Table of Contents
This script enables notice generation for intelligence matches.
Intel
base/frameworks/intel, base/frameworks/notice
Intel::MetaData: record
Intel::MetaData
record
bool
&default
F
&optional
A boolean value to allow the data itself to represent if the indicator that this metadata is attached to is notice worthy.
Intel::Where
Restrictions on when notices are created to only create them if the do_notice field is T and the notice was seen in the indicated location.
Notice::Type: enum
Notice::Type
enum
Intel::Notice: This notice is generated when an intelligence indicator is denoted to be notice-worthy.
Intel::Notice