[IntelMQ-dev] RFC: scan_msrpc report

elsif elsif at shadowserver.org
Tue Dec 3 17:25:51 CET 2024


Thank you for your comments.

Here are the changes based on your feedback:

    "scan_msrpc" : {
       "constant_fields" : {
          "classification.identifier" : "accessible-msrpc",
          "classification.taxonomy" : "vulnerable",
          "classification.type" : "potentially-unwanted-accessible"
       },
       "feed_name" : "Accessible-MS-RPC-Endpoint-Mapper",
       "file_name" : "scan_msrpc",
       "optional_fields" : [
          [
             "extra.msrpc_version",
             "version",
             "convert_float"
          ],

   ...

       "url" : 
"https://www.shadowserver.org/what-we-do/network-reporting/ms-rpc-endpoint-mapper-report"

   }

Please let me if that know if any changes are needed or it is ready to 
publish.

Regards,

Jason




More information about the IntelMQ-dev mailing list