You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
suricata/doc/userguide/rules
Alice Akaki 5d6a072e35 detect: add email.to keyword
email.to matches on MIME EMAIL TO
This keyword maps to the EVE field email.to[]
It is a sticky buffer
Supports prefiltering

Ticket: #7596
2 years ago
..
dataset-examples
…
dns-keywords
…
fast-pattern
…
flow-keywords
…
header-keywords
…
http-keywords
…
intro
…
normalized-buffers
…
payload-keywords
…
pcre
…
rule-types userguide: explain rule types and categorization 2 years ago
app-layer.rst
…
base64-keywords.rst detect: limit base64_decode `bytes` to 64KiB 2 years ago
bypass-keyword.rst
…
config.rst
…
datasets.rst
…
dcerpc-keywords.rst
…
decode-layer.rst doc/decode-events: new: unknown event description 2 years ago
dhcp-keywords.rst
…
differences-from-snort.rst
…
dnp3-keywords.rst
…
dns-keywords.rst dns: add keywords for additionals and authorities rrnames 2 years ago
email-keywords.rst detect: add email.to keyword 2 years ago
enip-keyword.rst
…
fast-pattern-explained.rst
…
file-keywords.rst
…
flow-keywords.rst flow/pkts: allow matching on either direction 2 years ago
ftp-keywords.rst doc: Add ftp.command sticky buffer 2 years ago
header-keywords.rst userguide/header-keywords: fix typos, adjust format 2 years ago
http-keywords.rst
…
http2-keywords.rst
…
ike-keywords.rst
…
index.rst detect: add email.from 2 years ago
integer-keywords.rst detect/integers: add support for negated strings when enum is used 2 years ago
intro.rst
…
ip-reputation-rules.rst
…
ipaddr.rst
…
ja-keywords.rst
…
kerberos-keywords.rst
…
ldap-keywords.rst detect: add ldap.responses.message 2 years ago
lua-detection.rst
…
meta.rst requires: support requires check for keyword 2 years ago
modbus-keyword.rst
…
mqtt-keywords.rst
…
multi-buffer-matching.rst
…
nfs-keywords.rst
…
noalert.rst
…
payload-keywords.rst
…
prefilter-keywords.rst
…
quic-keywords.rst
…
rfb-keywords.rst
…
rule-types.rst doc/rule-types: remove trailing underscore 2 years ago
sip-keywords.rst
…
smb-keywords.rst
…
smtp-keywords.rst detect/smtp: smtp.rcpt_to keyword 2 years ago
snmp-keywords.rst
…
ssh-keywords.rst
…
tag.rst
…
thresholding.rst doc/threshold: Threshold keyword clarifications 2 years ago
tls-keywords.rst
…
transforms.rst
…
vlan-keywords.rst detect: add vlan.layers keyword 2 years ago
websocket-keywords.rst
…
xbits.rst
…