schema: add rule keyword mapping for dcerpc

6 months ago · fc1dbf6eb4
parent d8523d9d97
commit fc1dbf6eb4
1 changed files with 18 additions and 3 deletions
--- a/etc/schema.json
+++ b/etc/schema.json
@ -539,10 +539,20 @@
                                "type": "integer"
                            },
                            "uuid": {
-                                "type": "string"
+                                "type": "string",
+                                "suricata": {
+                                    "keywords": [
+                                        "dcerpc.iface"
+                                    ]
+                                }
                            },
                            "version": {
-                                "type": "string"
+                                "type": "string",
+                                "suricata": {
+                                    "keywords": [
+                                        "dcerpc.iface"
+                                    ]
+                                }
                            }
                        },
                        "additionalProperties": false
@ -555,7 +565,12 @@
                            "type": "integer"
                        },
                        "opnum": {
-                            "type": "integer"
+                            "type": "integer",
+                            "suricata": {
+                                "keywords": [
+                                    "dcerpc.opnum"
+                                ]
+                            }
                        },
                        "stub_data_size": {
                            "type": "integer"