Merge pull request #98 from liviuvalsan/domain_ips
Make sure that matching attributes are consistent for lists that include domainspull/100/head
commit
61e9ad96f1
|
@ -1,7 +1,8 @@
|
||||||
{
|
{
|
||||||
"matching_attributes": [
|
"matching_attributes": [
|
||||||
"hostname",
|
"hostname",
|
||||||
"domain"
|
"domain",
|
||||||
|
"domain|ip"
|
||||||
],
|
],
|
||||||
"description": "Event contains one or more entries from the top 1000 of the most used website (Alexa).",
|
"description": "Event contains one or more entries from the top 1000 of the most used website (Alexa).",
|
||||||
"list": [
|
"list": [
|
||||||
|
|
|
@ -1,7 +1,8 @@
|
||||||
{
|
{
|
||||||
"matching_attributes": [
|
"matching_attributes": [
|
||||||
"hostname",
|
"hostname",
|
||||||
"domain"
|
"domain",
|
||||||
|
"domain|ip"
|
||||||
],
|
],
|
||||||
"description": "Event contains one or more entries from the top 1000 of the most used website (Cisco Umbrella).",
|
"description": "Event contains one or more entries from the top 1000 of the most used website (Cisco Umbrella).",
|
||||||
"list": [
|
"list": [
|
||||||
|
|
|
@ -2,6 +2,7 @@
|
||||||
"matching_attributes": [
|
"matching_attributes": [
|
||||||
"ip-src",
|
"ip-src",
|
||||||
"ip-dst",
|
"ip-dst",
|
||||||
|
"domain",
|
||||||
"domain|ip",
|
"domain|ip",
|
||||||
"hostname"
|
"hostname"
|
||||||
],
|
],
|
||||||
|
|
Loading…
Reference in New Issue