policy/frameworks/intel/whitelist.zeek

Intel

This script enables whitelisting for intelligence items.

Namespace

Intel

Imports

base/frameworks/intel

Summary

Redefinitions

Intel::MetaData: record

New Fields

Intel::MetaData

whitelist: bool &default = F &optional

A boolean value to indicate whether the item is whitelisted.

Detailed Interface