zeek/scripts/policy/frameworks
Seth Hall d89ee3cee0 Change the meaning of some email fields.
We now extract email addresses in the fields that one would expect
to contain addresses.  This makes further downstream processing of
these fields easier like log analysis or using these fields in the
Intel framework.  The primary downside is that any other content
in these fields is no longer available such as full name and any
group information.  I believe the simplification of the content in
these fields is worth the change.

Added "cc" to the script that feeds information from SMTP into the
Intel framework.

A new script for email handling utility functions has been created
as a side effect of these changes.
2016-06-15 10:32:06 -04:00
..
communication Enable Bro to communicate with peers over non-global IPv6 addresses. 2012-05-17 12:59:20 -05:00
control Correct a typo in controller.bro documentation 2015-10-21 12:48:35 -05:00
dpd Fix typos and formatting in the policy/frameworks docs 2013-10-21 01:23:08 -05:00
files hash-all-files.bro depends on base/files/hash 2015-09-11 13:01:43 +02:00
intel Change the meaning of some email fields. 2016-06-15 10:32:06 -04:00
packet-filter Fix typos and formatting in the policy/frameworks docs 2013-10-21 01:23:08 -05:00
signatures Hopefully the last major script reorganization. 2011-08-05 23:09:53 -04:00
software Update windows-version-detection.bro 2015-12-04 09:46:14 -05:00