel Framework. 2013-07-19 13:16:12 -04:00
http-url.bro Updates for the Intel Framework. 2013-07-19 13:16:12 -04:00
http-user-agents.bro Updates for the Intel Framework. 2013-07-19 13:16:12 -04:00
smtp-url-extraction.bro Updates for the Intel Framework. 2013-07-19 13:16:12 -04:00
smtp.bro Updates for the Intel Framework. 2013-07-19 13:16:12 -04:00
ssl.bro Updates for the Intel Framework. 2013-07-19 13:16:12 -04:00
where-locations.bro Extracting URLs from message bodies over SMTP and sending them to Intel framework. 2012-10-31 08:46:40 -04:00