Thank you for your comments.
Here are the changes based on your feedback:
"scan_msrpc" : { "constant_fields" : { "classification.identifier" : "accessible-msrpc", "classification.taxonomy" : "vulnerable", "classification.type" : "potentially-unwanted-accessible" }, "feed_name" : "Accessible-MS-RPC-Endpoint-Mapper", "file_name" : "scan_msrpc", "optional_fields" : [ [ "extra.msrpc_version", "version", "convert_float" ],
...
"url" : "https://www.shadowserver.org/what-we-do/network-reporting/ms-rpc-endpoint-ma..."
}
Please let me if that know if any changes are needed or it is ready to publish.
Regards,
Jason