Merge pull request #47 from elhoim/patch-1
Changed matching algorithm to domain to avoid false positive matchespull/48/head
commit
ce4fffc339
|
@ -1296,8 +1296,8 @@
|
||||||
"domain",
|
"domain",
|
||||||
"domain|ip"
|
"domain|ip"
|
||||||
],
|
],
|
||||||
"type": "substring",
|
"type": "hostname",
|
||||||
"description": "Event contains one or more TLDs as attribute with an IDS flag set",
|
"description": "Event contains one or more TLDs as attribute with an IDS flag set",
|
||||||
"version": 3,
|
"version": 4,
|
||||||
"name": "TLDs as known by IANA"
|
"name": "TLDs as known by IANA"
|
||||||
}
|
}
|
||||||
|
|
Loading…
Reference in New Issue