policy/frameworks/intel/whitelist.zeek

Intel

This script enables whitelisting for intelligence items.

Namespace:

Intel

Imports:

base/frameworks/intel

Summary

Redefinitions

Intel::MetaData: record

New Fields: Intel::MetaData whitelist: bool &default = F &optional A boolean value to indicate whether the item is whitelisted.

Detailed Interface