mirror of
https://github.com/zeek/zeek.git
synced 2025-10-02 14:48:21 +00:00
![]() The intel framework can now indicate which node discovered a hit on an intel item through the new "node" field in the Intel::Seen data structure. On clusters, this field will contain the name of the node where the hit was seen. |
||
---|---|---|
.. | ||
__load__.bro | ||
cluster.bro | ||
input.bro | ||
main.bro | ||
README |
The intelligence framework provides a way to store and query intelligence data (such as IP addresses or strings). Metadata can also be associated with the intelligence.