Documentation
¶
Index ¶
Constants ¶
View Source
const MIME_TYPE_MISMATCH_MODIFIER_NAME = "mime_type_mismatch"
View Source
const RARE_SIGNATURE_MODIFIER_NAME = "rare_signature"
Variables ¶
This section is empty.
Functions ¶
This section is empty.
Types ¶
type Modifier ¶
type Modifier struct {
Database *database.DB
ImportID util.FixedString
Config *config.Config
ModifierWorkers int
// contains filtered or unexported fields
}
func NewModifier ¶
type ThreatModifier ¶
type ThreatModifier struct {
AnalyzedAt int64 `ch:"analyzed_at"`
ImportID util.FixedString `ch:"import_id"`
Hash util.FixedString `ch:"hash"`
Src net.IP `ch:"src"`
Dst net.IP `ch:"dst"`
SrcNUID uuid.UUID `ch:"src_nuid"`
DstNUID uuid.UUID `ch:"dst_nuid"`
FQDN string `ch:"fqdn"`
LastSeen time.Time `ch:"last_seen"`
ModifierName string `ch:"modifier_name"`
ModifierScore float64 `ch:"modifier_score"`
}
Click to show internal directories.
Click to hide internal directories.