mirror of https://github.com/MISP/misp-book
chg: fix typo
parent
f8930f4be8
commit
fc79339f94
|
@ -341,7 +341,7 @@ The system allows administrators to set up rules for regular expressions that wi
|
|||
### The purpose of Import Regexp entries
|
||||
|
||||
They can be used for several things, such as unifying the capitalisation of file paths for more accurate event correlation or to automatically censor the usernames and use system path variable names (changing C:\Users\UserName\Appdata\Roaming\file.exe to %APPDATA%\file.exe).
|
||||
The second use is blocking, if a regular expression is entered with a blacklistnk replacement, any event info or attribute value containing the expression will not be added. Please make sure the entered regexp expression follows the preg_replace pattern rules as described [here](http://php.net/manual/en/function.preg-replace.php)
|
||||
The second use is blocking, if a regular expression is entered with a blank replacement, any event info or attribute value containing the expression will not be added. Please make sure the entered regexp expression follows the preg_replace pattern rules as described [here](http://php.net/manual/en/function.preg-replace.php)
|
||||
|
||||
### Adding and modifying entries
|
||||
|
||||
|
|
Loading…
Reference in New Issue