policy/frameworks/intel/whitelist.zeek

Intel

This script enables whitelisting for intelligence items.

Namespace

Intel

Imports

base/frameworks/intel

Summary

Redefinitions

Intel::MetaData: record

New Fields Intel::MetaData whitelist: bool &default = F &optional A boolean value to indicate whether the item is whitelisted.

Detailed Interface