You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
suricata/doc/userguide/rules
Alice Akaki 5d6a072e35 detect: add email.to keyword
email.to matches on MIME EMAIL TO
This keyword maps to the EVE field email.to[]
It is a sticky buffer
Supports prefiltering

Ticket: #7596
5 months ago
..
dataset-examples
dns-keywords
fast-pattern
flow-keywords
header-keywords
http-keywords
intro
normalized-buffers
payload-keywords
pcre
rule-types userguide: explain rule types and categorization 7 months ago
app-layer.rst
base64-keywords.rst detect: limit base64_decode `bytes` to 64KiB 5 months ago
bypass-keyword.rst
config.rst
datasets.rst detect/datasets: implement unset command 11 months ago
dcerpc-keywords.rst
decode-layer.rst doc/decode-events: new: unknown event description 7 months ago
dhcp-keywords.rst
differences-from-snort.rst
dnp3-keywords.rst
dns-keywords.rst dns: add keywords for additionals and authorities rrnames 6 months ago
email-keywords.rst detect: add email.to keyword 5 months ago
enip-keyword.rst
fast-pattern-explained.rst
file-keywords.rst
flow-keywords.rst flow/pkts: allow matching on either direction 7 months ago
ftp-keywords.rst doc: Add ftp.command sticky buffer 7 months ago
header-keywords.rst userguide/header-keywords: fix typos, adjust format 5 months ago
http-keywords.rst
http2-keywords.rst http2: add frames support 11 months ago
ike-keywords.rst
index.rst detect: add email.from 5 months ago
integer-keywords.rst detect/integers: add support for negated strings when enum is used 6 months ago
intro.rst
ip-reputation-rules.rst doc/userguide: document iprep isset/isnotset 1 year ago
ipaddr.rst
ja-keywords.rst
kerberos-keywords.rst
ldap-keywords.rst detect: add ldap.responses.message 6 months ago
lua-detection.rst
meta.rst requires: support requires check for keyword 9 months ago
modbus-keyword.rst
mqtt-keywords.rst detect/mqtt: move keywords to rust 1 year ago
multi-buffer-matching.rst
nfs-keywords.rst
noalert.rst
payload-keywords.rst detect: absent keyword to test absence of sticky buffer 9 months ago
prefilter-keywords.rst
quic-keywords.rst
rfb-keywords.rst detect/rfb: move keywords to rust 1 year ago
rule-types.rst doc/rule-types: remove trailing underscore 5 months ago
sip-keywords.rst doc: add new sip keywords 11 months ago
smb-keywords.rst
smtp-keywords.rst detect/smtp: smtp.rcpt_to keyword 7 months ago
snmp-keywords.rst detect/snmp: move keywords to rust 1 year ago
ssh-keywords.rst ssh: frames support 1 year ago
tag.rst
thresholding.rst doc/threshold: Threshold keyword clarifications 7 months ago
tls-keywords.rst detect: add tls.alpn keyword 1 year ago
transforms.rst doc/transform: Correct typo 1 year ago
vlan-keywords.rst detect: add vlan.layers keyword 7 months ago
websocket-keywords.rst
xbits.rst detect/ssh: remove deprecated keywords 1 year ago