zeek/scripts/policy/integration/collective-intel/main.zeek
2019-04-11 21:12:40 -05:00

15 lines
519 B
Text

@load base/frameworks/intel
module Intel;
## These are some fields to add extended compatibility between Bro and the
## Collective Intelligence Framework.
redef record Intel::MetaData += {
## Maps to the Impact field in the Collective Intelligence Framework.
cif_impact: string &optional;
## Maps to the Severity field in the Collective Intelligence Framework.
cif_severity: string &optional;
## Maps to the Confidence field in the Collective Intelligence Framework.
cif_confidence: double &optional;
};