[IntelMQ-dev] RFC: scan_msrpc report
elsif
elsif at shadowserver.org
Tue Dec 3 17:25:51 CET 2024
Thank you for your comments.
Here are the changes based on your feedback:
"scan_msrpc" : {
"constant_fields" : {
"classification.identifier" : "accessible-msrpc",
"classification.taxonomy" : "vulnerable",
"classification.type" : "potentially-unwanted-accessible"
},
"feed_name" : "Accessible-MS-RPC-Endpoint-Mapper",
"file_name" : "scan_msrpc",
"optional_fields" : [
[
"extra.msrpc_version",
"version",
"convert_float"
],
...
"url" :
"https://www.shadowserver.org/what-we-do/network-reporting/ms-rpc-endpoint-mapper-report"
}
Please let me if that know if any changes are needed or it is ready to
publish.
Regards,
Jason
More information about the IntelMQ-dev
mailing list