Merge pull request #98 from liviuvalsan/domain_ips

Make sure that matching attributes are consistent for lists that include domains

lists/alexa/list.json

@@ -1,7 +1,8 @@
 {
   "matching_attributes": [
     "hostname",
-    "domain"
+    "domain",
+    "domain|ip"
   ],
   "description": "Event contains one or more entries from the top 1000 of the most used website (Alexa).",
   "list": [

lists/cisco_top1000/list.json

@@ -1,7 +1,8 @@
 {
   "matching_attributes": [
     "hostname",
-    "domain"
+    "domain",
+    "domain|ip"
   ],
   "description": "Event contains one or more entries from the top 1000 of the most used website (Cisco Umbrella).",
   "list": [

lists/microsoft-attack-simulator/list.json

@@ -2,6 +2,7 @@
   "matching_attributes": [
     "ip-src",
     "ip-dst",
+    "domain",
     "domain|ip",
     "hostname"
   ],