[IntelMQ-dev] Shadowserver parser extract_cve_from_tag

elsif elsif at shadowserver.org
Thu Feb 8 16:16:22 CET 2024


The field has been added to the schema for both reports.

On 2/8/24 2:25 AM, Thomas Hungenberg wrote:
> Hi elsif,
>
> the PR for extract_cve_from_tag was merged into develop yesterday for 
> the upcoming release.
>
> Would you like to make the corresponding changes for 
> scan_http_vulnerable and
> scan6_http_vulnerable to the schema as shown below?
>
>
>     - Thomas
>
>
> On 05.02.24 10:03, Thomas Hungenberg via IntelMQ-dev wrote:
>> @elsif: If the PR is accepted, would you like to change the schema
>> for scan_http_vulnerable and scan6_http_vulnerable like this?
>>
>>           [
>>              "extra.",
>>              "tag",
>>              "validate_to_none"
>>           ],
>> +        [
>> +           "extra.cve",
>> +           "tag",
>> +           "extract_cve_from_tag"
>> +        ],
>
>


More information about the IntelMQ-dev mailing list