From 7c1de70ce0af48f9b18f99cf170d91acbccc9b1e Mon Sep 17 00:00:00 2001 From: Andras Iklody Date: Wed, 16 Sep 2020 00:27:03 +0200 Subject: [PATCH] Changed matching algorithm to string Example for a dangerous entry: dropbox.com with the hostname algorithm and url as a valid attribute type means that https://dropbox.com/malicious/files.exe would get excluded from the automation systems when using the warninglist. I've changed the algorithm to full string matches. --- tools/generate_moz-top500.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/tools/generate_moz-top500.py b/tools/generate_moz-top500.py index eb04d7a..f420108 100755 --- a/tools/generate_moz-top500.py +++ b/tools/generate_moz-top500.py @@ -13,7 +13,7 @@ def process(files, dst): 'description': "Event contains one or more entries from the top 500 of the most used domains (Mozilla).", 'version': get_version(), 'name': "Top 500 domains and pages from https://moz.com/top500", - 'type': 'hostname', + 'type': 'string', 'list': [], 'matching_attributes': ['hostname', 'domain', 'uri', 'url'] }