mirror of https://github.com/OISF/suricata
You cannot select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
19 lines
450 B
ReStructuredText
19 lines
450 B
ReStructuredText
2 years ago
|
SMTP Keywords
|
||
|
|
=============
|
||
|
|
|
||
|
|
.. role:: example-rule-options
|
||
|
|
|
||
|
|
file.name
|
||
|
|
---------
|
||
|
|
|
||
|
|
The ``file.name`` keyword can be used at the SMTP application level.
|
||
|
|
|
||
|
|
Signature Example:
|
||
|
|
|
||
|
|
.. container:: example-rule
|
||
|
|
|
||
|
|
alert smtp any any -> any any (msg:"SMTP file.name usage"; \
|
||
|
|
:example-rule-options:`file.name; content:"winmail.dat";` \
|
||
|
|
classtype:bad-unknown; sid:1; rev:1;)
|
||
|
|
|
||
|
|
For additional information on the ``file.name`` keyword, see :doc:`file-keywords`.
|