From fc1dbf6eb41bf8894cd49958f8b0476c46a862c5 Mon Sep 17 00:00:00 2001
From: Shivani Bhardwaj <shivani@oisf.net>
Date: Fri, 7 Mar 2025 16:36:56 +0530
Subject: [PATCH] schema: add rule keyword mapping for dcerpc

---
 etc/schema.json | 21 ++++++++++++++++++---
 1 file changed, 18 insertions(+), 3 deletions(-)

diff --git a/etc/schema.json b/etc/schema.json
index 3f88e13367..adfa1c40f7 100644
--- a/etc/schema.json
+++ b/etc/schema.json
@@ -539,10 +539,20 @@
                                 "type": "integer"
                             },
                             "uuid": {
-                                "type": "string"
+                                "type": "string",
+                                "suricata": {
+                                    "keywords": [
+                                        "dcerpc.iface"
+                                    ]
+                                }
                             },
                             "version": {
-                                "type": "string"
+                                "type": "string",
+                                "suricata": {
+                                    "keywords": [
+                                        "dcerpc.iface"
+                                    ]
+                                }
                             }
                         },
                         "additionalProperties": false
@@ -555,7 +565,12 @@
                             "type": "integer"
                         },
                         "opnum": {
-                            "type": "integer"
+                            "type": "integer",
+                            "suricata": {
+                                "keywords": [
+                                    "dcerpc.opnum"
+                                ]
+                            }
                         },
                         "stub_data_size": {
                             "type": "integer"