Thank you. The schema update has been published.
Regards,
Jason
On 12/5/24 4:42 AM, Kamil Mankowski via IntelMQ-dev wrote:
It looks good to me :)
Best regards
// Kamil Mańkowski mankowski@cert.at - T: +43 676 898 298 7204 // CERT Austria - https://www.cert.at/ // CERT.at GmbH, FB-Nr. 561772k, HG Wien
On 12/3/24 17:25, elsif wrote:
Thank you for your comments.
Here are the changes based on your feedback:
"scan_msrpc" : { "constant_fields" : { "classification.identifier" : "accessible-msrpc", "classification.taxonomy" : "vulnerable", "classification.type" : "potentially-unwanted-accessible" }, "feed_name" : "Accessible-MS-RPC-Endpoint-Mapper", "file_name" : "scan_msrpc", "optional_fields" : [ [ "extra.msrpc_version", "version", "convert_float" ],
...
"url" : "https://www.shadowserver.org/what-we-do/network-reporting/ms-rpc-endpoint-ma..."
}
Please let me if that know if any changes are needed or it is ready to publish.
Regards,
Jason
IntelMQ-dev mailing list https://lists.cert.at/cgi-bin/mailman/listinfo/intelmq-dev https://docs.intelmq.org/
IntelMQ-dev mailing list https://lists.cert.at/cgi-bin/mailman/listinfo/intelmq-dev https://docs.intelmq.org/