policy/protocols/smtp/detect-suspicious-orig.zeek¶
-
SMTP
¶
Namespace: | SMTP |
---|---|
Imports: | base/frameworks/notice/main.zeek, base/protocols/smtp/main.zeek |
Summary¶
Runtime Options¶
SMTP::suspicious_origination_countries : set &redef |
Places where it’s suspicious for mail to originate from represented as all-capital, two character country codes (e.g., US). |
SMTP::suspicious_origination_networks : set &redef |
Redefinitions¶
Notice::Type : enum |