mirror of https://github.com/MISP/mail_to_misp
identify forwarded messages
parent
7946de1ca9
commit
6c63a88579
|
@ -31,5 +31,8 @@ malwaretags = { 'locky': [ 'ecsirt:malicious-code="ransomware"', 'misp-galaxy
|
||||||
dependingtags = { 'tlp:white': [ 'circl:osint-feed' ]
|
dependingtags = { 'tlp:white': [ 'circl:osint-feed' ]
|
||||||
}
|
}
|
||||||
|
|
||||||
|
# Known identifiers for forwarded messages
|
||||||
|
forward_identifiers = { b'-------- Forwarded Message --------', b'Begin forwarded message:' }
|
||||||
|
|
||||||
# Tags to add when hashes are found (e.g. to do automatic expansion)
|
# Tags to add when hashes are found (e.g. to do automatic expansion)
|
||||||
hash_only_tags = { 'TODO:VT-ENRICHMENT' }
|
hash_only_tags = { 'TODO:VT-ENRICHMENT' }
|
||||||
|
|
Loading…
Reference in New Issue