policy/frameworks/intel/whitelist.zeek

Intel

This script enables whitelisting for intelligence items.

Namespace:Intel
Imports:base/frameworks/intel

Summary

Redefinitions

Intel::MetaData: record
New Fields:

Intel::MetaData

whitelist: bool &default = F &optional

A boolean value to indicate whether the item is whitelisted.

Detailed Interface