Changed matching algorithm to string
Example for a dangerous entry: dropbox.com with the hostname algorithm and url as a valid attribute type means that https://dropbox.com/malicious/files.exe would get excluded from the automation systems when using the warninglist. I've changed the algorithm to full string matches.pull/163/head
parent
fa7cbb52f7
commit
7c1de70ce0
|
@ -13,7 +13,7 @@ def process(files, dst):
|
|||
'description': "Event contains one or more entries from the top 500 of the most used domains (Mozilla).",
|
||||
'version': get_version(),
|
||||
'name': "Top 500 domains and pages from https://moz.com/top500",
|
||||
'type': 'hostname',
|
||||
'type': 'string',
|
||||
'list': [],
|
||||
'matching_attributes': ['hostname', 'domain', 'uri', 'url']
|
||||
}
|
||||
|
|
Loading…
Reference in New Issue