[IntelMQ-dev] Shadowserver parser extract_cve_from_tag

Thomas Hungenberg th at cert-bund.de
Thu Feb 8 11:25:34 CET 2024


Hi elsif,

the PR for extract_cve_from_tag was merged into develop yesterday for the upcoming release.

Would you like to make the corresponding changes for scan_http_vulnerable and
scan6_http_vulnerable to the schema as shown below?


     - Thomas


On 05.02.24 10:03, Thomas Hungenberg via IntelMQ-dev wrote:
> @elsif: If the PR is accepted, would you like to change the schema
> for scan_http_vulnerable and scan6_http_vulnerable like this?
> 
>           [
>              "extra.",
>              "tag",
>              "validate_to_none"
>           ],
> +        [
> +           "extra.cve",
> +           "tag",
> +           "extract_cve_from_tag"
> +        ],




More information about the IntelMQ-dev mailing list