Package: policy/frameworks/notice
policy/frameworks/notice/__load__.zeek
policy/frameworks/notice/extend-email/hostnames.zeek
Loading this script extends the
Notice::ACTION_EMAIL
action by appending to the email the hostnames associated withNotice::Info
’s src and dst fields as determined by a DNS lookup.
policy/frameworks/notice/actions/drop.zeek
This script extends the built in notice code to implement the IP address dropping functionality.