Merge pull request #47 from elhoim/patch-1
Changed matching algorithm to domain to avoid false positive matchespull/48/head
commit
ce4fffc339
|
@ -1296,8 +1296,8 @@
|
|||
"domain",
|
||||
"domain|ip"
|
||||
],
|
||||
"type": "substring",
|
||||
"type": "hostname",
|
||||
"description": "Event contains one or more TLDs as attribute with an IDS flag set",
|
||||
"version": 3,
|
||||
"version": 4,
|
||||
"name": "TLDs as known by IANA"
|
||||
}
|
||||
|
|
Loading…
Reference in New Issue