version-changes.zeek

Software

Provides the possibility to define software names that are interesting to watch for changes. A notice is generated if software versions change on a host.

Namespace:: Software
Imports:: base/frameworks/notice, base/frameworks/software

Summary

Runtime Options

Software::interesting_version_changes: set &redef

Some software is more interesting when the version changes and this is a set of all software that should raise a notice when a different version is seen on a host.

Redefinitions

Notice::Type: enum

Software::Software_Version_Change: For certain software, a version changing may matter.

Detailed Interface

Runtime Options

Software::interesting_version_changes 

Type:: set [string]
Attributes:: &redef
Default:: {}

Some software is more interesting when the version changes and this is a set of all software that should raise a notice when a different version is seen on a host.